
Loading summary
A
Foreign.
B
Welcome to Risk Never Sleeps, where we meet and get to know the people delivering patient care and protecting patient safety. I'm your host, Ed Gaudet. Welcome to the Risk Never Sleeps podcast in which we learn about the people that are on the front lines protecting patient safety and delivering patient care. I'm Ed Gaudette, the host of the program, and this program is brought to you by Senseinet, the leader in third party risk management and enterprise risk management for healthcare. And I just grabbed somebody right out of the aisles. A good friend, an old friend. Not that he's old, but I've known him for a while. Ty Greenlaw from Armis.
A
I am old.
B
Yeah. Yeah, you are.
A
Been doing this for a while.
B
You've been doing this a while. Yeah. I think I met you at the HSCC meeting for the first time.
A
Yeah, we were in the Humphreys building having lunch together.
B
Yeah. Having lunch together. Back in 1819.
A
Yeah, I think so.
B
We were.
A
We just started the 405D group.
B
That's right.
A
At that point.
B
Yeah, yeah, yeah, yeah, yeah, yeah. We just started the 405D group. Yeah. We were so much younger in our careers too. So much wiser.
A
It's not. It's not the age, it's the mileage. It's the mileage.
B
All right, let's start off with sharing a little bit about yourself, your role in your company, Armis.
A
Great. Would love to do that. I am the healthcare strategist for Armis and most people would know us in this industry for our medical device cybersecurity solution. But what's so interesting here at this conference is the culmination of the purchases of a few AI companies that we've made over the last couple years that are now rolling out into products that are doing early warning. Basically, we're hacking the hackers and being able to tell everyone, hey, you got 30 days. This attack is coming and you have the web server that they're planning an exploit on, or AppSec, which is, if you all remember recently, the anthropic Claude code for security. They released that tool very similar to that, but it's in a platform. So we're able to read the logic in the code. Instead of sort of like if you had an LLM document. Yeah, you put it through an LLM, you. It tells you, oh, you know, your last paragraph really wasn't strong enough. Well, here you're saying the MFA wasn't strong. Yeah, the code versus just looking for syntax. So that's huge. The HHS OIG just did an audit for a hospital in the Southeast. They got something on their website about it where they basically is pen testing. And they came in via the code because the code was weak and with all the AI that's here on the floor, I mean everybody's doing AI, Right. But the hospitals are using AI to code, which is notoriously less secure.
B
Right.
A
And so the code has security issues and to be able to find those and manage those. So that's a really cool piece. And then the third company that we kind of rolled in fixes the problem that most people are having in this medical device cybersecurity world, which is, hey, I see everything now, but I've got all these vulnerabilities and the vulnerability from CrowdStrike and vulnerability from this and which, you know, I've got so many. And I'm in firefighting mode. This AI figures all that out and then figures out who owns the problem.
B
Okay.
A
And can assign it to them.
B
Oh, interesting.
A
And so this third party came in called Omdia came in and did a study on it and it turns out it's a 90% reduction on mean time to remediation. Wow. A 59 reduction in patch cycle time and a 351% hard dollar ROI because you've got cyber security insurance. Their cyber insurance went down 25%. They were able to see licenses of software they're not using. It's just a visibility.
B
That's a really great roi, right? Yeah.
A
I mean it's not something that you have to run to, but in this market you get a security tool that's going to do all this and it's going to save you money. Yeah.
B
Nice.
A
There's a lot of stuff we got going on.
B
Yeah. Any announcements this week?
A
Well, the one product we just released was a vulnerability management detection response tool that goes into this platform.
B
Okay.
A
And it's more of a real time. Instead of getting a snapshot, you're doing real time. And just with the monitoring we're already doing, we can see 60 to 70% without doing any type of integration with the agents that are on the device. So it's a new tool. It's going to be competing with the Rapid Sevens.
B
Oh, okay, cool. Yeah.
A
Tenables.
B
Oh yeah.
A
A big release. When you put that into a platform with everything else that you talked about, it's really moving us into a whole different level. But the greatest thing that's coming along is that ServiceNow is buying harvest. For those who don't know that that's coming, that'll be finalized In July.
B
Wow, that's big news.
A
It is. I can't tell you how many people were here. We're saying, well, we're a big service now. Shop.
B
Yeah. Like yeah, you're going to get armists now.
A
Well, I hope so, but at least they should reach out to us and find out.
B
Yeah.
A
What's that going to mean? How would all of those things that you just talked about ty factor into our environment?
B
Yeah. Cool. Anything strike you over the last four days here as new or novel or any trends that you've recognized?
A
We did Cyber Security forum on Monday. We had a lot of great, great speakers there. But it was, you know, a lot on AI again. And I'm speaking on behalf of the HSCC AI Work Group.
B
Yeah.
A
Tomorrow at Thursday at 10 o' clock in the educational session with Lacy harbor from Thermo Fisher, if anybody wants to know more about AI. And so the HSCC presentations on Monday at the cyber forum were very, very insightful. There was a, a lot of talk there on AI and there had to be a theme. That's it. But you've got a lot of companies that are AI washing their tools. Like oh, I've got an MCP server.
B
Well, slapping it on, not building it in from the ground up. Yeah.
A
MCP is just a risk.
B
I mean it's.
A
Now what's it all talking to? How are you controlling what the agency is?
B
Yeah, they're. No pun intended.
A
Yeah, exactly. I think excessive agency. And then you can interact with this tool because now you can put a prompt in before you would run a report.
B
Right.
A
It's like. No, that's not exactly AI guys. And so as a part of HSCC we have a work group that obviously you know about. You're a lead on one of the two of the subgroup. Yeah. Which is the AI in healthcare we've got education, governance, secure by design operations and third party risk. Right. What are the two that you're in charge of?
B
Third party risk and governance.
A
Okay. Yeah. Co lead. Awesome. And so the Secure by Design group is going to present tomorrow.
B
Nice.
A
Thursday, 10am Please stop by. Got a little something for everybody.
B
Where?
A
And the educational track. Okay. You just look up on the app upstairs or. Yeah.
B
Okay.
A
Like an hour long.
B
Nice.
A
Real deal process.
B
Yeah, that's great.
A
You know we got the cyber stages down here. It's not.
B
Yeah, yeah, yeah. The dungeon we like to call.
A
Yeah. So tell me a little bit about.
B
You'll be upstairs soon too because you'll be with ServiceNow. So you'll actually be up in the big boy floor. Yeah, he won't be down here with us.
A
So tell me about the governance. Tell me about your work groups. What are those two?
B
Yeah, so AI Third party risk and AI Governance. And so they are guidance for each one of those topical areas. And the governance one is all about structuring a governance program. What to consider from an organizational perspective. Having diversity of functions and roles is really critical for AI governance.
A
Policies, processes, any ISO 42001?
B
No, we're not. We do reference a lot of the standards that are out there, so 2933 UL, so there'll be a number of AI governance references. HSI, actually I was part of that standard.
A
You got the NIST AI Risk Framework,
B
you got the RMF from nist, you have the HSI Governance, which is now ANSI certified, so that's available as well. When I was part of that team. So there's a number of governance standards frameworks, best practices guides that are coming out now, which is great. And of course, you know, in six months they'll all be out of date.
A
So you have a clone or something?
B
I do, yeah.
A
How do you do?
B
Actually, I did clone myself. This is the hologram. You don't realize, but I'm actually a hologram right now. Yeah.
A
So you like really invested into the whole dolly thing back then?
B
Salvador Dali too, the artist of chaos.
A
You know the new thing called the Yamanaka factor.
B
Oh, what's that?
A
This is real Yamanaka, everybody look it up. It's the ability to go in and modify your DNA at the cellular level. Yeah. And they've experimented this on animals and it actually regenerates any part of the body and to make everything donor.
B
Really?
A
And so they've just licensed right now to experiment on humans and they're going to start with like the eyes and so to get rid of it's reverse cataracts and things.
B
Which company is doing that?
A
I didn't. There's only like a handful.
B
What's it called?
A
Yamanaka.
B
And what is that why? Yamanaka.
A
What does that mean? I think the guy that figured it out was Mr. Yamanaka.
B
Oh, I have to look up the etymology of that word. Yamanaka effect. Ty, you always bring me new things. I always learn something from you. Did we talk about lucid dreaming and astral projection?
A
And we did. Yeah, we did. And your poetry? Talked about your poetry.
B
Yeah, my poetry. And now do you still lucid dream?
A
No. Remember I did that one time and it scared me so bad.
B
I never did that's right.
A
Yeah. I sat straight up in bed and just like, this is too close to home. Yeah.
B
Did you ever have the. Not the nightmare, but the night demons or whatever do they call that? No, no, no. That's a fun dream. I had it one time in my life. It's not good. Yeah. When you wake up, you're still dreaming, but there's somebody in your room. Sleep paralysis. Yeah. You end up getting sleep paralysis. So you're sleeping but you're awake, but you can't move. And there's something in the room that's coming towards you and gets like right over you. It's usually on your chest.
A
Wow.
B
It's awful.
A
Yeah, it sounds it.
B
It's awful. And you're screaming out, but nothing's coming out.
A
Yeah.
B
Because you can't move, right? Yeah, it's terrible. I had that one dime happen. I don't recommend that.
A
Kids, last night I came back from dinner.
B
Yeah.
A
Went over to the roulette table.
B
Yeah.
A
Put 100 bucks on 14 and it won.
B
Dude, I've done that twice in my life. 23 and 33.
A
No, that was my dream.
B
Oh, that was your dream.
A
Oh.
B
You know what? You should do that today. I probably should, actually. I'm going to do it. Screw you. I'm going to win. I was literally thinking about my 23 and 33.
A
You should be playing those now because
B
23 is my birthday and 33 is my life path number.
A
I think 23 was the number that. Wasn't that the movie 23 with Jim Carrey? He lost his mind. Everything reduced down to 23.
B
I'm gonna watch that movie. I don't think I've ever seen that. Oh, man.
A
It's like another learning.
B
From what? From Wesley. I learned a lot from Wes, too.
A
Of course you did. He's a great guy.
B
He's a great guy. Yeah, he's a terrific guy. All right, so let's unpack ty a little bit. You see your 20 year old self, what would you tell him?
A
It's gonna be okay.
B
Yeah, I think that was your answer last time.
A
That's good.
B
You're consistent. Fun fact about you that nobody knows.
A
I am a dancer and my favorite is Argentine tango. I've.
B
You are an interesting man.
A
You have no idea. So it's a beautiful dance. It's super complicated.
B
It's physical poetry.
A
It really is. You're not allowed to talk. There's all sorts of etiquette in this dance.
B
Yeah.
A
Yeah. And you're not allowed to talk. And when you Ask a girl to dance. Yeah. It's with your eyebrows. And you'll do it from across.
B
Can I see what it looks like? Oh, wow. He has such control of his eyebrows. I'm frightened now.
A
That may be the reason that, you know, she says yes, but she'll just give you a nod. So, you know when the song begins.
B
Yeah.
A
You walk over and it's already decided. It's not rejected there at the table. Yeah. And I think it's called a Quebec. Oh, is what that's called a Quebec. Yeah. And then when you get on the dance floor, you can't talk. You've got to enter in. It's almost like a merge. And the traffic. Because it goes in a circle, really. It's just all sorts of etiquette, and it's a beautiful dance expression of life. Into that I was. Well, I started with salsa and bachata and samba and roomba and chacha, Latin dances. And like I said, I'm a dancer. I love dance. I really.
B
And somebody said, you got to try the Argentinian tango.
A
Well, it wasn't just somebody. Who was it? That's classified.
B
Okay.
A
No, just started taking lessons on that. I've been to a couple competitions. Not that I competed, but watching them, it's an amazing.
B
Yeah.
A
Beautiful, beautiful dance.
B
Did you ever hear Miles Davis, Sketches of Spain? I think he would like that. True. Yeah. Spanish. It's old school Spanish.
A
Very eclectic.
B
Yeah.
A
Argentine tango music is very old. I mean, it's.
B
This is old.
A
Yeah.
B
Miles Davis. I'll send you a link to it.
A
Yeah, we'd love to.
B
You'd like it all.
A
And so I get all sorts of salsa, you know, the new stuff. Old stuff. And it's just a lot of fun. Yeah. Especially if you're down in Puerto Rico
B
or someplace we're not videotaping, but I know when we do our little short. I think you should wear that. Don't wear your coat. You should show the man bags.
A
Okay.
B
Yeah, yeah. Because that looks good. Look at those arms, man. Damn, you're pumped. Damn. Wow. I never saw that side of you, man.
A
Hey, eyes up here, buddy.
B
You're a handsome man.
A
Would you like to dance?
B
All right, so someone's fanning themselves. Okay. Favorite TV show growing up as a
A
kid, real young, it'd be Spider Man.
B
Oh, nice.
A
Yeah.
B
You're a comic book guy.
A
No, no, my son really is. He really got it. I think I put him too solid into Marvel to begin with. You know, he was there from the very beginning.
B
Yeah.
A
X Men. He knows everything about Everything. Yeah. Yeah. Which is cool.
B
Nice.
A
Yeah, nice. It's a healthy couple. He's got their hot habits. 30.
B
I don't think it's a habit at 30. Therapy.
A
Well, let me tell you, my. All my children need therapy. It's.
B
I hope they're not listening to them.
A
With reason.
B
With love, actually. Yeah. Yeah. I've never done therapy. I'm intrigued about it.
A
Have you done it? Yeah.
B
You have?
A
Oh, man. Yeah. You have to. You gotta have somebody to listen to you.
B
Yeah. Well, that's why I do the podcast.
A
To hold up a mirror and just say, I don't want a mirror. This is probably why you haven't done counseling.
B
You know, it's like, oh, counseling. I thought you said it was therapy.
A
But what is therapy?
B
Counseling. I don't want to be. I'm not. I'm not someone that likes to be counseling.
A
I work out therapy.
B
Oh, yeah. So that's probably why I've never done it. Yeah. But, yeah, my kids have done it and they love it. They're like, dad, you need therapy. Which means I probably do need therapy. I like to figure out things of my own. You know, that's the journey of life. Right.
A
But it's like, you could ask somebody for directions.
B
Yeah.
A
It's like you can learn from the school of hard knocks.
B
Yeah.
A
Or you can learn from somebody who's learned from the school of hard knocks.
B
How can the therapists learning from the school of hard knocks is actually going through the school of hard knocks? You think most therapists go through the school of hard knocks?
A
I think a lot of people who have gone through very hard times that have caused them to do a deep interpersonal moral inventory and a painful.
B
See, I've done all that with aa. Yeah, I've done all that with aa.
A
So you may not need to. Yeah, but. So you could come out. A lot of people would come out and say, I want to be a therapist now. I want to help other people to traverse that.
B
Yeah. Okay. That makes sense.
A
And so. But not. Not like us.
B
Not like us. No.
A
We want to help people.
B
No, we're love therapists.
A
Yes. Absolutely.
B
Speak the language of love.
A
Well, see, that's Argent Mango.
B
That's right. In poetry. Exactly.
A
Right.
B
Yeah. We're steeped in it. Desert Island, Six records. What would they be?
A
I don't see. You do. I don't.
B
Okay. You can name bands or whatever. I just want to know your musical taste. What do you listen to?
A
My musical taste?
B
Yeah. You have Spotify. I have.
A
I'm going to show you.
B
Oh, he's pulling out something out of his. One of the bags he has strapped to his side. You look like Clint Eastwood or something from some Dirty Harry movie with those.
A
Make my day. So Playlist here.
B
Oh, yeah. Okay, let me look at your.
A
I've got.
B
Never had this happen before.
A
Okay.
B
All right. Oh, my God, you got it all. San Francisco salon.
A
These are all dance styles. They're styled. Oh, and so I dance all these.
B
He has Ariana Grande as well on here, but Astro. Gibralto. Gibralto. Yes. Yes, that's good. Yes.
A
I'm eclectic.
B
Andre Bocelli, look at you. Buble, come on. Stop it. Chris Body. Okay, maybe. Oh, Daddy's jam. Hold on. We got something here, kids. Let's look at that. Eminem, Pitbull, Kid Rock, Jason Derulo. Me Trainor, Lady Gaga. These are Dance Flow Writer.
A
Dude, it's Aisle of Dance. Who are you going to the Samba Azalea?
B
Katy Perry. Okay, I'm putting this away before someone gets hurt.
A
Oh, no, no, no. You need to go to this.
B
No, I. I'm done. I'm done looking at phone, man. I don't want. I definitely want to. Don't want to go to your photo gallery. See Nugent, Ted, Stranglehold. Catch. Okay, good, good. These are good. Slow Ride, man. Okay. Immigrant Song, Zapp Organized.
A
So it's like, what mood am I in?
B
Rush? Aerosmith. Oh, this is a good playlist. You need to.
A
You need other.
B
No, no, the other ones aren't good. You need to invite.
A
You don't dance.
B
You need to invite me this. To this playlist. That's a good one. That's not bad. Okay. All right, all right. You're a little eclectic. I like that. I like that. What advice would you have to someone that wants to get into our line of business? Don't do it. Yeah, go figure out AI.
A
Well, I spend a lot of time just, like, podcasts and reading. Yeah, it's. I'm ingesting so much fast, and then if I don't know something, rolling over to AI and asking it and getting really good at prompting to learn what I don't know. So you just have to hit this constant learn mode. Nice to keep up and then come to this show. So if you want to be in health care in it, figure out a couple of things.
B
Welcome to hims.
A
Yeah.
B
Not the Risk Never Sleeps podcast.
A
Well, you also. This is one of the things I listen to all the time, so.
B
Sending you some love, brother.
A
Thank you. So figure out, you know, if this Is health care is where you want to be, or you can apply this to anything. And what is my skill? Yeah, like yours is bs, right? No, I'm joking. This is so yours. Yours, you know, yours is leadership and vision and running a company.
B
Don't put a label on me. I don't like labels.
A
Okay. So you figure out what it is. It's like you could be in sales, you could be an accountant. You know, you could be good with numbers.
B
Yeah.
A
You're good with people, you're good with numbers. You were good with the tech. So what is it? And then what could you do in this area? Is it. I want to be in cyber security. Drill it down around what your interests are and what your talents are, your natural gifts. Nice. And then come to this show and get in. You can even talk to a vendor and say, hey, can I get a day pass?
B
Or whatever. Right.
A
You don't spend a bunch of money, but then you go visit all the booths. How many booths are here, do you think? Oh, my gosh, a lot.
B
Yeah, a lot.
A
Bring your tennis shoes.
B
A thousand, maybe.
A
Bring your tennis shoes.
B
Right.
A
And then you go and you meet all these people and you get the contacts and then you follow up.
B
Yeah.
A
And if you have that level of interest, you can get started, get in, learn about the industry, learn about how the companies are running, and then move laterally. Move laterally on the target.
B
Like an attack.
A
Yeah, absolutely. CrowdStrike just said in their latest report that it's 27 minutes to get in until they're on target.
B
Oh, really?
A
Yeah. That's how fast they're moving now.
B
27 minutes.
A
27 minutes. So that goes back to the original stuff. If you're not doing real time AI, like.
B
Yeah.
A
You know, like what Armis is releasing.
B
Yeah.
A
And you're doing snapshots of things, sending them over an interface. Right.
B
Yeah.
A
AI is going to eat.
B
Good luck. That's right.
A
Health. Isaac said this is the year of AI Attack.
B
Going to be working at Applebee's.
A
Exactly.
B
Right. Right. Which is a good job.
A
Career limiting move.
B
It's a good job. Something right. I love Applebee's.
A
I do, too.
B
Yeah.
A
Great steaks.
B
Yeah, yeah. Margaritas. And for those drinkers out there, we're not.
A
I don't know.
B
I actually never been to an Apple piece. I like chilies.
A
There's a whole lot of people you've offended. What's wrong with Apple?
B
No, I like chilies.
A
Yeah.
B
I've never been to Taco Bell either, But I love McDonald's. I love filet o fish. I'm a flail o fish guy, like Michael from the office. He was big enough filet o fish, too.
A
I liked Taco Bell back in the day.
B
Yeah. Never eaten a Taco Bell?
A
Yeah, no. But go to a local Mexican restaurant now.
B
Edette from the Risk Never Sluice podcast. If you're on the front lines protecting patient safety and delivering patient care, remember to stay vigilant because Risk never sleeps. Thanks for listening to Risk Never Sleeps. For the show, notes, resources and more information and how to transform the protection of patient safety, Visit us@SenseInet.com that's C-E N S I N E T dot com. I'm your host, Ed Gaudet. And until next time, stay vigilant because Risk never sleeps.
Host: Ed Gaudet
Guest: Ty Greenhalgh, Healthcare Technology Strategist for Armis
Recorded: May 25, 2026
This lively episode, recorded on the conference floor, features a conversation between Ed Gaudet and Ty Greenhalgh about the rapidly evolving intersection of AI, cybersecurity, and patient safety in healthcare. Ty shares industry insights, discusses new AI-driven innovations at Armis, and reflects on what the healthcare sector must do to anticipate and prevent breaches in a world moving at machine speed.
Armis just launched a Vulnerability Management Detection Response tool, providing real-time, agentless visibility into device risks ([04:09]).
Major acquisition news: ServiceNow is purchasing Armis, expected to be finalized in July. This signals greater integration with enterprise workflows ([04:54]).
This summary covers all major discussion points and captures the distinct flavor of Episode #225. For further resources, visit censinet.com.