Healthcare organizations have invested heavily in cybersecurity, strengthening defenses, improving detection and response, and working to keep increasingly complex technology environments secure. But even the strongest defenses cannot eliminate every disruption.
Ransomware attacks still happen. Critical systems go offline. Vendors experience outages. Technology fails. And as healthcare becomes increasingly dependent on digital infrastructure, the consequences of those disruptions can extend well beyond IT.
That raises a different question for healthcare leaders: Are we prepared to keep caring for patients when the technology we depend on isn’t available?
From Prevention to Resilience
Cybersecurity conversations have traditionally focused heavily on prevention: How do we keep attackers out? How do we detect a threat? How quickly can we contain it?
Those questions remain critically important. But healthcare organizations also need to think about what happens when something gets through — or when the disruption isn’t caused by an attack at all.
A ransomware incident may take systems offline. A software or infrastructure failure can create similar challenges. A third-party vendor outage can suddenly affect a system that an organization relies on every day.
In each case, the question becomes less about whether the organization can prevent the disruption and more about whether it can continue operating through it. That is where resilience comes in.
What Cyber Resilience Looks Like
On October 27, I’ll be joined by Chad Wilson, CEO of Wild Duck Labs AI Research Lab, for a 30-minute conversation about what cyber resilience actually looks like in a healthcare environment. Chad is a former healthcare CISO with decades of experience in cybersecurity, risk and resilience across complex healthcare environments. His work today focuses on the intersection of AI, cybersecurity, human judgment, privacy and security.
Chad and I were together at Healthcare Innovation’s Summit in San Diego recently, where we had several conversations about the rapidly changing technology environment healthcare organizations are trying to manage.
One point that came through clearly is that the technology landscape itself is becoming more complicated. Organizations are managing more systems, more dependencies, more frequent changes and more potential points of failure. That creates an interesting challenge for healthcare leaders: How do you build resilience when the environment you’re trying to make resilient is constantly changing?
What Happens When the Systems Go Down?
One of the questions we’ll explore is what actually happens when a critical clinical system becomes unavailable.
It is easy to talk about downtime in the abstract. It is much harder to think through what happens when clinicians suddenly cannot access the information or tools they normally depend on to care for patients.
What needs to happen in the first hour? Who needs to be involved? What information needs to be available to clinicians? How do IT, cybersecurity, clinical leadership and operations work together? And perhaps most importantly, how long is an organization truly prepared to operate this way?
Chad has talked about the need for healthcare organizations to consider the possibility of longer periods of disruption rather than assuming that systems will always be restored quickly. That requires a different kind of planning — one that focuses not only on recovery, but on continuity of care while recovery is still underway.
Resilience Is Bigger Than Technology
There is another piece of this conversation that I think deserves more attention: resilience isn’t solely an IT or cybersecurity issue.
A technology outage becomes a patient-care issue very quickly. That means clinical leaders, operational leaders, emergency preparedness teams, communications professionals and others need to be part of the conversation before a disruption occurs, not simply brought in once something has gone wrong.
Communication is particularly important. During a prolonged disruption, people need to know what is happening, what they can and cannot rely on, where to get information and how decisions are being made.
Those aren’t technology questions. They’re organizational questions. And they are exactly the kinds of issues that can determine whether an organization is able to maintain safe, effective care when its normal systems aren’t available.
And Then There Is AI
Of course, we also can’t have a conversation about the future of healthcare technology without talking about AI.
AI may become an important part of cybersecurity, helping organizations identify threats, investigate incidents and automate certain processes. But it also introduces new dependencies, vulnerabilities and potential failure points.
As healthcare organizations increasingly incorporate AI into clinical and operational workflows, they will need to consider what happens when those systems are unavailable or produce unexpected results.
That makes the conversation about AI governance relevant to resilience as well. Chad has talked about governance in terms of ownership, judgment and accountability — the idea that technology should support human decision-making rather than determine it.
Those same principles have an important place in cybersecurity and resilience. Healthcare organizations ultimately have to remain accountable for how technology is deployed, how risks are managed and how patient care continues when technology doesn’t behave as expected.
What You’ll Learn
During this 30-minute conversation, we’ll examine:
- Why cybersecurity needs to encompass resilience, not simply prevention
- What cyber resilience means in a healthcare environment
- How increasing technology complexity affects an organization’s ability to withstand disruption
- What needs to happen when a critical clinical system suddenly goes offline
- What clinicians need from an effective downtime plan
- How IT, cybersecurity, clinical and operational leaders can prepare together
- Why communication becomes critical during a prolonged disruption
- How health systems should think about longer periods of downtime and recovery
- The role AI may play in strengthening cybersecurity — and the new risks it can introduce
- Why ownership, judgment and accountability are essential to resilience
- What healthcare leaders should be evaluating now to determine whether their organizations are truly prepared
For CIOs, CISOs, CMIOs, clinical and operational leaders, the conversation ultimately comes down to a very practical question: When something inevitably goes wrong, can your organization keep caring for patients?
The Digital Health Intelligence Series
This webinar is the third installment of Healthcare Innovation’s Digital Health Intelligence series, which brings together healthcare executives, clinicians, technology leaders and industry experts to examine the strategies and technologies reshaping healthcare.
The series is designed to look beyond the headlines and focus on the practical questions healthcare leaders are grappling with as they navigate transformation — including implementation, operational impact, financial sustainability, cybersecurity, governance and patient-centered care.
Each conversation takes a different angle, but the goal is the same: to help healthcare leaders make sense of where technology is heading and, more importantly, what it means for the organizations and people they serve.
Upcoming conversations will explore additional issues facing healthcare leaders, including:
- November 17: AI in Action: Transforming Revenue Cycle Management
- December 16: The Next Phase of AI Adoption: Governance, Ethics, and Accountability
Register Today
If your organization is thinking about cybersecurity not simply in terms of preventing the next attack, but in terms of being ready to continue operating when disruption occurs, I hope you’ll join us.
Cyber Resilience in Healthcare: Protecting Patient Care During the Inevitable
Tuesday, October 27, 2026
11:00 a.m. ET
Register for the webinar
You can also register for the full 2026 Healthcare Innovation Digital Health Intelligence Series.
I look forward to seeing you there!
