AI Deployment? Healthcare Leaders Must Consider Cybersecurity and Equity First

The following is a guest post from Tim Boltz, Head of Health Solutions at Carahsoft

Artificial intelligence is the most disruptive technology since the widespread adoption of the Internet. It could also make its way into industrial sectors, transforming their operations. The healthcare sector is no exception.

Healthcare organizations of all types are already exploring the potential of AI to improve patient care, ease the burden of workforce shortages, and accelerate new scientific discoveries. Some healthcare players are already conducting pilot projects to determine potential uses.

Deploying AI solutions in this rightly risk-averse sector will require addressing long-standing safety issues and fairness concerns before its full promise can be delivered.

Strengthening health networks

AI projects in healthcare organizations are generating interest and funding, but the industry must rethink its cybersecurity posture to prevent threats to patient safety and privacy. Healthcare organizations work with a wealth of data, leveraging all four types of data: personally identifiable information (PII), payment card industry (PCI) data, protected health information (PHI), and intellectual property (IP), making these organizations prime targets for cybercriminals.

Most healthcare organizations operate networks comprised of outdated legacy systems and a large number of internet-connected devices, such as imaging devices and monitors, creating an Internet of Medical Things (IoMT). The result is an extremely vulnerable attack surface rich in valuable patient, financial, and research information. Highly organized hackers deploy ransomware, knowing that the sensitivity and urgency of operations make healthcare organizations a high-value target.

However, healthcare organizations often don’t have the budget to replace outdated equipment or invest in the latest advancements in cybersecurity. Many are still recovering from the lasting effects of the pandemic and a workforce shortage that extends to their IT departments.

To dictate the standards for responsible network protection and the deployment of new technologies, the federal government must step in. In addition to helping vendors find the funding needed to secure this critical sector, agencies should also lead efforts to create more cybersecurity standards and incident response manuals. The Department of Health and Human Services’ release of a report on cybersecurity Risk management framework That’s a good start. Still, the healthcare sector could benefit from the industry-specific security standards that the government’s Cybersecurity Maturity Model Certification Program is creating for the defense industrial base.

Robust security practices would deter potential attackers, and healthcare organizations could focus on providing high-quality patient care, continuing research efforts, and adopting new technologies.

Ensuring equitable access and outcomes

AI in health is still in its infancy, but equity must be a primary consideration in policy and project development. Emerging technologies such as AI offer the opportunity to design health care delivery and clinical research systems that incorporate equity principles.

Some worry that AI could reinforce health disparities. For example, organizations could develop technology based on large datasets that could create institutional inequities, especially when those datasets are not vetted.

But many see technology as a way to reduce inequities. For patients, AI tools could more accurately spot and predict diseases from images or create personalized treatment options. More simply, calling offices with AI tools that optimize scheduling could reduce wait times and improve appointment availability. After all, having access to a doctor is the first step in any treatment plan.

For healthcare providers, AI can help relieve overworked staff. Automating administrative tasks can allow doctors and other frontline staff to focus on delivering quality patient care rather than paperwork. AI can also help overcome staffing challenges, boosting recruitment and retention efforts with tools that review job descriptions to remove biased language or improve training programs. In administrative departments, AI could help refine grant proposals, detect fraud, and speed up reimbursements.

Unlocking the potential of AI

To fully exploit the potential of AI, we need the support of regulators, innovation from the private sector, but also public participation, because developing an AI tool without data is impossible.

Data is fueling projects that could predict the next major outbreak, giving healthcare professionals time to prepare and refine their response plans. Key regulations like HIPAA still need to be modernized to account for the potential uses of AI. Regulators should take the time to ensure that rules account for new technological developments.

In December 2023, President Joe Biden released an executive decree HHS must lead policy and regulatory efforts to pave the way for safe, secure, and trusted use of AI in health care settings. However, health-focused agencies have opportunities to do more to drive adoption, such as by encouraging Medicare and Medicaid reimbursements.

The possibilities of artificial intelligence are still being discovered. By working together to improve safety and ensure equity, the federal government and health agencies can pave the way for revolutionary new treatments and better health outcomes.