Is Your Startup Built on Swiss Cheese? with George Pappas

Many startups overlook hidden vulnerabilities in their pursuit of innovation. 

In this episode, George Pappas, SVP of Security at Health Catalyst, discusses how healthcare systems inherit security risks through mergers, poor integrations, and neglected IT. 

When cyberattacks lead to patient deaths, it's not just a technical issue—it’s a leadership failure. 

This conversation challenges the idea that compliance is enough and offers actionable insights on building a culture of risk ownership from the top down.

🎙️ What You’ll Learn

🔑Why M&A activity in healthcare quietly compounds cybersecurity risks

🔑The real reason most health systems do the bare minimum to be “compliant”

🔑What founders get wrong about building secure, scalable operations

🔑Why security isn't a tech function—it’s a cultural responsibility

🔑How to reframe risk management as a leadership strategy

🔑George’s 3 wishes that would change healthcare infrastructure forever

—-----------------------------------------------

Episode Timeline:

00:00:00 – A metaphor about how unseen vulnerabilities can derail growth.

00:02:38 – Mergers and acquisitions stack hidden vulnerabilities in health systems.

00:05:48 – Cyberattacks real consequences, and patient deaths and legal risks.

00:08:17 – AI and automation help streamline integration and risk management.

00:10:23 – Sabrina shares a real-world example of a hospital system shutting down.

00:13:49 – Expertise allows teams to prioritize and act efficiently on risk mitigation.

00:15:18 – A simple, secure, and standardized architecture for small practices.

00:17:46 – How organizations often "satisfice" with partial solutions..

00:20:46 – Cybersecurity: not just a technical issue—it’s a people issue.

00:22:52 – Being human—especially during difficult conversations—builds trust.

00:23:19 – Culture is built on actions, not just words..

📣 Get In the Spotlight

.css-j9qmi7{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-direction:row;-ms-flex-direction:row;flex-direction:row;font-weight:700;margin-bottom:1rem;margin-top:2.8rem;width:100%;-webkit-box-pack:start;-ms-flex-pack:start;-webkit-justify-content:start;justify-content:start;padding-left:5rem;}@media only screen and (max-width: 599px){.css-j9qmi7{padding-left:0;-webkit-box-pack:center;-ms-flex-pack:center;-webkit-justify-content:center;justify-content:center;}}.css-j9qmi7 svg{fill:#27292D;}.css-j9qmi7 .eagfbvw0{-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;color:#27292D;}