Craig Gravina

Healthcare environments extend beyond standard CRUD architectures. EHR systems, HL7/FHIR integrations, legacy imaging infrastructure, cloud-native services and AI-assisted clinical tooling form interconnected systems within regulated environments, expanding both operational dependency and attack surface. At this scale, CVSS scores, static findings, manual triage and spreadsheets alone don’t scale, especially in healthcare provider environments where security decisions impact clinical continuity, uptime and patient trust. Modern healthcare AppSec requires: ~ Clear visibility into applications processing protected health information (PHI). ~ Risk reporting aligned to regulatory frameworks by design (HIPAA, HITRUST). ~ Evidence of exploitability, not just vulnerability volume. ~ Prioritization based on runtime execution and reachability. Where do audit expectations and operational reality create the most friction in healthcare security programs? We explore AppSec approaches that support compliance and clinical continuity for healthcare providers in our latest blog: https://hubs.la/Q044PG-M0 Stay tuned for the Healthcare Payers posts in this series.

18

2 Comments

We’ve announced major platform updates along with the launch of Open TermHub, our open-source FHIR terminology services runtime. 🚀 Terminology management — now more agile than ever. We’ve overhauled the TermHub catalog to focus on what matters most: capabilities that drive flexibility, automation, and adaptability, alongside expanded standards-based resources for payers and clinical organizations. Highlights: •Advanced Search & Browsing: Real-time previews and deeper metadata visibility •Flexible Data Portability: Download your way - FHIR-compliant JSON, original source content, and relational files •Frictionless Licensing: simplified access to restricted sets like CPT and UB-04 •Expanded Global Library: now including Spanish language resources Whether you're navigating complex hierarchies or integrating data into your own architecture, the new TermHub scales with you. Plus, the new inline video support makes onboarding a breeze. Check out the reimagined experience: https://lnkd.in/gyYbMhFw #HealthIT #Informatics #FHIR #TermHub #Interoperability #OpenSource #AgileData #snomedct #rxnorm #icd10 #loinc

14

AI leadership in payers is changing. In 2026, it’s no longer about deploying models. It’s about who owns AI decisions that move MLR and withstand CMS review. Leaders are differentiating on three fronts: • Margin-linked AI • Regulatory-ready AI • Executive ownership "If AI impacts margin, it requires Tier-1 accountability." That’s the shift. From automation → to defensibility → to business-led advantage. The real question: "Who owns AI in your organization?" #PayerAI #AIGovernance #MLR #CMS #HealthcareLeadership #ResponsibleAI #SynerGenAI

7

2 Comments

🔹 Big News from 10Bridge! 🔹 We’re excited to share that 10Bridge has officially launched its new AI Agent Automation — a major step forward in healthcare data interoperability. 🚀 Healthcare organizations continue to struggle with fragmented systems, manual workflows, and limited interoperability — especially when APIs are unavailable or data exchange interfaces are outdated. 10Bridge’s AI Agents tackle these challenges head-on by automating complex, repetitive interoperability workflows across systems that previously required manual effort. These intelligent agents can: • Navigate user interfaces autonomously • Execute and extract reports • Securely push data into platforms and repositories • Reduce operational burden and human error By simulating secure user behavior, 10Bridge is unlocking connectivity even in systems without modern integration interfaces — expanding interoperability where traditional approaches fall short. 🌟 Proud to be part of innovation that helps healthcare organizations deliver better outcomes through smarter data workflows! Read full press release here: https://loom.ly/Z5H9RnE. #healthtech #AI #interoperability #healthcare #innovation #10Bridge

21

Hi all, I’m really looking forward to this upcoming webinar where we’ll talk about something I’m deeply passionate about—how AI is genuinely reshaping the payer experience, not just in theory, but in real-world execution. We’ll share practical insights on what’s working, what’s not, and how payers can move beyond pilots to deliver meaningful outcomes across member and provider engagement. If you’re navigating AI adoption in healthcare or thinking about what real impact looks like, I’d love for you to join us on Wednesday March 25.

21

1 Comment

Anyone else noticing the massive data lakes growing in health systems? Is anyone else thinking that "data-centric" might become the new "patient-centric"? This article from Becker's illustrates how health systems (like Hartford Health Care) are turning into fast, deep data sources with real potential for driving insights far beyond the health system itself. Here's what jumped out for me: Hartford (with over 500 locations) is taking their digital front door and coupling it with a strong data-standardization push. Their goal is nothing less than delivering a patient experience similar to a streaming service or a travel booking sites. Which means exquisitely-tuned, patient-level predictive modeling. Well, who else could use that kind of insight? That's right. The manufacturers themselves. Could we use these clean, large data streams to: Feed agentic prediction and/insight agents? Measure the effect of our marketing initiatives? Drive new creative and strategies aimed at newly-identified barriers and drivers? We'd be less "data-informed" and more data-centric: Tracking signals, adjusting tactics, and measuring progress at the speed the world is spinning. The stories and faces that made up the patient-centric world will be digitized, ever-changing, almost infinitely-addressable murals. Transparency and compliance are going to be the foundation. At a minimum, working with grouped, de-identified data is going to be 𝘥𝘦 𝘳𝘪𝘨𝘦𝘶𝘳. And best practice probably includes (again, at a miniumum) working through a trusted data partner or licensed data provider (e.g., Symphony, IQVIA, Komodo, or a system’s research arm) under a clear DUA, and document the de-identification process. If we get it right, marketers could be delivering the same incredibly accurate, high-value experience your favorite streaming service does. Imagine that. At OEM Group, we're already imagining (and building) for THAT world. Read this! https://lnkd.in/ev3n-PUt And tell me: Am I crazy?

2