Conference Description
Key Takeaways
- Executive-level cybersecurity summit exclusively for healthcare sector security leaders
- Hosted by Health-ISAC, the healthcare industry’s primary information sharing organisation
- Keynote address from Chris Inglis, former U.S. National Cyber Director
- Focus areas include digital defence strategy, organisational resilience and sector-specific threat intelligence
- Three-day programme combining strategic sessions, roundtable discussions and peer networking
Introduction
The 2026 CISO Summit brings together Chief Information Security Officers and senior cybersecurity executives from across the healthcare sector for three days of strategic discussion and peer collaboration. Hosted by Health-ISAC, the event addresses the distinctive security challenges facing hospitals, health systems, pharmaceutical companies and medical device manufacturers at a time when the sector faces intensifying cyber threats and evolving regulatory expectations.
Healthcare organisations have become increasingly attractive targets for threat actors due to the sensitive nature of patient data, the critical importance of operational continuity and the complex technology ecosystems that support modern care delivery. This summit provides a dedicated forum for security leaders to examine these challenges alongside peers who understand the operational realities of protecting healthcare infrastructure.
About This Event
The 2026 CISO Summit takes place from 16–18 September 2026 at the Garden of the Gods Resort and Club in Colorado Springs, Colorado. The in-person format is designed to facilitate the candid conversations and relationship building that prove difficult to replicate in virtual settings, particularly when discussing sensitive security matters.
Health-ISAC serves as the healthcare sector’s primary Information Sharing and Analysis Center, coordinating threat intelligence and security collaboration across the global health community. The organisation’s role in facilitating real-time information sharing between member organisations positions it well to convene discussions on collective defence strategies and emerging threat patterns.
Strategic Focus Areas for Healthcare Security Leaders
The summit programme addresses several interconnected themes central to healthcare cybersecurity leadership. Organisational resilience features prominently, reflecting the sector’s need to maintain clinical operations even when facing active cyber incidents. This extends beyond traditional disaster recovery into comprehensive business continuity planning that accounts for the life-safety implications unique to healthcare environments.
Digital defence strategy discussions examine how security leaders can align protective measures with organisational objectives while managing constrained resources. Healthcare CISOs frequently navigate competing priorities between security investments and clinical technology needs, making strategic resource allocation a persistent challenge.
Information sharing remains a cornerstone of the Health-ISAC mission and features throughout the programme. Effective threat intelligence sharing enables healthcare organisations to benefit from collective visibility into attack patterns, indicators of compromise and adversary tactics observed across the sector.
Keynote Address
Chris Inglis, who served as the first U.S. National Cyber Director, delivers the summit’s keynote address. Inglis previously held senior positions at the National Security Agency and has been instrumental in shaping national cybersecurity policy and public-private collaboration frameworks. His perspective on coordinated cyber defence and the role of critical infrastructure sectors in national security provides relevant context for healthcare security leaders navigating an increasingly complex threat environment.
Who Should Attend
The summit is structured for executive-level security professionals with direct responsibility for cybersecurity strategy and operations within healthcare organisations. Typical attendees include CISOs, Vice Presidents of Information Security, and senior security directors from hospitals, integrated health systems, pharmaceutical manufacturers, medical device companies and health technology firms.
The executive focus ensures discussions remain at a strategic level appropriate for leaders who must balance technical security considerations with board-level governance, regulatory compliance and enterprise risk management responsibilities.
Programme Format
The three-day programme combines keynote presentations with roundtable discussions that encourage active participation rather than passive observation. This format recognises that healthcare CISOs often benefit most from peer exchange, where they can discuss specific challenges and solutions with counterparts facing similar operational contexts. Networking sessions, shared meals and evening events provide additional opportunities for relationship building that extends beyond the formal programme.