This transcription is provided by artificial intelligence. We believe in technology but understand that even the smartest robots can sometimes get speech recognition wrong.

Executive Interview: Demystifying Identity and Digital Experiences with Steve Gwizdala

[00:00:00] Today's episode is brought to you by Ping Identity. When healthcare workers are locked out of systems due to password issues MFA delays or authorization glitches, patient care suffers. Ping identity eliminates these roadblocks, giving staff seamless verified and secure access to critical resources while it maintains full control.

No more choosing between user experience. Security and compliance healthcare systems using ping identity count, login times and complexity. Increase security and reduce help desk costs while meeting the strictest audit requirements. See how at this week, health.com/ping identity. That's this week.

health.com/p ING dash identity.

GMT20250714-172930_Recording: I'm Sarah Richardson, a principal here at this week Health where our mission is healthcare transformation powered by community. Welcome to this executive interview, [00:01:00] candid conversations about leading with purpose.

Let's connect.

Sarah Richardson: Welcome to This Week Health. I'm Sarah Richardson, and today I'm joined by someone shaping the future of identity in healthcare. Steve Gz, vice President of Healthcare for North America at Ping Identity.

As health systems accelerate AI adoption and digital transformation, identities become a mission critical item for security, patient access, and increasingly for agentic AI governance, ping sits at the center of that ecosystem, helping organizations protect identities, streamline access. And enable the next gen of healthcare experiences.

Steve, welcome to the show.

Steve Gwizdala: Thank you for having me, sir. Appreciate it.

Sarah Richardson: I'm so happy you're here. I was. We're looking forward to this conversation because you have had a fascinating journey across healthcare technology. What originally drew you into the identity space and what led you to Ping?

Steve Gwizdala: It's a very long story, but I'll keep it short.

I got into identity back in 2004, and if you can believe it, back then it was dealing with public keys, private keys, people [00:02:00] call it PKI. Yeah. One time passwords. If you remember back in the day, now this may be your parents, not you. I just need to classify that, is that they had a little token they had to carry with them in order to log in the system and it generate a one-time password every so many seconds.

That's really where I started securing end users so, I was intrigued by. Good actors, bad actors, kind of wanting to be a whole part of that solution. That's what got me into securing enterprises and that's where I started. Now with respect to Ping, what I was really fascinated with them was 2017 and it was how rabid their customers were and how they were being rated that time by Gartner and by Forrester, and now eight years later we've been in the Gartner Magic Quadrant for nine years.

And I was brought in to start a healthcare vertical, and our healthcare vertical is thriving. So that's kind of where I came from and how I got here.

Sarah Richardson: Well, I'm glad you did, and I did carry that fob around in my bag for years. I [00:03:00] was one of those people for sure. And as you've noted, ping has become a trusted platform across multiple industries, but healthcare has a unique challenge in and of itself.

How do you explain Ping identities value to an executive who's still trying to make sense of the fragmented identity space?

Steve Gwizdala: It really boils down to two levers. And those two levers for an executive standpoint is, can I increase my revenue or can I decrease my cost? Mm-hmm. And that's really what the fragmented identity space is all about.

Costing the organization like a tremendous amount of money and think of that both from maintaining it from a system perspective as well as a personnel viewpoint. So if I have all these fragmented identity stores and systems throughout the enterprise, I've gotta maintain all the talent for every one of those systems as I move forward.

And then lastly, how do I then deliver a delightful, secure experience to both my employees and my patients and [00:04:00] members? And that's kind of driving the revenue side, is like, how can I make my employees more efficient? And how can I create brand loyalty with my patients and my members?

Sarah Richardson: Identity always was a security project, but it's not anymore.

It's really central to everything. As you've noted, a digital front door, AI governance, clinical productivity, stickiness for the consumer, and how easy it is to access systems. What major shifts are you seeing in how health systems are thinking about identity today.

Steve Gwizdala: Yeah. You nailed it with, you talk about digital versus security.

It's really, I mean, if you boil it down, how does a payer or a provider. Become more relevant in the world of healthcare because all of them, patients, members, clinicians, they all have choices and patients can determine where they go to get their healthcare. I mean, you and I were joking about where we are and where we live.

I have a choice. You have a choice. You could go to a 24 hour clinic, you could go to your local pharmacy, you can go to a Even a local retailer now are now playing in that space. So how [00:05:00] easy or difficult is it? For them, meaning a patient or a member interact with your brand. And when you look from a member perspective, that's more on the provider front.

You know, like hospitals, when I look at it from a member perspective, for a payer side, members have choices and they're now competing across borders, meaning across different states, where in the past it wasn't that way. Now I can go in through marketplaces, I can go in through Medicare and Medicaid, I can look at supplements and really boils down to are you easy to do business with?

Do you accommodate all different demographics? Meaning, you know, age brackets especially because they all wanna do business with you in a different way. If you look, that's more on the consumer side. If you look on the workforce side, when it deals with like clinicians, how do they get access to what they need to do their jobs quickly?

Are you securing your systems? Are those same CL clinicians, if they're no longer authorized, are they taken outta your system? And [00:06:00] then you boil down to, I would say, looking at smartphones are now ubiquitous. So you talk about digital experience. The digital experience in my view, and now I think healthcare is starting to get there as well.

It's no longer an afterthought or a nice to have, if you will. It's a requirement.

Sarah Richardson: It is interesting you say that because even last night I was facilitating a conversation for an association in healthcare I'm a part of, and one of the questions was, do people even go to a website anymore? Everything is app driven, and then within that app is all these generational sort of requirements about ease and the ability to get to the consumer end to the patient.

So I'm curious, Steve, when we think about the real impact that's occurring, what outcomes are you seeing when organizations modernize identity with pain?

Steve Gwizdala: When you get into that, and again, I guess let me break it into two different areas, and I think this will be a theme as we discuss this, is there's two different tracks.

There's the workforce track and then the patient member track. So when I look at it from a workforce perspective is how do [00:07:00] we increase productivity? How do we assign the proper assignments or access to systems day one versus me as a clinician trying to hunt and pack and figure out how do I get access?

And so what this does is from a modernization perspective, it eliminates me as clinician making a phone call requesting to a help desk, you know, all trying to do that, but not doing my job, getting frustrated if I will, on that side. And the other piece on it from the employee perspective is more on the security side.

How do I reduce the number of access points for potential frauds or breaches? As you know, based on your background, healthcare is the number one target for breaches. And so how do we really catch a potential bad actor before they even get access to a critical system? So that's how I would look at it from the workforce side.

When I look at the patient and member experience is how do I delight the customer that impatient and or member [00:08:00] right from the beginning? You bring this up, like what you were talking about last night. It's on my phone, it's on my tablet. I don't even go to a laptop. Right. So how do I give them multiple methods of authenticating based on what you prefer?

You may be like, Hey, I wanna use biometric, I wanna use my eyes, I wanna use my thumb. somebody else's old school, they want a one-time password sent to their phone, you know, like an SMS message. I wanna authenticate by a phone call, somebody calling me on my landline to authenticate to my digital phone, and allowing them to do that take that option, if you will.

And then managing their usernames, their passwords, their sharing of records versus having to contact the call center. You know, you're really, what you're doing is you're increasing that patient and member satisfaction. You're overall decreasing your cost. So I won't say it's a hundred percent altruistic.

Sarah Richardson: Well, the good thing about it, and I had to reset a password this morning, and same thing it said, do you want us to text you? Do you want us to call you? And I'm like, oh. And then it sent the link back into the email. I [00:09:00] still find those to be a little more work than they should be. Mm-hmm. I have aunt and uncle in their eighties, and they'll be like, uhoh.

I stuck myself out again because it's going to multiple places. But based on what you're talking about, you can reduce some of the time to onboard clinicians. Essentially eliminating the friction at patient login. All of this is strengthening security and it's virtual care, remote workforce models that are really being enabled as well.

And do you have a favorite story or example of a health system that has made this transformation feel more tangible, something that clinicians and patients can feel right away that you are able to share?

Steve Gwizdala: I do. I have several, but I'll use one because we all run into it. This is a top 10 US healthcare provider.

And what they did is they undertook a digital transformation. They said, look, we have open doors in different areas that the patient has to go through. Let's put the patient in the center. And what they did was they eliminated multiple usernames, multiple [00:10:00] passwords for every digital entry point into their facility, and went with a universal name and password solution with Ping.

And what it did was it provided access to them. Meaning the patient and member based on permissions. So as I log in, as I go to different areas, I get permissions to what I'm entitled to. And how this is different is someone may say, well, oh, it's electronic medical record. That's not exactly what they did.

Because they had doors not only to EMR, they had doors to physical therapy. They had do doors to online scheduling, they had doors to specialists. I always use the example is you're a weekend warrior. You accidentally hurt your knee. So you go to the ER and you do have an EMR. It has your patient medical record number, but they also did x-rays with you.

They also set it up to go see to a specialist. They also had to touch on your primary care physician. They also told you, well, good news is you didn't do anything, but we need to set you up for physical therapy. All of those [00:11:00] had usernames and passwords associated. Every one of those that I just gave you.

What they did is they said, no, let's create one front door. And now Steve or Sarah, that weekend Warrior can go in and see everything based on where they are. And then like we talked about, the advantage of that was they put the identity in the hands of the patient, which now they can not have to go to the health desk.

They can control their own journey. They can even share their medical record with, Hey Sarah, you're my sister. I want you to see what I just did. That's all at the hands of the patient now. It's just, it's a great transformation story where like you asked before, they put digital in the middle of it, an identity in the middle of it versus an afterthought,

Sarah Richardson: I mean, healthcare's racing to adopt agentic ai, and I had to explain to somebody yesterday a difference between generative and agent, but none of that scales safely without strong identity governance.

This is humans and these non-human agents that are now more and more prolific. How is Ping preparing health systems for this [00:12:00] wave of age? Agentic. AI companions in the environment?

Steve Gwizdala: Well, I think your opening comment about discussing it and educating people is right in the middle of what we're doing right now.

Number one thing we have to do is educate our customers on what genic AI even means to them and what it means to the security space. And we're really seeing, I would say, four distinct categories where ai, agentic AI really takes place. And what they are is pretty simple. Is it like a customer service agent?

So think of that more on your consumer side, the patient, the member side, right? Which is the customers, the patients, the members our customers, meaning like the providers and payers are creating agents to serve us as the patient and member to answer the most common questions, right? So use this agent, go ask what you want, and we'll develop it and do that.

That's [00:13:00] one area of genic eye. It's acting really on our behalf, and do we give them permission to do that, and how do we control that? The other piece is doing more, and you probably see this every day, is doing an integrated experience with like Chat GPT or Gemini or something that is again, a consumer agent that's trying to do this whole full blown.

Integrated experience of ask a question, I do this, and I come back to you and we inter we, we act back and forth, but we're doing things again on my behalf. Then you flip it to the workforce and the workforce. What they're doing is they're trying to do genic AI for employee efficiency, right? So now those third party agents are doing things on behalf of me and I'm working for the provider, or I'm working for the payer.

And the last one would be is the employee assistant agent. That fourth one is where employees are really building a digital assistant to interact with the end user. [00:14:00] And all of those are doing things on behalf of me or the patient or the member. And from a security perspective, they need to understand what is their capability?

Do they log in? Like as a workforce member, they're logging into my system as me. What does that mean?

Sarah Richardson: I'm curious what you're seeing here too, because people are overwhelmed with all these vendors and partners coming forward and saying, Hey, we do identity. We can help you with this and here's all the different places using our technologies.

But there is a differentiation point for paying and how do you build credibility when it's noisy out there? People are all saying they can do these things. So what does it mean for a health system leader to go with Ping as their solution?

Steve Gwizdala: it boils down to truly understanding their landscape and current capabilities.

To your point, I mean, you could come in and you're kind of using the old analogy of a hammer looking for a nail. Mm-hmm. Really what it's better is what is not working versus what is working. Kind of like you driving your car. I'm not gonna [00:15:00] ask you how do you like your car? I'm gonna ask you, what do you, what would you like to do with your car?

If you could, would you add nav to it? Would you add backseat stuff to it? If you had kids, would you add, you know, if it's a truck, would you add runners on the side? That's really where we build the most trust and capability with our consumers. Our customers, if you will, is how can we make your current infrastructure better?

What value can we bring to you to augment that? Can we eliminate cost like we talked about? Can we increase user satisfaction? Are there areas that we could mitigate high risk? That's what we need to do to bring the value to them to establish why we could make it better.

Sarah Richardson: And if you were meeting with healthcare leaders today, and we're thinking about 20, 26 and beyond, and we all joke that you can't go more than a couple years out because it's too.

Not unpredictable, but so much is changing so quickly right now, if you do the lookout over the next 12 to 18 months, what is coming in healthcare that leaders should be preparing for now? And I'm [00:16:00] thinking Steve, of like the, not just the agents and the frameworks, passwordless futures really raising the expectations and what we're seeing more and more of are all these m and a consolidation strategies and how important it's to get certain aspects of that integration right, right away.

Steve Gwizdala: think there's a few things that I would look at, and you actually nailed a couple of them. The AI component that we talked about previously is not just the AI driven, but the genic threats. And these can be things like DeepFakes, which are in the news all the right now. Can we distinguish a human, a bot, an agent?

What do we do? How do we go after that? How do we look at verification or some kind of authorization as we go? That ties into kind of verifiable credentials. We've seen this and we see this really becoming more of a threat is that how do we understand the digital credentials of an individual and how do we make sure that they are who they say they are?

And this can be both the employee side and the patient member side. [00:17:00] So I would say. Think of it more like a digital wallet. As we move forward, that is where people need to go. How do I verify your credential? How do I do a decentralized identity where I can walk in and say, this is definitely Steve and I know that because of X, Y, and Z.

Not just, I trust Steve. 'cause I think that's where we're getting a lot of things over the future, now that they're gonna go in and exploit The other piece, I would talk about probably two other components that I think about it and I'll stop at too. Is the identity for everything in medical, it's been called IOMT versus just IoT, you know, the Internet of medical devices.

Is how do we secure that relationship as it grows more and more with the people, the devices, the APIs, the emerging agents that are coming in the lifecycle with that remote monitoring is really big right now. So when you do home care and you take that maybe EKG home with you, how do I know it's actually assigned to you?

It's [00:18:00] your data. It's coming back into the portal that I see that becoming more and more of an issue as we look out the future horizon is we're doing more via Teladoc telemedicine. And that's an issue. 'cause they're giving you that device, they're trusting it, you're gonna not hook it up to rufuss at home on your dog and it's actually your heart rate.

I would say that is another one. And the last one would be outside of that, which is supply chain attacks. And this is where you've seen a lot of breaches come in, where they're coming in through a third party and the business to business, the identity governance that you mentioned earlier, understanding what the relationships are.

Is it delegated, is it continuous verification? All of that. I would say moving forward is a big threat that we can't ignore.

Sarah Richardson: You know, it's so interesting you mentioned the supply chain angle. 'cause even this morning, wall Street Journal podcast was reporting how Jamie Diamond is bringing forward a whole group of all of his friends like Jeff Bezos to talk about how to secure supply chains.

It's really, it's [00:19:00] becoming a bigger threat for us. And then the other piece I hear you say, Steve, that's really fascinating to me, is. Sort of that identity of everything, that you have one place that you can get your information, that you have these hospitals at home, which are more and more popular.

And Bill touched on it in an article earlier this week that, hey, a couple years from now, 500 of your beds are in people's homes, and how are you protecting that? So for people listening to this and whether they're a customer of yours or not, if you're doing that kind of planning, you want ping at the table.

Steve Gwizdala: Couldn't agree more. Absolutely. Yeah.

Sarah Richardson: No, it's good to hear there's solutions out there that people can rely upon. Okay, now we get into speed round. Are you ready?

Steve Gwizdala: I guess so. I don't have a choice.

Sarah Richardson: I do this to everybody, so if you're listening, you listen to the show, you're like, oh, I know she's gonna ask me some stuff.

All right. What would you say is the most overlooked identity risk in healthcare today?

Steve Gwizdala: I would say that you're thinking that an EMR or an EHR system [00:20:00] addresses all your identity access points.

Sarah Richardson: Okay. And if you could eliminate one access related frustration for clinicians, what would it be?

Steve Gwizdala: You'll appreciate this one.

Entitlements, you know, making sure that you give them access for what they need upfront.

Sarah Richardson: It's always a fun conversation. Uh, Favorite leadership book or philosophy that guides you today?

Steve Gwizdala: It's a combination of both. 'cause I think it's actually a book and it's also a philosophy, which is hope is not a strategy.

Sarah Richardson: Yeah, for sure. Steve, I'm so grateful that you are here today. Appreciate your the insights you provided to our audience and helping to demystify the, this whole identity space that we live in today. And again, for our listeners in health systems ready to explore what Ping Identity can help them solve, where do they start?

Do they reach out to you on LinkedIn? Like, how do you want them to find you?

Steve Gwizdala: I think they could do it on LinkedIn. Happy to address anybody on there. The other piece would be ping identity.com. Click on solutions and click on healthcare, and it's specifically 100% dedicated to what our [00:21:00] clients are doing.

Sarah Richardson: Well, that's fantastic. Plus you can also reach out to us here at the team at this Week Health. We're happy to connect you with Steve as well. So all of our listeners, and to Steve, thank you for joining us. This has been another fantastic executive interview with this Week Health. Thanks for listening, and that's all for now.

GMT20250714-172930_Recording: Thanks for joining this executive interview on Flourish with Sarah Richardson here at This Week Health. We believe every healthcare leader needs a community to learn from and lean on. Join us at this week, health.com/subscribe. Share this conversation with an emerging leader. That's all for now.