Latest / Becker’s Healthcare Podcast / Cybersecurity Integration, AI Governance, and Building Resilient Healthcare Teams with Greg Sieg

Transcript

Cybersecurity Integration, AI Governance, and Building Resilient Healthcare Teams with Greg Sieg · Becker’s Healthcare Podcast

• 0:00
  - At Insight Global Health, we are dedicated to
• 0:02
  - helping you and improving health care for everyone.
• 0:05
  - That means building stronger teams and delivering sustainable
• 0:08
  - solutions that truly make a difference.
• 0:10
  - We offer a full spectrum of talent and
• 0:12
  - technical services and deliver cross industry expertise
• 0:15
  - to bring you innovative best practices to solve
• 0:18
  - the problems that we face in health care.
• 0:20
  - We're not just promising you results, we are
• 0:22
  - delivering them. Visit us at insightglobal.com.
• 0:26
  - Hi, everyone. I'm Liz Cassello.
• 0:28
  - I'm a writer for the Becker's team, and
• 0:30
  - I'm really excited
• 0:31
  - to be here at our annual meeting. And
• 0:35
  - we're gonna be doing a podcast episode with
• 0:37
  - Greg Sieg, chief information security officer at University
• 0:41
  - of Michigan Health Regional Network. We're so excited
• 0:44
  - to have you here. Yeah. Thank you for
• 0:45
  - having me. It's, it's great to be here.
• 0:47
  - The event's been, wonderful so far. Been been
• 0:50
  - learning a lot,
• 0:52
  - lot of different areas. So it's been been
• 0:54
  - great to be here. Really excited. And we're
• 0:55
  - excited to have you as well. So I
• 0:57
  - would love to hear a bit more about
• 0:58
  - your role, and if you could just give
• 1:00
  - an overview of the scope of it and
• 1:01
  - where you're coming from. Yeah. So, University of
• 1:05
  - Michigan,
• 1:06
  - or Michigan Medicine as as it's more commonly
• 1:08
  - referred to,
• 1:09
  - has
• 1:10
  - academic medical school and, community hub hospitals that,
• 1:14
  - have been acquired over the last few years.
• 1:16
  - I support the community hospitals,
• 1:18
  - across the the state.
• 1:20
  - That includes seven regional hospitals mainly in the
• 1:23
  - Lansing and Grand Rapids for your area,
• 1:26
  - and they're and they're off sites and and
• 1:27
  - such.
• 1:28
  - So my responsibility
• 1:30
  - is to oversee the cybersecurity operations,
• 1:33
  - you know, protecting the patient data, the the
• 1:35
  - company data,
• 1:36
  - as well as, you know, working on the
• 1:38
  - resiliency
• 1:39
  - of our programs,
• 1:41
  - within the community networks.
• 1:43
  - So what's commanding your attention right now as
• 1:45
  - a leader?
• 1:46
  - Yeah. So we've,
• 1:49
  - we've been in an acquisition mode, with with
• 1:52
  - purchasing Sparrow a couple years back.
• 1:54
  - So a lot of my work right now
• 1:55
  - has been focusing on the standardization
• 1:58
  - of our cybersecurity programs.
• 2:01
  - So bringing together,
• 2:03
  - our incident response, our our,
• 2:06
  - all the different layers, if you will.
• 2:08
  - And we've been working on that, really,
• 2:11
  - aligning to a NIST,
• 2:14
  - framework, if you will. And
• 2:17
  - we've got multiple different organizations, all at different
• 2:19
  - levels of that of that, path, of that
• 2:22
  - journey, you know. So,
• 2:24
  - a lot of the work has been focusing
• 2:26
  - on
• 2:27
  - aligning that aligning the people, the processes, and
• 2:30
  - the technologies,
• 2:32
  - you know, and
• 2:33
  - making sure that, you know, we're all working
• 2:36
  - towards the, you know, the same goal at
• 2:38
  - the end of the day,
• 2:39
  - which is, you know, securing the the organization,
• 2:42
  - as a whole.
• 2:44
  - So from your perspective as a leader, I
• 2:46
  - would love to hear what one recent decision
• 2:49
  - or pivot required the most of leadership conviction
• 2:52
  - from you,
• 2:53
  - especially when it comes to aligning people, resources,
• 2:56
  - or capabilities.
• 2:58
  - Yeah. The alignment
• 2:59
  - immediately feels like, you know, the majority of
• 3:01
  - my job right now. So
• 3:03
  - one of the the areas that we're really
• 3:05
  - focusing on right now is our identity security
• 3:07
  - program.
• 3:08
  - We have a lot of work coming up
• 3:10
  - with, bringing our Epic
• 3:12
  - EHRs together under under one roof if and,
• 3:15
  - that is a a challenge when you when
• 3:18
  - you have multiple organizations
• 3:20
  - and,
• 3:21
  - you know, different processes that are being run.
• 3:24
  - One of the cornerstone pieces
• 3:26
  - of a security program is your is the
• 3:28
  - identity program. So, bringing that together,
• 3:31
  - but we've got
• 3:33
  - multiple years
• 3:34
  - of different configurations, different cultures,
• 3:38
  - that have to shift with that.
• 3:40
  - So it's not as simple as selecting a
• 3:43
  - tool and saying, we're just gonna go implement
• 3:45
  - and run with this.
• 3:47
  - You need to work with with the people.
• 3:49
  - You need to work with the departments.
• 3:52
  - It's a big change,
• 3:54
  - from the organizations
• 3:56
  - based on how they're used to onboarding
• 3:58
  - onboarding people, you know. And it affects every
• 4:01
  - layer,
• 4:02
  - of of the organization when you do that.
• 4:04
  - So
• 4:05
  - making sure that you don't have a mess
• 4:07
  - up, that you're working with HR, that you're
• 4:09
  - working with,
• 4:10
  - the clinical leadership,
• 4:12
  - as well as working with with the teams
• 4:14
  - in IT.
• 4:16
  - You know, a lot of that,
• 4:17
  - you know, sometimes gets missed. You you maybe
• 4:20
  - you're communicating out with the with the organization,
• 4:23
  - but you're not doing that communication in the
• 4:24
  - team. So that alignment, that getting in sync
• 4:28
  - with the teams, it's probably been one of
• 4:29
  - my biggest focuses.
• 4:31
  - You know, and sometimes it feels like you're
• 4:33
  - doing a lot of repeating,
• 4:34
  - but that's necessary. And it's necessary to make
• 4:37
  - sure that you're even yourself driving that same
• 4:39
  - message because it's it's very easy to get
• 4:42
  - ahead of yourself
• 4:43
  - and start getting off messaging and and and
• 4:46
  - making confusion. So
• 4:48
  - just really just keep hitting home, you know,
• 4:50
  - the alignment of of the the goal that
• 4:53
  - we're all looking to do together,
• 4:55
  - and making sure that we're all running in
• 4:57
  - the same direction.
• 4:58
  - So with that example of tool and cultural
• 5:01
  - alignment, looking forward, how do you think that
• 5:04
  - is changing how you're gonna approach decision making
• 5:07
  - and readiness going forward?
• 5:10
  - Yeah. It it makes it more challenging. I
• 5:12
  - think it's easy, you know, to to replace
• 5:14
  - the tool.
• 5:15
  - It's much harder to
• 5:17
  - adjust the culture, you know, and we have
• 5:19
  - three different cultures.
• 5:21
  - And it's been a big pride of ours
• 5:22
  - that, you know, we're not doing a rip
• 5:24
  - and replace. We're we're going in, We're working.
• 5:27
  - We're trying to build those those cultures up.
• 5:29
  - The the organizations,
• 5:32
  - are very different in in how the the
• 5:34
  - the folks work together,
• 5:36
  - and we don't wanna lose that. You know,
• 5:38
  - that's that's their identity. That's,
• 5:40
  - you know, how West Michigan works, how, you
• 5:42
  - know, Central Michigan, and and and how Ann
• 5:44
  - Arbor works. So,
• 5:45
  - we wanna make sure that we're keeping that,
• 5:47
  - but we're we're all still, you know, paddling
• 5:49
  - the same way, and we all you know,
• 5:51
  - and at the end of the day, we
• 5:52
  - do have the same objective. The the objective
• 5:53
  - in health care is patient is taking care
• 5:55
  - of the patients, taking care of patient care,
• 5:57
  - which
• 5:58
  - makes it fairly easy, you know, when you
• 6:00
  - think about it. But there's a lot of
• 6:02
  - moving parts to,
• 6:04
  - bringing everybody and and making sure everybody's, you
• 6:06
  - know, kinda beaten to that same drum.
• 6:08
  - And, you know, it can be fun at
• 6:10
  - times. I'll I'll say it that way. I
• 6:12
  - I like to look at things, on the
• 6:14
  - more positive side. Security can always be,
• 6:17
  - you know, kind of known as as the
• 6:19
  - blockers or or, you know, not so fun.
• 6:21
  - But, you know, if we're not having fun,
• 6:23
  - we're not doing the right things.
• 6:26
  - So thinking a little bit more broadly,
• 6:28
  - when you're thinking about advice for people in
• 6:30
  - your type of role with information security,
• 6:33
  - what are some of the forces reshaping health
• 6:35
  - care and that space specifically right now, and
• 6:37
  - where do you believe leaders need to be
• 6:39
  - more decisive,
• 6:40
  - especially when it comes to balancing speed, risk,
• 6:43
  - and having the right teams in place?
• 6:45
  - Yeah.
• 6:46
  - You know, I'd I'd be,
• 6:48
  - I'd be lying if I didn't put AI
• 6:50
  - in here and and and, you know, it's
• 6:52
  - it's the buzzword. I I kinda hate bringing
• 6:54
  - it up at times, but it it is
• 6:56
  - probably the biggest driving force that we have
• 6:59
  - right now. You know, for years, we were
• 7:00
  - on cloud security. We're on we're in different
• 7:02
  - areas, but, you know, AI is definitely driving,
• 7:05
  - everything right now.
• 7:07
  - And it's not driving it just from IT,
• 7:09
  - it's driving it from the organization.
• 7:12
  - In many organizations, including ours,
• 7:14
  - the CMIO with the, you know, the the
• 7:17
  - chief data officers, all these other departments
• 7:19
  - have AI initiatives of their own that they're
• 7:21
  - driving that we're a part of. You know?
• 7:24
  - So it's not filtered,
• 7:26
  - like previous technology
• 7:27
  - that really ran through the CIO or the
• 7:30
  - CDIO,
• 7:31
  - before it it could go anywhere. So that
• 7:34
  - brings a lot of other challenges together.
• 7:37
  - And that's where, you know, again, you get
• 7:39
  - back to the people, the processes,
• 7:41
  - and making sure that, you know, training wise,
• 7:44
  - you're you're bringing everybody in and you all
• 7:46
  - know what's going on. It's very easy right
• 7:48
  - now
• 7:49
  - for
• 7:50
  - one part of the organization, say, we're gonna
• 7:52
  - go into, say, ambient and another say, well,
• 7:55
  - we're gonna we're gonna use this tool for,
• 7:58
  - you know, for,
• 8:00
  - radiology and and and imaging
• 8:02
  - and get people kind of off track of
• 8:04
  - what the priority is. So we work with
• 8:06
  - a lot of communication, bringing those teams,
• 8:09
  - having governance,
• 8:11
  - committees that kinda help,
• 8:13
  - make sure what is our primary focus and
• 8:15
  - that we're all working, you know, in the
• 8:16
  - same direction.
• 8:18
  - But, you know, it's a it's a challenge
• 8:20
  - right now that I don't think we've faced
• 8:22
  - in in a while.
• 8:24
  - It's not been that we haven't faced this
• 8:25
  - before,
• 8:26
  - but I think,
• 8:28
  - the speed at which it's running, it's,
• 8:31
  - it's very different. So,
• 8:33
  - we're we're playing catch up a little bit,
• 8:35
  - but,
• 8:36
  - you know, I see promise in in areas
• 8:38
  - where we're starting to get ahead of it,
• 8:40
  - and people are starting to understand, you know,
• 8:43
  - that, you know, it's it's not just
• 8:45
  - IT's job to do, AI. It's it's everybody's
• 8:48
  - job just, you know, like anything else. Yeah.
• 8:51
  - I don't think y'all are alone in the
• 8:52
  - catch up game.
• 8:54
  - So as uncertainty takes hold with AI and
• 8:57
  - also just other challenges in the organization,
• 9:00
  - what leadership habit or mindset has been most
• 9:02
  - critical in grounding you and also
• 9:05
  - propelling your organization and people forward, especially as
• 9:08
  - you're navigating that cultural alignment?
• 9:11
  - Yeah. I think that's something that,
• 9:13
  - health care in general
• 9:15
  - is really strong at. We're we're really resilient,
• 9:18
  - and I think that holds really true to
• 9:20
  - this. We're we're able to adapt
• 9:22
  - when
• 9:22
  - tough things come in, when we have bad
• 9:25
  - things that happen and and and nurses and
• 9:27
  - doctors have take over.
• 9:29
  - We're really good at at in the moment,
• 9:31
  - making sure we're doing the right things.
• 9:33
  - I I think it's a it's just a
• 9:35
  - major strength across health care and something that,
• 9:37
  - you know, sometimes gets overlooked of of just
• 9:39
  - how well we come together in crisis.
• 9:41
  - So that's where where I'm kinda looking at
• 9:45
  - making sure we have strong
• 9:47
  - connections with within our departments or community,
• 9:50
  - making sure that, you know, we're all working
• 9:53
  - towards that that same mission. And and that's,
• 9:55
  - again, another one that's really easy in health
• 9:57
  - care. So when I find myself getting,
• 10:01
  - maybe
• 10:02
  - a a little bit, overwhelmed,
• 10:04
  - you know, from something that's going on, and
• 10:06
  - and that's very easy to do right now
• 10:08
  - with everything coming at us. I I sit
• 10:10
  - back and I I just kinda think about
• 10:12
  - what the mission is and what what really
• 10:14
  - the overall goal is. And that kinda helps
• 10:16
  - me get kinda regrounded,
• 10:18
  - you know, communicating that with my team and
• 10:19
  - making sure that, you know, we all know
• 10:21
  - that, you know, as these stressors are coming
• 10:23
  - at us,
• 10:24
  - the good that we're that we're bringing with
• 10:26
  - this and and the change that we're making,
• 10:28
  - you know, just it it gives you kind
• 10:31
  - of a reset and allows you to keep
• 10:32
  - going.
• 10:33
  - So one last big question. As technology becomes
• 10:36
  - more embedded in daily operations,
• 10:39
  - how are you ensuring that digital investments support
• 10:41
  - rather than strain your workforce?
• 10:44
  - Yeah. I mean, that's that's why we're here.
• 10:48
  - Technology has to reduce burden. It has to
• 10:51
  - enhance our resiliency,
• 10:52
  - and it needs to empower our workforce.
• 10:55
  - If we're not doing that, we're we're failing
• 10:57
  - the workforce. We're failing our our organizations.
• 11:00
  - So with that, you know, with AI, we
• 11:02
  - need to be able to pivot quickly.
• 11:04
  - If we're finding that,
• 11:06
  - you know, that an implementation is is not
• 11:08
  - doing what it should,
• 11:10
  - we also can't make these decisions in silos.
• 11:14
  - I I think I've hit communication numerous times
• 11:17
  - through this discussion,
• 11:19
  - and, I I can't hit it enough. You
• 11:21
  - know? If you're not communicating with your CMIO,
• 11:24
  - if you're not communicating with your CNOs and
• 11:26
  - your clinical,
• 11:28
  - structure,
• 11:29
  - you're not gonna be able to bring the
• 11:30
  - right tools in, because the needs are very
• 11:33
  - different in at every layer of the organization.
• 11:36
  - So the quicker you,
• 11:39
  - get everybody on the same tracking together,
• 11:42
  - the better we're gonna find, getting these tools.
• 11:44
  - And and that's getting right down to, you
• 11:46
  - know, the frontline workers as well.
• 11:48
  - If I bring something in, but I add
• 11:50
  - time frame to what they're doing, it doesn't
• 11:52
  - matter how cool that technology is. It's a
• 11:55
  - burden to them, and it's not doing the
• 11:57
  - right thing.
• 11:58
  - Yeah. I think that's a fine line that
• 11:59
  - people are walking between what's shiny and what's
• 12:01
  - actually practical and helpful. I would love to
• 12:04
  - hear if you have any final thoughts as
• 12:05
  - we wrap up our conversation.
• 12:08
  - Yeah.
• 12:09
  - I think, you know, as we as we
• 12:11
  - go through this this journey,
• 12:13
  - you know, we there's a lot of cool
• 12:15
  - things in in that that can come of
• 12:17
  - this. And,
• 12:18
  - I think,
• 12:20
  - you know, we're stronger together
• 12:22
  - and
• 12:22
  - making sure that you're, you know, just again
• 12:26
  - hitting home. Don't don't make these decisions in
• 12:28
  - a silo.
• 12:29
  - Work with your teams, bring your teams on
• 12:31
  - board, bring your other departments, you know, into
• 12:34
  - the discussion
• 12:35
  - so that you can get it right the
• 12:37
  - first time and you're not going back, you
• 12:38
  - know, again here.
• 12:40
  - This technology
• 12:41
  - has,
• 12:43
  - a lot of great things that it can
• 12:44
  - do,
• 12:45
  - if we use it as a tool,
• 12:47
  - you know, and not just use it as
• 12:50
  - anything else and and and and
• 12:52
  - forget about, you know, what the our journey
• 12:54
  - and what our our place is here.
• 12:56
  - Well, Greg, thank you so much for joining
• 12:58
  - us today. Yeah. Thank you for having me.
• 12:59
  - It's been great. Awesome. And so to our
• 13:02
  - listeners, if you'd like to listen to more
• 13:03
  - podcasts from Becker's Healthcare, you can visit beckershospitalreview.com.
• 13:07
  - Have a good one.