Becker’s Healthcare Podcast Summary

Episode: Matt Morton, Executive Director and Chief Information Security Officer, University of Chicago
Host: Hayley Rutger
Release Date: August 1, 2025

Introduction

In this episode of Becker’s Healthcare Podcast, host Hayley Rutger engages in an insightful conversation with Matt Morton, Assistant Vice President and Chief Information Security Officer (CISO) at the University of Chicago. Recorded live at Becker’s 15th Annual Meeting, the discussion delves into cybersecurity in healthcare, innovative technological advancements, and leadership in a rapidly evolving industry.

Background and Role

Matt Morton provides an overview of his professional journey and current responsibilities. With an 18-year background in security roles across education, healthcare, and corporate sectors, Matt emphasizes his primary focus on safeguarding research data and ensuring the secure use of systems and devices by clinicians.

"My goal is to make sure and enable that for the clinicians that are doing that research and making sure that they can come up with these breakthroughs." [04:21]

Recent Initiatives at the University of Chicago

Matt highlights a significant initiative undertaken in the past year: Phoenix AI, an artificial intelligence chatbot designed to enhance clinical research practices. The project emphasizes compliance with HIPAA standards to ensure patient data security and privacy.

"One of the things that I'm most proud of my team for doing is working on the basically certification to HIPAA standards of that chatbot." [01:41]

The implementation of Phoenix AI represents a stride towards integrating advanced AI tools while maintaining stringent security protocols, thereby supporting both clinical excellence and patient confidentiality.

Current Challenges in Healthcare Security

Addressing the pressing challenges in healthcare cybersecurity, Matt underscores the persistent vulnerabilities within the system. He points out the false sense of security that can lead to complacency, making organizations susceptible to breaches.

"There is. We are always a couple of steps away from one of those bad days." [02:45]

The advent of AI-powered cyber-attacks exacerbates these challenges, coupled with difficulties in recruiting and retaining qualified cybersecurity professionals. Matt elaborates on the complexities of managing security across diverse components of a large organization like the University of Chicago, which encompasses multiple entities such as the academic medical center and UChicago Medicine clinical operations.

Technological Innovations Transforming Healthcare

The conversation shifts to the transformative role of technology in healthcare. While Matt clarifies that his expertise isn't in specific medical fields like pediatric cancer, he emphasizes the critical role of cybersecurity in enabling medical breakthroughs.

"Making sure that the tools are compliant, learning these new tools... protect that data." [04:21]

He discusses emerging technologies like advanced encryption methods and federated learning with AI models, which allow for data analysis without compromising privacy. These innovations not only safeguard sensitive information but also assist clinicians in their research and patient care endeavors.

"Federated learning with AI models... allow the models to learn and to teach us and maybe even act as assistance to our clinicians." [04:21]

Prioritizing Digital Healthcare Security

At the University of Chicago, the priority lies in balancing the integration of cutting-edge technologies with robust security measures. Matt's team continuously adapts to new tools and threats, ensuring that digital advancements contribute positively to patient care without introducing undue risks.

Leadership Lessons

Reflecting on his leadership journey, Matt shares valuable insights on managing change within an organization. He emphasizes the importance of adaptability and flexibility, both personally and within his team, to navigate the constant evolution of technology and threats.

"No matter what you do and how well you do it things will always change... you have to help your staff also be flexible and adaptable." [05:29]

Matt advocates for proactive change management, ensuring that staff are prepared to embrace new technologies and methodologies, thereby fostering a resilient and forward-thinking organizational culture.

Conclusion

The episode concludes with Matt expressing his commitment to enhancing healthcare security while supporting clinical research and patient care. His balanced approach to integrating technology with security ensures that the University of Chicago remains a leader in both innovation and data protection.

"It's to serve us to make lives better and to make the lives of our patients better." [05:29]

Hayley Rutger thanks Matt Morton for his participation, wrapping up an engaging and informative discussion on the intersection of cybersecurity, technology, and leadership in the healthcare sector.

Key Takeaways:

• Phoenix AI: A HIPAA-compliant AI chatbot initiative aimed at supporting clinical research.
• Security Challenges: Persistent vulnerabilities, AI-driven attacks, and staffing shortages in cybersecurity.
• Technological Innovations: Advanced encryption and federated learning enhancing data security and clinical assistance.
• Leadership: Emphasis on adaptability and proactive change management to navigate the dynamic healthcare landscape.

This episode offers a comprehensive look into the critical role of information security in healthcare, the integration of innovative technologies, and effective leadership strategies to ensure the safety and advancement of healthcare services.