When Frameworks Stop Being Polite and Start Getting Real
Summary
Hosts David Spark and Will Gregorian interview Ryan Brown, Head of Cybersecurity Operations at Children’s National Hospital, on bridging the gap between policy and practice. They discuss the necessity of "ride-alongs" to observe real-world clinical workflows, governance for autonomous medical robotics, and managing opaque AI token costs. The episode concludes with a debate on SOC 2 audit risks and strategies to eliminate reliance on individual "heroics" through automation and documentation.
Topics discussed
Intro, Will Gregorian joins, and discussion on bank subscription exit fees
Ryan Brown joins; discussing policy gaps and the need for bedside ride-alongs
Robotics in healthcare, Asimov's laws, and governance during procurement
Sponsor segment: Guardsquare mobile app security webinar announcement
What's Worse: Unqualified SOC 2 report vs. qualified opinion on mature program
AI token sprawl, cost governance, and the lack of outcome measurement
Sponsor segment: NordLayer on exposure management and remediation workflows
Avoiding single points of failure: Documenting knowledge and automating tasks
Closing remarks, hiring updates, and final sponsor mentions
Listen ad-free on Castria