Summary
Provides healthcare organizations with an implementation framework for governing AI-specific cybersecurity and privacy risks across clinical and operational use cases, including roles and accountability, asset and use-case inventories, lifecycle controls, data poisoning, model drift, adversarial attacks, incident response, and contractual governance.
Healthcare Implications
Healthcare organizations should establish accountable AI cyber-governance structures, inventory AI systems and dependencies, integrate AI-specific threats into risk and incident processes, define security and privacy controls across the lifecycle, and coordinate clinical, technical, legal, procurement, and vendor-management teams.