Cybersecurity

Top 5 Takeawyas from the Final Day of HITRUST Collaborate 2024

Chalice Beam

Director, Coalfire

Headshot

Nicole Janko

Senior Director, Advisory Services, Coalfire

October 3, 2024
1000010943

As HITRUST Collaborate 2024 comes to a close, it’s been an insightful three days filled with valuable discussions and a forward-thinking approach to risk management and compliance. Nicole Janko, Sr. Director of GRC Advisory at Coalfire, and Chalice Beam, Director of Healthcare Assessment, contributed to this year’s conference, helping to shed light on the latest trends and innovations shaping the future of cybersecurity and compliance. Here are the top 5 takeaways from the final day and a summary of what we’ve learned over the course of the event:

1. ServiceNow Integration with HITRUST Assurance Portfolio in Support of TPRM

One of the major highlights of this year’s event was the focus on improving Third-Party Risk Management (TPRM) with new technological integrations. The collaboration between HITRUST and ServiceNow to integrate with the HITRUST assurance portfolio is a game changer. This integration allows organizations to gain automated insights, real-time updates, and streamline management processes—from onboarding vendors to analyzing risks. This move will enhance risk transparency and simplify the TPRM lifecycle, making it easier for organizations to manage third-party risks with greater efficiency.

2. AI Working Group Tackles Scope and Security Standards

Artificial intelligence was at the forefront of several key discussions. The AI working group delved into defining the scope of AI systems, evolving security standards, and emphasizing the importance of shared responsibilities among key stakeholders. As AI continues to revolutionize various industries, ensuring its responsible implementation and risk mitigation remains a top priority. Collaboration between the private sector, regulators, and technology providers is crucial to successfully navigating the growing complexity of AI governance and security.

3. Nicole Janko’s Session with Microsoft and HITRUST on Navigating AI Risks

During a compelling session led by Nicole Janko, Coalfire’s Sr. Director of GRC Advisory, alongside representatives from Microsoft and HITRUST, the conversation focused on the intersection of AI risks and compliance. As AI capabilities expand, the threat landscape will continue to shift, influenced by global dynamics such as geopolitical tensions, evolving cybercrime techniques, and ever-changing compliance mandates. This session underscored the need for organizations to adopt proactive risk management strategies that account for AI-driven threats and compliance challenges.

4. HITRUST and StateRAMP Collaboration: A Promising Pilot Program

Another exciting development from the conference was the announcement of a pilot program between HITRUST and StateRAMP. Chalice Beam and Nicole Janko had the opportunity to meet with representatives from both organizations, discussing how Coalfire will play a role in this collaboration. Through this pilot, clients who are on their HITRUST journey will have the opportunity to gain reciprocity to StateRAMP, further streamlining the path to achieving compliance and ensuring security standards across both programs. This partnership will provide organizations with a more comprehensive and unified compliance experience.

5. The Evolving Role of HITRUST: From Compliance to Risk Management

This year’s HITRUST Collaborate had a clear overarching theme—AI and risk management. As technology advances, HITRUST is evolving from offering solely compliance-based solutions to becoming a driving force in risk management initiatives. With AI presenting both significant opportunities and complex risks, HITRUST is leading the charge in helping organizations understand, manage, and mitigate these risks. The future of cybersecurity will be shaped by how well organizations can balance the benefits of AI with the need for robust risk management frameworks.

 

In summary, HITRUST Collaborate 2024 delivered an incredible wealth of knowledge on AI, risk management, compliance, and collaboration across industries. The insights shared by industry leaders like Nicole Janko and Chalice Beam highlight the growing importance of integrating AI, evolving security standards, and the need for innovative approaches to risk management.

As HITRUST continues to evolve and lead the conversation on AI, risk, and compliance, one thing is certain—the future of cybersecurity is inextricably linked to the development of AI-driven technologies and the ability of organizations to manage these new risks effectively.

Coalfire is already looking forward to HITRUST Collaborate 2025!