Secure by design: Cybersecurity basics for health care

AI and governance: Building trustworthy systems in high stakes healthcare

As hospitals accelerate the adoption of artificial intelligence from clinical decision support to operational automation, the need for strong governance has never been greater. This episode explores how healthcare leaders can ensure AI tools are safe, transparent, ethical, and aligned with organizational values. We break down the practical components of AI governance: data oversight, model validation, regulatory compliance, workforce readiness, risk mitigation, and best practices. Through real-world examples and expert insights, listeners will learn how to design governance frameworks that protect patients, support clinicians, and create a trustworthy environment for innovation.

Secure by design: Cybersecurity basics for health care

Today's health care organizations operate at the intersection of life-saving technology and escalating digital risk. From ransomware targeting patient records to state-sponsored actors exploiting medical device vulnerabilities, the cyber threat landscape is growing faster and more sophisticated, than ever before. And with artificial intelligence now embedded across clinical and operational workflows, the stakes have never been higher. For this episode, we sit down with two seasoned cybersecurity experts from the WTW Cyber Risk Consulting team to break down what health care risk managers, frontline leaders and operational teams need to know right now: * Why health care remains one of the most targeted sectors and what makes it uniquely vulnerable to opportunistic criminals and nation-state actors alike * The dual role of AI in cybersecurity: how threat actors are weaponizing it to accelerate attacks, and how defenders can harness it for behavioral detection and faster response * The risks of shadow AI and unsanctioned large language models creating new attack surfaces inside your own organization * Practical steps to strengthen cyber resilience, from asset discovery and vulnerability management to third-party supply chain accountability * How to speak the language of the C-suite and financially quantify cyber risk to secure the budget and organizational buy-in your security program requires Joining host Joan Porcaro, Senior Vice President of Risk Services at WTW Healthcare, are Anthony Wilson, a former CIA and NSA intelligence professional and municipal CISO now leading cyber risk consulting at WTW and Omar Al-Shahery, a Senior Director on the WTW Cyber Risk Team with deep roots in FBI cyber threat intelligence and 22 years of defense intelligence experience. Because in health care, security isn't about being perfect. It's about being intentional, staying informed and never standing still.

Behind the glitch: Tracing AI in safety events

When a critical clinical event occurs, how do you know if AI played a role? In this episode, we dive into the emerging challenge of identifying and investigating AI-related incidents in healthcare [https://www.wtwco.com/en-us/industries/health-care]. Learn how to evaluate AI as a contributing factor, define what counts as an AI-related near miss and document safety concerns effectively. We also explore how to train staff to recognize and report errors in which AI may have had an impact or appear to have been a causal factor. If patient safety and technology oversight are on your radar, this conversation is a must-listen.

From risk to resolution: Preventing patient abandonment claims

This episode focuses on the essential components and best practices for drafting an effective and legally sound termination letter when ending the physician–patient relationship, emphasizing the need for a professional, nonconfrontational tone that prioritizes a smooth transition for the patient. The episode explains why providers are generally not required to give a reason for termination, outlines how to clearly communicate the effective date and emergency care timeframe — often 30 days — and highlights the importance of including resources for finding a new provider as well as instructions and forms for transferring medical records, all while adhering to HIPAA and state requirements regarding fees and access rights. The discussion also covers the rationale for avoiding direct referrals to specific clinicians, the need to tailor notice periods based on state rules and patient circumstances and the correct process for sending the letter via certified and standard mail to ensure proper documentation. Overall, this episode provides practical, detailed guidance to help practices protect patients, maintain compliance, and reduce risk when communicating the dissolution of care.

Challenges and barriers to termination

In this episode, we explore the complex operational, ethical and regulatory considerations involved in communicating the termination of a physician–patient relationship, including the internal challenges practices face, such as ensuring consistent workflows, preventing inadvertent rescheduling, managing difficult behaviors and maintaining nondiscriminatory processes. Our guests discuss barriers like fear of negative social media, longstanding patient ties and concerns about regulatory scrutiny, as well as how practices decide whether termination applies to an individual provider, a group, or an entire system while navigating EMTALA requirements. The conversation also covers patient appeals, voluntary withdrawals from care and when a formalized process is recommended to avoid misunderstandings or abandonment claims. Additionally, we highlight the significant risks, liabilities and CMS-related compliance exposures that arise from mishandled terminations, the patient's rights regarding records access and safe care transitions, and why tracking termination data is essential for identifying patterns, addressing bias, improving communication and strengthening policies.