

Trusted AI in Healthcare: Risk, Governance, Cybersecurity and Data Protection
Leonard Ong
ISACA International Board of Directors, 2015-2019
ISACA Singapore Chapter President, 2012-2014
IAPP Asia Advisory Board, 2024 - Present
Session Outline
AI in healthcare is often presented as a story of innovation, productivity, and better outcomes. But for governance, risk, cybersecurity, audit, and privacy professionals, the more important question is this: how do we adopt AI in a way that is safe, trustworthy, secure, and auditable?
This presentation will first outline the major categories of AI use now emerging in healthcare, including clinical support, operational efficiency, imaging, and predictive tools. It will then examine the corresponding risks these systems introduce. The session will then discuss how these risks can be addressed through layered governance: national AI governance principles, healthcare-specific guidance, internal enterprise controls, cybersecurity safeguards, data protection practices, and assurance mechanisms.
The overall message is simple: in healthcare, successful AI adoption depends not only on what the technology can do, but on whether the organisation can govern, secure, assure, and sustain trust in it.