The Medcurity Podcast: HIPAA Compliance | Security | Technology | Healthcare

AI is no longer theoretical in healthcare. It’s already shaping how organizations operate, make decisions, and support patients across clinical and operational environments.

In this episode, Mel Nevala of Medcurity moderates a discussion with three healthcare leaders bringing different perspectives to AI adoption:

Joe Gellatly, CEO of Medcurity, focused on compliance strategy and how AI intersects with security and regulatory risk.

Brandon Tanner, CEO of Omniscia AI, leading a conversational AI company that builds digital representatives for organizations in regulated industries.

Tim Maxwell, MSW, Founder of Karuna Care Services, leading a Colorado-based organization providing residential and community services for adults with intellectual and developmental disabilities.

Together, they explore how AI is being implemented inside real healthcare environments, where it’s creating measurable operational value, how executive teams are evaluating vendors, and what responsible deployment looks like as AI becomes embedded in daily workflows.

Connect with Brandon on LinkedIn: https://www.linkedin.com/in/brandontanner/
Learn more about Omniscia AI: https://www.omnisciahealth.com/

Connect with Tim on LinkedIn: https://www.linkedin.com/in/boulder-tim-maxwell/
Learn more about Karuna Care Services: https://www.karunacareservices.com/

See how Medcurity helps healthcare organizations approach compliance with clarity and confidence: https://medcurity.com

#AIinHealthcare #HealthcareAI #HealthcareIT #HealthTech #HealthcareLeadership #CIO #CEO #HealthcareSecurity #HIPAACompliance #AI 

AI is no longer theoretical in healthcare — it’s already shaping how organizations operate, make decisions, and support patients.

Joe Gellatly is joined by Brandon Tanner and Tim Maxwell for a practical conversation about real-world AI adoption inside healthcare environments. Hear where AI is delivering value today, how leaders should evaluate vendors, what responsible deployment actually looks like, and what organizations should prioritize in the short term.

From workflow automation to governance and leadership strategy, this episode focuses on separating meaningful progress from noise — and how teams can move forward confidently.

Connect with Brandon Tanner on LinkedIn: https://www.linkedin.com/in/brandontanner/

Learn more about Omniscia Health: https://www.omnisciahealth.com/

Connect with Tim Maxwell on LinkedIn: https://www.linkedin.com/in/boulder-tim-maxwell/

Learn more about Karuna Care Services: https://www.karunacareservices.com/

See how Medcurity helps healthcare organizations approach compliance with clarity and confidence: https://medcurity.com

#AIinHealthcare #HealthcareAI #HealthcareIT #HealthTech #DigitalHealth #HealthcareLeadership #CIO #HealthcareSecurity #HIPAACompliance #AI 

The most reliable compliance programs are the ones people actually use.

In this episode, Mel Nevala, Margaret Karatzas, and Naseem Dastgerdi discuss what helps HIPAA and security habits stick across a team—without turning it into a constant fire drill. They get into personal privacy basics, where organizations usually get tripped up (especially with legacy systems), how teams are thinking about AI tools, and a simple quarterly rhythm that keeps your Security Risk Analysis work current and organized.

Connect with Naseem on LinkedIn: https://www.linkedin.com/in/naseemdast/

Learn more about Medcurity: https://medcurity.com

#Healthcare #Cybersecurity #HIPAA #HealthcareIT #Compliance #SecurityRiskAnalysis #AuditReadiness #SecurityAwareness #AIinHealthcare

🎯 Special Podcast Offer: Get 20% off CyberHoot for 1 year using coupon code: ‘Medcurity’

Security training can sound straightforward until you're the one trying to get employees to actually care about it.

Craig Taylor, Co-Founder and CEO of CyberHoot, joins the podcast to talk about why most cybersecurity training fails—and how to fix it. With nearly 30 years of experience managing risk across Fortune 500 companies and SMBs, Craig breaks down the psychology behind why people fall for phishing attacks, the different threats and forms of extortion used against healthcare organizations, and why punishment-based training isn’t working. The conversation also covers how AI is changing the cybersecurity landscape and what that means for training and defense. 

Connect with Craig on LinkedIn: https://www.linkedin.com/in/craigmtaylor/

Learn more about CyberHoot: https://cyberhoot.com/ 

Learn more about Medcurity: https://medcurity.com 

Get CyberHoot’s free personal training: https://cyberhoot.com/individuals/

#Healthcare #Cybersecurity #HIPAA #HealthcareIT #Compliance #SecurityRiskAnalysis #CyberAwareness #Phishing #SecurityTraining #AI

Security testing can sound straightforward until you’re the one trying to prove it actually reflects reality.

In this episode, the Medcurity team breaks down the difference between an NVA and penetration testing, why “we ran a test” isn’t the same as security validation, and the kinds of gaps that keep showing up when teams look at real environments. 

We also share a simple way to think about cadence, what “evidence” looks like when auditors ask for it, and why you’ll get better results when you start with the basics before paying for the most advanced test. 

Learn more about Medcurity’s NVA or reach out to the team here: https://medcurity.com

#Healthcare #Cybersecurity #HIPAA #HealthcareIT #Compliance #NVA #SecurityRiskAnalysis #HealthcareSecurity #AuditReadiness #SecurityAwareness #NetworkSecurity 

Healthcare security issues rarely show up as one big failure. They surface in patterns—small gaps that repeat across organizations, workflows, and teams.

In this episode, the Medcurity team shares what’s coming up most often in recent Security Risk Analysis walkthroughs and day-to-day conversations with healthcare organizations. The discussion covers recurring password issues, common breakdowns in access controls, and early signals around AI use.

This conversation reflects what’s happening on the ground right now—and what it tells us about where healthcare security programs tend to drift without realizing it.

If you want a clearer picture of where your network may be exposed, Medcurity’s Network Vulnerability Assessment helps surface the issues that often go unnoticed: https://medcurity.com/hipaa-compliance-solutions/network-security/ 

#Healthcare #Cybersecurity #HIPAA #HealthcareIT #Compliance #SecurityRiskAnalysis #HealthcareSecurity #AuditReadiness #SecurityAwareness

AI is reshaping healthcare faster than most organizations are prepared for. In this episode, Daniel Schwartz and Joe Gellatly break down what 2025 revealed, where risk is increasing, and what leaders need to pay attention to right now.

The original episode can be viewed here: https://www.youtube.com/watch?v=Wntp4jerVgc 

Connect with Daniel Schwartz on LinkedIn: https://www.linkedin.com/in/daniel-schwartz-cybersecurity/ 

Learn more about Medcurity: https://medcurity.com 

#Healthcare #Cybersecurity #HIPAA #HealthcareIT #Compliance #SecurityAwareness #AIThreats #HealthcareSecurity

Most security training satisfies compliance expectations, but it doesn’t always translate into safer day-to-day behavior.

In this episode, Joe Gellatly talks with cybersecurity expert and private investigator Robert Siciliano about why awareness alone isn’t enough—and why security has to feel personal before it works at all.

They discuss how everyday habits create real exposure, why fear-based training often backfires, and how modern threats like AI-driven scams, deepfakes, and voice cloning are already testing healthcare organizations.

The conversation focuses on what actually helps people care about security, not just comply with it.

👉 Connect with Robert on LinkedIn: https://www.linkedin.com/in/robertsiciliano/ 

🔗 Learn about Protect Now LLC: https://protectnowllc.com

🔗 Learn more about Medcurity: https://medcurity.com

#Healthcare #Cybersecurity #HIPAA #HealthcareIT #Compliance #SecurityAwareness #HumanFirewall #AIThreats #HealthcareSecurity

Credentialing has long been one of the most inefficient and manual processes in healthcare.

In this episode, Dylan Avatar, founder of Credential Network, joins the podcast to discuss why the industry struggles with speed and clarity—and how modern technology is changing that.

Credential Network is a healthcare technology company focused on credentialing, compliance, and identity management. Its AI-native SaaS platform replaces fragmented, manual processes with a centralized system that tracks requirements in real time, automates workflows, and helps prevent onboarding delays, missed expirations, and compliance gaps across provider organizations.

The conversation covers where AI fits into credentialing today, how to optimize workflows without introducing new security risks, and why listening closely to providers is critical when building healthcare technology. Dylan also shares how Credential Network got started and how organizations can stay current in a fast-moving space.

👉 Connect with Dylan on LinkedIn: https://www.linkedin.com/in/dylan-avatar/ 

🔗 Learn more about Credential Network: https://credentialnetwork.com

🔗 Learn more about Medcurity: https://medcurity.com

#Healthcare #HealthcareIT #Credentialing #HealthTech #Cybersecurity #Compliance #HIPAA #AIinHealthcare #SecurityStrategy #HealthcareSecurity 

Cybercriminals target healthcare more than any other industry. We break down the reasons attackers focus their efforts here and the specific vulnerabilities they look for.

This episode explores what that reality means for the leaders and teams working to protect patient data.

Learn more about Medcurity here: https://medcurity.com

#Cybersecurity #HealthcareSecurity #HIPAA #Ransomware #HealthcareIT #DataPrivacy #Healthcare #Compliance #SecurityRiskAnalysis