I had the chance to speak with Patrick Sullivan. Patrick is the Vice President of Strategy and Innovation at A-LIGN. He brings over 25 years of expertise in cybersecurity, compliance, and risk management to the healthcare and life sciences sectors.

We talked about:

- How companies are complying with a web of AI regulation
- Best practices for AI agent security and accountability
- Genomic data security and AI

To kick off the new year, Steve Dufour and I chatted about:

• Steve's expertise in copying and pasting hundreds of lines from the Health Insurance Portability and Accountability Act (HIPAA), because ChatGPT couldn't parse it.
• The late December 2025 ​Waymo outage​.
• Cops Forced to ​Explain​ Why AI Generated Police Report Claimed Officer Transformed Into Frog.
• Manus AI's ​acquisition​.
• AI hampering ​productivity​ of software developers, despite expectations it would boost efficiency.
• ​Impacts​ of AI on language, media, and culture.
• Our 2026 predictions for AI

Steve Dufour and I had our monthly AI-related discussion, touching on:

• The Trump Administration EO ​preempting​ state AI regulation
• NVIDIA's H200 chip ​export​
• "​Brain Rot​" in Large Language Models
• Crowdsourced data poisoning [this ​site​ is fake news]
• Apple's "​Slow​" AI Strategy as a positive

I recently spoke with Bezawit Sumner, CISO of CRISP Shared Services about:

• How to address stakeholder concerns when rolling out AI in sensitive spaces like healthcare
• Issues related to scoping and definitions being non-trivial for AI governance
• The evolving AI regulatory landscape and what companies can do to adapt

I was excited to host Rick Doten, a powerhouse in cybersecurity, to discuss:

• Key insights from his time as CISO at healthcare giant Centene
• The ethical nuances of AI governance in the space
• His experiences advising venture capital firms and cybersecurity startupsI was excited to host Rick Doten, a powerhouse in cybersecurity, to discuss: - Key insights from his time as CISO at healthcare giant Centene - The ethical nuances of AI governance in the space - His experiences advising venture capital firms and cybersecurity startups

NVIDIA blog on killswitches: 
https://blogs.nvidia.com/blog/no-backdoors-no-kill-switches-no-spyware/

Colorado Legislative AI Task Force Report: https://leg.colorado.gov/sites/default/files/images/report_and_recommendations-accessible_1_0.pdf

SB-205 opposition: https://gazette.com/government/colorado-mayors-oppose-ai-regulation-law/article_0abe652f-a60a-583e-a138-e73fa45e9a03.html

AI Stethoscope: https://www.imperial.ac.uk/news/249316/ai-stethoscope-rolled-100-gp-clinics/

ChatGPT Connectors: https://help.openai.com/en/articles/11487775-connectors-in-chatgpt

Federal AI action plan: 
https://www.ai.gov/action-plan

Tool-squatting attack paper: https://arxiv.org/pdf/2504.19951

Burning Glass Institute report: 
https://static1.squarespace.com/static/6197797102be715f55c0e0a1/t/6889055d25352c5b3f28c202/1753810269213/No+Country+for+Young+Grads+V_Final7.29.25+%281%29.pdf

AIUC: https://aiuc.com

Walter kicks off a recurring series with Steve Dufour, talking about:

- Trump's "Big Beautiful Bill" moving through the Senate and how a key AI-related provision was just removed.
- Some key court decisions related to generative AI training on copyrighted material
- ISO/IEC 42005:2025, which gives guidance on AI impact assessments
- Ways to (avoid) automating yourself out of a job

The basics of healthcare can often be a nightmare:

- Finding the right doctor
- Setting up and appointment
- Getting simple questions answered

While these things might seem like an inconvenience, on the grand scale they cost a lot - of money, and unfortunately, lives.

That’s why the Embold Virtual Assistant (EVA) is such a breakthrough.

A generative AI-powered chatbot with access to up-to-date doctor listings and performance ratings, it’s literally a lifesaver.

StackAware was honored to conduct a pre-deployment AI risk assessment and penetration test for EVA on behalf of our client Embold Health.

Following up on our previous discussion, I sat down again with Steve Dufour and Mark Blackham to discuss the product’s development and rollout.

We chatted about:

- EVA’s performance metrics
- Cybersecurity, compliance, and privacy issues
- The future of AI governance and product development in healthcare

Bonus: Steve and I also presented on this work at HITRUST’s Collaborate Conference. Here is our deck: https://docs.google.com/presentation/d/1EedOula8X81WxzVkQim1amiDZWMM8Lh0

Need your own AI risk assessment and governance program build-out?

Book a call at contact.stackaware.com.

On this episode of the Deploy Securely podcast, I spoke with Kenny Scott, Founder and CEO of Paramify.

Paramify gets companies ready for the U.S. government's Federal Risk and Authorization Management Program (FedRAMP). And in this conversation, we talked about:

- Paramify "walking the walk" by getting FedRAMP High authorized
- How AI is impacting FedRAMP authorizations
- The future of AI regulation