Censinet opens enrollment for 2027 healthcare cybersecurity and AI benchmark study

Censinet has opened enrollment for its 2027 Healthcare Cybersecurity & AI Benchmarking Study, a free program for hospitals, health systems and integrated delivery networks. The sixth-wave study aims to help healthcare leaders compare cybersecurity maturity and AI governance readiness against peers, with results due later in 2027.

Why it matters: - Hospitals and health systems are trying to keep up with cybersecurity threats while AI adoption outpaces governance programs. - The study gives healthcare leaders peer benchmarks they can use to spot gaps, support budget requests and strengthen board reporting. - Prior study results helped shape national cybersecurity guidance, raising the stakes for broad participation.

What happened: - Censinet opened enrollment for the 2027 Healthcare Cybersecurity & AI Benchmarking Study on Oct. 19, 2026. - The annual study is open to hospitals, health systems and integrated delivery networks at no cost. - The program is co-sponsored by the American Hospital Association, Health-ISAC and the Healthcare and Health Sector Coordinating Council Cybersecurity Working Group. - Censinet said the study is now in its sixth wave.

The details: - Participants complete two enterprise assessments and one organizational questionnaire in Censinet RiskOps. - The assessments cover NIST Cybersecurity Framework 2.0 maturity, NIST AI Risk Management Framework governance, and organizational metrics tied to cyber structure, staffing, investment, ownership and performance. - The 2027 version removes the optional HICP and HPH CPG modules. - The 2027 version makes selected organizational metrics fields optional. - Eligible responses from prior-year assessments can carry forward for review. - Participants receive complimentary benchmarking access in Censinet RiskOps, peer comparisons, board-ready dashboards, summary reporting, a participant-only Deep Dive Report and an executive summary of industry findings. - Participants also get a webinar with expert perspectives on the results. - Individual responses are never shared. - Findings are reported only in anonymized, aggregated form. - Peer comparisons appear only when enough data exists for the selected comparison group. - Questions can be sent to benchmarks@censinet.com.

Between the lines: - The study is tracking cybersecurity and AI governance together because healthcare organizations are deploying AI faster than governance teams can document and manage it. - Findings from the 2026 study showed 70% of participating healthcare organizations had an AI governance committee, but only 30% maintained an enterprise-wide AI inventory. - One-third of participants had no way to detect when vendors embedded AI into products already approved. - Censinet said the benchmark data helps turn uncertainty into evidence that leaders can present to boards. - The study’s earlier anonymized data fed into the HHS Hospital Cyber Resiliency Initiative Landscape Analysis, published in May 2023. - That HHS report helped inform the Healthcare and Public Health Cybersecurity Performance Goals issued in January 2024.

What's next: - Qualified healthcare organizations must request participation and complete the questionnaire and both assessments by Dec. 7, 2026 to be included in the 2027 analysis. - Censinet will use the collected data to produce anonymized industry findings, participant reports and board-facing benchmarking materials. - The company is positioning the study as a recurring reference point for healthcare leaders measuring both cyber maturity and AI governance readiness.

The bottom line: - Censinet is using its latest benchmark study to give healthcare organizations a free, structured way to compare cyber and AI governance performance against peers at a time when both risks are rising quickly.