Healthcare CIOs Need to Address Two Areas Now Ahead of AI Adoption

Hospitals and health systems are struggling with shrinking rates, staff shortages, and increasing patient expectations, which make the balance between quality care and value-based models increasingly difficult. While AI is often seen as a quick fix, healthcare CIOs must quickly address fundamental gaps in cybersecurity, operations, and clinical staffing.

Cybersecurity

As we enter October, a month dedicated to cybersecurity awareness, it’s a fitting reminder for healthcare CIOs to prioritize one of the most pressing issues: cybersecurity. This month can serve as a starting point to reevaluate and strengthen cybersecurity measures in healthcare organizations.

A recent report by Sophos shows a sharp rise in ransomware attacks, with 73% of healthcare organizations affected in 2024, from 66% in 2023. Several factors drive this surge, including the growth of the skills of cybercriminals, the widespread use of legacy methods, and the increased attack space from health digitalization. The hybrid remote and in-person care model increased vulnerability by creating additional entry points for cyberattacks. The need to constantly review and improve their organization’s security has never been more apparent to CIOs.

Healthcare administrators face a critical dilemma when deciding whether to pay a ransom during a ransomware attack. According to a Sophos report, 60% of healthcare organizations hit by ransomware chose to pay the ransom. However, only 47% of those who paid can recover all their data. These numbers highlight the uncertainty and risk of relying on cyber criminals to restore access to critical systems.

The data on Ransomware attacks reminds healthcare CIOs that paying the ransom is not a guaranteed solution. Instead, investing in robust security and troubleshooting is essential to ensure data recovery without relying on ransom payments, breaking the cycle of attacks and discouraging cybercriminals. Experts in the healthcare industry recommend not paying the ransom.

The report also highlights the evolving nature of cyber insurance. Although it can moderate some of the ransom costs, getting coverage is becoming increasingly difficult. Many insurers are now requiring healthcare organizations to demonstrate advanced cybersecurity controls as a condition of coverage. This underscores the need for CIOs to balance reliance on cyber insurance with investing in preventative measures. A comprehensive cybersecurity strategy is essential in today’s digital health landscape.

IT and Clinical Teams Gap

A survey published by Symplr shows a disconnect between IT leaders and practitioners. Clinicians (72%) believe they should have more influence in purchasing software, while IT leaders (60%) and operational leaders (51%) are reluctant to involve them. Additionally, only 57% of physicians feel their hospital’s surgical software allows them to deliver the best patient care.

Healthcare CIOs have a long history of working with clinical leaders as chief medical officer or chief medical information officer. However, it is not just about including the doctor ‘super user’ in the selection of suppliers. It’s about catching them from the start. Accordingly, clinical leaders should involve IT early on when looking for technology solutions, not after the decision is made. This close communication between clinical and IT teams is essential in closing the gap and ensuring optimal patient care.

As we approach 2025, healthcare leaders must focus not only on AI but also on strengthening priorities such as cybersecurity and bridging the gaps between IT and clinical teams. While this effort may not be as simple as adopting AI, it is important to protect organizations and ensure sustainable progress. Prioritizing sustainable practices over rapid technological improvements will ultimately lead to long-term success and enable health systems to thrive in an increasingly digital world.