Censinet Opens Enrollment for the 2027 Healthcare Cybersecurity & AI Benchmarking Study

The annual study enables hospitals and health systems to benchmark cybersecurity maturity and AI governance readiness against healthcare peers.

BOSTON, MA, UNITED STATES, October 19, 2026 /EINPresswire.com/ — Censinet, the leading provider of healthcare risk intelligence solutions, today announced that enrollment is open for the 2027 Healthcare Cybersecurity & AI Benchmarking Study. The annual study provides hospitals, health systems, and integrated delivery networks objective peer benchmarks on cybersecurity maturity, AI governance readiness, and cyber program performance, at no cost to participants.

The study is co-sponsored by the American Hospital Association (AHA), the Health Information Sharing and Analysis Center (Health-ISAC), and the Healthcare and Health Sector Coordinating Council Cybersecurity Working Group, HSCC Cybersecurity Working Group.

Now in its sixth wave, the study has helped inform national cybersecurity guidance. Analysis from its first two waves, drawn from anonymized data participants opted to share, served as a primary input to the U.S. Department of Health and Human Services (HHS) Hospital Cyber Resiliency Initiative Landscape Analysis, published in May 2023. That report helped inform the Healthcare and Public Health Cybersecurity Performance Goals HHS issued in January 2024.

Benchmarking Cybersecurity and AI Governance Together

Healthcare organizations are adopting AI faster than many governance programs can track it. Findings from the 2026 Healthcare Cybersecurity & AI Benchmarking Study showed that 70% of participating healthcare organizations have an AI governance committee, but only 30% maintain an enterprise-wide AI inventory. One-third have no way to detect when vendors embed AI into products they have already approved.

The 2027 study benchmarks cybersecurity and AI governance readiness, helping healthcare leaders understand how their programs compare with peers, identify gaps, and prioritize areas for improvement.

“AI governance in healthcare is being built in real time, and organizations need a way to understand whether their programs are keeping pace with both their peers and the risks they face,” said Ed Gaudet, CEO and Founder of Censinet. “Benchmarking turns that uncertainty into evidence leaders can act on and defend to their boards. The more organizations that participate, the clearer the picture becomes for the entire sector.”

Participants complete two enterprise assessments and an organizational questionnaire in Censinet RiskOps™:
NIST Cybersecurity Framework 2.0 (CSF 2.0): cybersecurity maturity across the CSF 2.0 functions
NIST AI Risk Management Framework (AI RMF): how the organization governs, maps, measures, and manages AI risk
Organizational Metrics: cyber program structure, staffing, investment, ownership, and performance

To simplify participation and reduce the assessment burden, the 2027 study eliminates the optional HICP and HPH CPG modules, makes selected Organizational Metrics fields optional, and allows eligible responses from prior-year assessments to carry forward for review.

What Participants Receive

Participation in the 2027 study is free for qualified hospitals, health systems, and integrated delivery networks, regardless of whether they are Censinet customers. Participants receive:
Complimentary access to benchmarking in Censinet RiskOps™
Peer comparisons across key cybersecurity, AI governance, and program domains
Board-ready dashboards and summary reporting
A participant-only Deep Dive Report with detailed analysis, plus the Executive Summary of industry findings
A participant webinar with expert perspectives on the results

Individual responses are never shared. Findings are reported externally only in anonymized, aggregated form, and peer comparisons display only when enough data is available for the selected comparison group.

“One of the greatest challenges for healthcare leaders is knowing how their cybersecurity programs measure up beyond their own organizations,” said James Case, Vice President and Chief Information Security Officer, Baptist Health. “Peer benchmarking gives us valuable perspective on where we’re making progress, where we may be falling behind, and which priorities deserve greater attention. Having that objective context helps us make more informed investment decisions and communicate our priorities with executive leadership and our boards.”

“As artificial intelligence becomes more deeply integrated into healthcare, organizations need governance programs that evolve alongside the technology,” said Brian Anderson, CEO of the Coalition for Health AI (CHAI). “Responsible AI adoption requires more than policies and principles. It requires visibility into where AI is being used, consistent approaches to evaluating risk, and meaningful ways to measure progress. Benchmarking helps healthcare organizations understand their governance maturity, identify gaps, and build the confidence needed to advance AI responsibly.”

“Cybersecurity is fundamental to patient safety and the delivery of care,” said John Riggi, American Hospital Association. “Hospital leaders must make critical decisions about where to invest limited resources while navigating an increasingly complex threat environment. Peer benchmarking provides valuable context to assess program maturity, identify opportunities for improvement, and prioritize investments that strengthen resilience and protect patient care.”

“Healthcare cybersecurity is a shared responsibility, and the entire sector benefits when organizations learn from one another,” said Errol Weiss, Chief Security Officer, Health-ISAC. “By bringing together anonymized insights from healthcare organizations, this study helps identify common challenges, emerging risks, and opportunities for collective improvement. That shared understanding is essential to strengthening the resilience of the healthcare ecosystem.”

“Strengthening healthcare cybersecurity requires more than understanding risk within individual organizations. We also need visibility into the challenges and dependencies that affect the sector as a whole,” said Greg Garcia, Executive Director, Healthcare and Health Sector Coordinating Council Cybersecurity Working Group. “This benchmarking study provides valuable insights into cybersecurity maturity across healthcare, helping inform industry priorities and advance the collective resilience of the critical functions that patients and communities depend on.”

To be included in the 2027 analysis, qualified healthcare organizations must request participation and, once enrolled, complete the Organizational Metrics questionnaire and the NIST CSF 2.0 and NIST AI RMF assessments by December 7, 2026. Questions can be sent to benchmarks@censinet.com.

Censinet^®, based in Boston, MA, is the only AI-native risk intelligence platform purpose-built for U.S. healthcare. Censinet RiskOps™ helps healthcare organizations identify, assess, prioritize, and manage risk across third parties, the enterprise, critical healthcare functions, and artificial intelligence. Powered by healthcare-specific intelligence, AI-driven automation, and the collective scale of the Censinet network, Censinet enables healthcare leaders to see risk clearly, make better-informed decisions, and strengthen operational resilience.

Censinet is an American Hospital Association (AHA) Preferred Cybersecurity Provider. Learn more at censinet.com.

Rita Labrado
Censinet
+1 855.666.6001

Media gallery