The Health Industry Playbook for Securing AI Third Parties

Health systems are raising the bar for AI vendor accountability and the HSCC Third-Party AI Risk Guide is quickly becoming the benchmark. Healthcare's rapid adoption of AI depends heavily on third-party technologies embedded in EHRs, remote monitoring systems, and operational workflows. Traditional risk management approaches struggle to assess these tools, with limited visibility into data lineage, model integrity, and complex AI supply chains. The Health Sector Coordinating Council (HSCC) Cybersecurity Third-Party AI Guide addresses this gap by adapting established frameworks like the NIST AI Risk Management Framework and HHS HICP. It introduces practical guidance for managing AI vendor risk, including expectations for transparency, auditability, and ongoing monitoring. In this session: A practical walkthrough of what the framework requires Where AI vendors are falling short today How health systems are applying it in real-world procurement and risk assessments If you evaluate, procure, or manage AI vendors, this is the benchmark you'll be measured against. Learn more about Censinet: https://www.censinet.com