Sherri Douville’s Post

Welcome Sandy Dunn, accomplished #healthcare #CISO, + rockstar member of the OWASP Top 10 For Large Language Model Applications core team, and expert in #AI and #Cybersecurity to the Trustworthy Technology and Innovation in Healthcare Book Series consortium team. Sandy will be helping our Technology Leadership Council take what is recognized amongst the industry's broadest and deepest full stack technical community practice to the next level by upgrading its board operations and governance practices for their subgroup. A few highlights about Sandy, an experienced CISO with over 20 years of experience in optimizing cybersecurity to meet business targeted objectives, having earned multiple certifications, and contributions made to higher education; a few of her many accomplishments include: ⭐️ Recognized for leading high-performing cybersecurity teams. ⭐️ Implemented a comprehensive security incident response plan used to successfully respond to major cyberattacks. ⭐️ Redesigned security metrics to ensure organizations met security objectives. ⭐️ Developed and led a security awareness program that included professional development by role. ⭐️ Lead author for the OWASP LLM AI Cybersecurity & Governance Checklist 🙏 Thanks to core Trustworthy Technology and Innovation in Healthcare Book Series consortium management and operations team members for joining us in welcoming Sandy live cc Karen Jaw-Madson, Brian Yam, Kate Liebelt, Matthew Partridge Learn more about our Technology Leadership Council here: https://lnkd.in/gC6vMxGe Learn more about our consortium led by the Medigram, Inc. team here: https://lnkd.in/guKY4tjh cc Keith Duemling, MBA, CDH-E, CMU-CISO, CHISL, CISSP, Brittany P., Jesse Fasolo, PhD, Axel Wirth, Craig Hyps, Anahi Santiago, Ed Gaudet, Mari Savickis, David Finn, Vikrant Arora, Brad Marsh BSN, RN, CEN, Joshua Tamayo-Sarver, MD, PhD, FACEP, FAMIA, William Harding, Ph.D.

As Kaiser nurses protest against the use of #AI, it begs the question. Whose responsibility is it to upskill the healthcare IT and clinical workforces? Please vote and share in the comments. Great situation insights by: Brian R. Spisak, PhD: https://lnkd.in/gc_-4dYN management perspective + Spencer Dorn: https://lnkd.in/gwrSJWWA physician leader perspective Thanks to coauthor and venture capital book editor, Joshua Tamayo-Sarver, MD, PhD, FACEP, FAMIA for inspiring this poll.

There's at least two kinds of people who you want to filter taking their advice on #AI 1) Those that are evangelists and lack themselves or lack access to relevant technical context. 2) The opposite kind of people who might be called "doomers." Please P.C. police, look away. This doomer meme is just a joke. But in all seriousness, a lot of doomerism is just distracting and hijacking the narrative to avoid real discussions about real issues. Here's a great thread by "not a doomer" Martin Casado who has different safety priorities than myself; he not being obsessed with healthcare where safety *is* the business like I am. But who brings the full stack technical literacy needed upon which to build current technical learnings about #LLM https://lnkd.in/gaJX_nw4 I also reshared a paper in reply on what to expect for model performance. https://lnkd.in/g94WVbFd And yes I have trained a number of AI models and no I do not claim deep technical expertise, I defer to others on that. Don't believe the evangelists and don't believe the doomers, follow the hard technical facts and tie them to the business. cc Trustworthy Technology and Innovation in Healthcare Book Series Medigram, Inc. #CIO #CISO

On Sunday, the day we reflect on #leadership. Our extraordinary leadership team including physicians, engineers, IT, and business leaders got together over the last week and put this brief explainer on what makes our Trustworthy Technology and Innovation in Healthcare Book Series consortium led by the Medigram, Inc. team completely unique. It's unlike any other group; it transcends competitive dynamics in a way that numerous members report improved efficiency and performance in their core executive and board roles. Thanks to co-chair of our technical leadership council, Kate Liebelt for this kind and unsolicited testimonial (excerpt) for the full testimonial, see the explainer linked just below. As a side note, Kate is considering exceptional career opportunities with extraordinary organizations that clearly know how to leverage a strategic operator in a rising leadership role. About the consortium: https://lnkd.in/gAKWPSNw Thank you to all the leaders contributing to this work. Hats off to Head of Talent and preeminent organizational psychologist and leadership coach of our time Karen Jaw-Madson

Revisiting the EPIC/Particle data access saga. As Kat McDavitt stated, the rules have been codified in regs for 20 years, so there's really nothing unclear about it. The bottom line is what went around the C suite networks. The word in the boardroom was that "Player X is mining CareQuality for data." What is CareQuality? Recommend reading this first: https://lnkd.in/ga9yFJK3 The assumption and tone was that of lost trust that casts a shadow over the whole digital health sector. This assumes that you agree with me that if the C suite doesn't support the digital initiative, it will go nowhere. As a side note, in life sciences, we have a term for "secondary purpose" of devices and treatments; it's called off label use. If you have not attained regulatory marketing authorization for a "secondary use," you can earn yourself and your company large fines, threat of jail time, and become black balled if it was done in a preventable and happened in a dumb fashion. Further, as with many privacy violations giving CEOs headaches originating from a lot of research and marketing departments (search healthcare marketing tracker saga); a lot of "misunderstandings" seem to be tied to just willfull intent to ignore regulations. This is also another way to lose trust or never earn it in the first place. Another great job to Brendan Keeler who provides amongst the most balanced views from the data perspective. Read his latest article to become more of an expert on secondary use of healthcare data: https://lnkd.in/gpRPVNp3 The inherent conflict between the C suite, reputation concerns, trust, and #data culture has to be named to be solved. What are some solutions? I'll start 🙋🏻♀️-clear policies & procedures

#teamworkmakesdreamswork We're thrilled to formalize our ongoing support for the groundbreaking full stack technical clinical IoT standard initiative, IEEE/UL P2933. Great work to Mitch Parker and Craig Hyps for an excellent job representing and presenting our Trustworthy Technology and Innovation in Healthcare Book Series led by the Medigram, Inc. team and its technical leadership council to IEEE/UL P2933 Officers, Chairs, and Members respectively. Learn more about this standard initiative in Craig Hyps' bio listed here: https://lnkd.in/gxriYbMY Many further thanks for the productive collaboration to the leadership, officers, and chairs pictured of IEEE/UL P2933. Visualize the standard initiative pictured below. Because of the work of these groups, necessary technology, people, and process alignment between healthcare CXOs will be unprecedented and continue to accelerate. Also thanks to the teamwork of co chairs of the technical leadership council  Kate Liebelt, Keith Duemling, MBA, CDH-E, CMU-CISO, CHISL, CISSP, and Brittany P. for your commitment to advancing truly trustworthy technology.

Hardly anyone is more passionate about startups, tech, and healthcare than David H. Crean and Roger Rappoport who built, run, and sponsor the incredibly informative and inspiring Silicon Valley life sciences CEO roundtable respectively. Here, tech, digital, bio, AI, life sciences, and medical devices are all mashed up. These impressive gents are both invited members of the Trustworthy Technology and Innovation in Healthcare Book Series advisory board as well. In addition to that work, impact, and their roles in law and venture capital; Roger regularly teaches essential, timely entrepreneurship topics for the program he founded, ACCESS Silicon Valley. Last night's multi hour ;-) but great lecture was all about terms and term sheet types. The money quotes of last night: "Don't get emotionally attached to any deal" "Be afraid, very afraid of "Customary" agreements." Danger There's a lot of insider Silicon Valley speakers and their recordings featured on the website: https://lnkd.in/eichJPYa Thank you both gentlemen for all you do for entrepreneurs.

*BREAKING* Today, the California Privacy Protection Agency, CPPA released a letter in their words "outlining weaknesses of the American Privacy Rights Act. If passed, it could weaken important privacy protections in CA and other states and impact the rights of millions of Americans. Learn more and read the full letter" pictured below. RE: https://lnkd.in/gdW5yUif As a side note, Idealistic optimists and I tend to clash over implementation, technical, operational, management, and ROI issues. I don't have a big axe to grind here since I don't want to pay attention to regs foisted on us by others until I understand the scope and scale of enforcement impact and market movements. Of course, I believe in the importance and power of understanding and being involved in policy and regulations but that's not what this post is about ;-) Let the dissent begin. cc Lucia Savage Peter McLaughlin, Michelle Finneran Dennedy h/t Irina Raicu, Markkula Center for Applied Ethics

As promised, I'm following up with a great graphic by permission of preeminent safety engineering expert for AV, Philip Koopman. This is to visualize part of what went wrong with autonomous vehicles from a medical technology lens. What you should know about Phil is that while there are many safety engineers who are frankly negative and pissed at the AV industry. I don't tend to quote them much because they might have blindspots about finance and markets. This is not Philip; like me, he genuinely wants AV and AI to succeed and is working to help them address their blind spots. If we don't do automation and #AI correctly, we won't have any impact on urgent needs to scale and automate resources in healthcare. AV companies could have built trust with regulators and markets if they had implemented UL 4600. However, since consumers don't pay for standards; they can't be blamed from a business perspective for not doing so. Further, it makes a good discussion point for us in healthcare where purchasing power is real and safety *is* the business. In our book, Advanced Health Technology, my coauthors including IEEE award winning safety systems engineer outline why current engineering approaches can't deliver the definition of AV and what has to be done in engineering instead. See Q/A with physician leader in the comments. Prior discussion on standards: https://lnkd.in/gNXcvEhE Chapter 3 Tech Misinformation and Medical Misinformation as Evil Twins: The Misinformation Path to Destroying Trust in Medical Technology ABSTRACT: Technical and medical misinformation have much in common in that they both represent instances where the misinformation is used or even weaponized for an end to a means. They combine to create a perfect storm of circumstances that lead to mistrust and significant risk to stakeholders, the most important stakeholder being the patient. This chapter explores causes and impact of the technical and medical misinformation dynamic and offers perspective on countering this dangerous duo cratering trust for medical technology in medicine. It explores the use of development and testing methods for autonomous vehicles that appear from a systems engineering perspective to be untenable from safety, time, and cost points of view. One of the main problems is a lack of domain and systems engineering expertise by the industry." Book: https://lnkd.in/g7RzjA_T? Thanks for the discussion Apurv Gupta, MD, MPH, Stephanie Feals, Robert Pearl, M.D. Edward Marx Douglas Slakey, MD,MPH cc Trustworthy Technology and Innovation in Healthcare Book Series led by Medigram, Inc.

It's great that RSA is local; though the top #cybersecurity people in healthcare systems don't tend to go. I've typically taken meetings peripherally to the conference but not really gotten into the conference itself. I get to meet with some great cyber experts regularly through our IEEE standard work and the Trustworthy Technology and Innovation in Healthcare Book Series technical leadership council. In my roles, I also rely a lot on technical experts, convening them in unconventional but necessary ad hoc ways, and synthesizing their inputs. Another question: why should more healthcare people attend RSA? If you're in hc, lmk why you are or aren't going. Is it because you get all the networking you need at HSCC and Health-ISAC? Thanks!