Conference Description
Key Takeaways
- Multi-day healthcare cybersecurity summit hosted by Health-ISAC in Tucson, Arizona, from November 30 to December 4, 2026
- Designed for CISOs, IT security leaders, risk managers and compliance officers working in healthcare
- Focus on information sharing, sector resiliency and practical cybersecurity strategies
- Programme includes sessions, roundtables, workshops and structured networking opportunities
- Addresses cross-sector collaboration and incident response challenges facing healthcare organisations
Introduction
The 2026 Fall Americas Summit brings together healthcare security professionals for five days of knowledge sharing, peer collaboration and professional development. Organised by Health-ISAC, the event takes place in Tucson, Arizona, and addresses the cybersecurity challenges that continue to intensify across the global health sector. As healthcare organisations face increasingly sophisticated threat actors and regulatory pressures, gatherings of this nature provide a forum for practitioners to exchange operational insights and strengthen collective defences.
About the 2026 Fall Americas Summit
Health-ISAC, the Health Information Sharing and Analysis Center, convenes this summit as part of its mission to improve cybersecurity resilience across the healthcare industry. The organisation serves as a trusted community where members share threat intelligence, vulnerabilities and mitigation strategies. The Fall Americas Summit extends this collaborative model into an in-person format, enabling deeper engagement than virtual channels typically allow.
The programme spans November 30 through December 4, 2026, and features a mix of educational sessions, interactive roundtables, hands-on workshops and evening networking events. This structure reflects the dual priorities of the healthcare security community: acquiring actionable technical knowledge while building the professional relationships that facilitate rapid information sharing during incidents.
Cybersecurity Challenges in Healthcare
Healthcare organisations operate under unique constraints that complicate cybersecurity efforts. Clinical systems must remain available around the clock, legacy medical devices often cannot be patched without regulatory implications, and the sensitivity of patient data makes the sector an attractive target for ransomware operators and nation-state actors alike. These factors create an environment where traditional security approaches require adaptation.
The summit addresses these realities by emphasising practical knowledge transfer between organisations facing similar challenges. Rather than theoretical frameworks, the focus falls on operational best practices that attendees can implement within their own environments. Topics such as incident response coordination, threat intelligence consumption and cross-organisational collaboration feature prominently in Health-ISAC programming.
The Role of Information Sharing in Sector Resilience
Information Sharing and Analysis Centers emerged as a mechanism for critical infrastructure sectors to pool threat intelligence and coordinate defensive measures. In healthcare, this model has proven particularly valuable given the interconnected nature of health systems, insurers, pharmaceutical companies and medical device manufacturers. A vulnerability exploited at one organisation often has implications for others operating similar technology stacks.
Health-ISAC facilitates this exchange through automated threat feeds, analyst reports and community forums. The Fall Americas Summit complements these ongoing activities by creating space for the nuanced conversations that build trust between security teams. When an incident occurs, organisations with established relationships can share indicators and response strategies more rapidly than those working in isolation.
Who Should Attend
The summit is designed for professionals responsible for protecting healthcare organisations from cyber threats. This includes Chief Information Security Officers, IT security directors, risk managers and compliance officers working within hospitals, health systems, insurers and healthcare technology vendors. Both Health-ISAC members and non-members may participate, though the event is structured around the shared challenges of the healthcare sector specifically.
Attendees typically hold senior positions with responsibility for security strategy, incident response or regulatory compliance. The peer-to-peer format assumes familiarity with healthcare security fundamentals and focuses on advancing organisational capabilities rather than introductory education.
Programme Format and Networking Opportunities
The five-day programme balances structured content with informal networking. Sessions deliver subject matter expertise from practitioners with direct experience addressing healthcare security challenges. Roundtable discussions enable smaller groups to explore specific topics in depth, while workshops provide hands-on engagement with tools and methodologies.
Evening events and networking breaks are integrated throughout the schedule, recognising that relationship building represents a core outcome for many attendees. The connections formed at events like this often translate into ongoing collaboration through Health-ISAC channels and direct peer relationships that prove valuable during security incidents.