
ISO 42001 in the Wild: What Certification Actually Proves
Learn what ISO/IEC 42001 certification really proves, how to read scope boundaries, and what evidence to request so procurement doesn’t mistake a badge for governance.

Learn what ISO/IEC 42001 certification really proves, how to read scope boundaries, and what evidence to request so procurement doesn’t mistake a badge for governance.

Every healthcare organization running AI has a governance document. Almost none have enforcement that runs where AI runs. The gap between NIST AI RMF frameworks and operational compliance is the missing layer.

HIMSS26's two dominant themes — AI governance and cybersecurity resilience — signal that healthcare has moved past 'should we govern AI?' into 'how do we govern AI before something goes wrong?'

The HIPAA Privacy Rule updates taking effect in 2026 are the most significant changes in over a decade. Here's what healthcare AI companies need to know about PHI detection, minimum necessary standards, and continuous compliance.