President Trump recently signed an Executive Order titled Promoting Advanced Artificial Intelligence Innovation and Security, placing AI governance firmly at the centre of federal policy.
The order seeks to advance American leadership in artificial intelligence while simultaneously addressing cybersecurity, infrastructure, and national security risks posed by increasingly sophisticated AI systems.
Among its key provisions, the order directs federal agencies to accelerate AI adoption, reduce barriers to innovation, and strengthen cybersecurity capabilities through AI-enabled tools and technologies.
It also establishes a voluntary programme through which developers of the most advanced AI models may submit those models for government-led cybersecurity testing and evaluation before public deployment.
Although these initiatives primarily target federal agencies and frontier AI developers, the order signals the administration’s broader priorities to accelerate AI deployment while strengthening security and risk management practices across the wider ecosystem.
For healthcare organisations, the order’s significance lies less in its direct legal effect than in what it signals about the trajectory of AI governance and cybersecurity expectations going forward.
Healthcare is among the nation’s most targeted critical infrastructure sectors, and AI technologies are becoming deeply embedded across clinical, operational, and administrative functions throughout the industry.
AI systems can serve both defensive and offensive purposes, helping organisations automate threat detection while also giving malicious actors new tools to accelerate cyberattacks and enhance phishing campaigns.
Healthcare organisations deploying AI across clinical or administrative functions may want to assess whether their governance frameworks adequately address AI-specific security risks, including model manipulation, data poisoning, and prompt injection attacks.
The order arrives as healthcare organisations are rapidly integrating AI into core functions ranging from clinical documentation and coding to claims processing, cybersecurity operations, and patient communications.
Many AI systems interact with sensitive data repositories, electronic health records, and enterprise applications, and may be granted broad access to organisational data in order to perform their intended functions.
Traditional cybersecurity assessments may not fully address risks associated with model behaviour, third-party foundation models, autonomous decision-making, or AI-enabled access to enterprise systems.
The order also underscores the importance of understanding the security posture of AI systems before deployment, including questions around model training, data usage, third-party dependencies, and ongoing monitoring.
Healthcare organisations should increasingly seek contractual protections addressing AI-specific risks, including data usage restrictions, audit rights, security commitments, and incident notification requirements from vendors.
The order’s focus on advanced AI systems is particularly relevant as healthcare organisations begin exploring agentic AI, which refers to systems capable of acting with significant autonomy and limited human intervention.
An AI agent that interacts with enterprise systems effectively functions as a new category of user within the organisation, raising critical questions around access management, activity monitoring, and auditability.
Organisations that proactively address governance, cybersecurity, and operational resilience will be best positioned to realise the benefits of AI while effectively managing the risks that accompany its adoption.