Series
Summer CPE Symposium
The PYA Summer CPE Symposium is a complimentary, two-day virtual event designed for healthcare professionals, offering four expert-led sessions on key industry topics. Participants will gain valuable insights on reimbursement, healthcare compliance, audit and accounting, and cybersecurity, along with practical takeaways and tools. Hosted by PYA thought leaders, the symposium offers CPE credits, and attendees can register for as many sessions as they choose.
Artificial intelligence is transforming healthcare, but it also introduces new cybersecurity considerations. As organizations adopt AI tools, they must evaluate how these technologies affect intrusion detection, data privacy and security, and vendor risk management. These considerations are becoming more immediate as both AI adoption and AI-enabled threats continue to expand across the healthcare sector, requiring cybersecurity and governance practices to keep pace with emerging risks and regulatory expectations. At the same time, a growing number of AI vendors are entering the market, some of which may not align with the privacy requirements and risk tolerance of healthcare providers.
During this webinar, PYA Principal John Cross examined the evolving relationship between AI and cybersecurity in healthcare, including how AI is being used in both cyberattacks and defensive strategies. The session outlined key considerations for vetting AI vendors and provided practical guidance on applying existing governance frameworks and processes to AI-related risks to support audit readiness and risk oversight. This intermediate-level session was designed for professionals with a basic understanding of healthcare IT and compliance or audit fundamentals and is particularly relevant for healthcare IT leaders, compliance and internal audit professionals, and risk management teams responsible for evaluating emerging technologies.
Participants were able to:
- Describe the current healthcare cybersecurity threat landscape, including key breach trends, threat actors, and common attack vectors, and distinguish between AI use in cybersecurity operations and AI tools more broadly
- Identify how threat actors are using AI in cyberattacks, including deepfakes, polymorphic malware, and AI-enabled social engineering techniques
- Explain how AI-driven defensive technologies, such as SOC automation, behavioral analytics, and threat intelligence, are being used in healthcare cybersecurity programs
- Apply relevant governance and risk frameworks used in healthcare, including NIST CSF, NIST AI RMF, and proposed HIPAA Security Rule updates, to evaluate AI-related vendors and tools
- Recommend practical audit procedures and governance strategies to assess organizational readiness for AI-related cybersecurity risks
This webinar was presented as part of PYA’s fifth annual Summer CPE Symposium, “Hot Topics in Healthcare & Accounting,” held June 23-24. The complimentary virtual event featured four sessions focused on timely issues affecting healthcare leaders, finance professionals, and other decision-makers, including assurance, Medicaid funding changes, practice valuation, and artificial intelligence and cybersecurity.
If you would like additional guidance on audit and assurance, tax planning, business valuation, cybersecurity, or any matter related to strategy or operations, our leaders are happy to help.



