CSO Executive Sessions ASEAN: From Compliance to Cyber Resilience-Securing Patient Trust in Southeast Asia’s Hospitals
Overview
Healthcare organizations across Southeast Asia face mounting cyber risk, from ransomware and legacy systems to tighter data protection requirements and the rapid rise of AI. In this latest CSO Executive Session, I had a very enjoyable conversation with Primitivo “Jojo” Nufable, VP and Group Chief Information & Cyber Security Officer at St. Luke’s Medical Center, the Philippines. Jojo shares how the Philippines’ leading healthcare institution transformed its cybersecurity posture in just 18 months.
Jojo, who is one of our eminent CSO30 Awards 2025 winners, explains how St. Luke’s shifted from compliance-driven security to a proactive, risk-based model focused on patient safety, clinical continuity, and organizational resilience. Our discussion explores ransomware readiness, board-level cybersecurity governance, protecting patient health information without disrupting care, and the emerging security implications of AI and generative AI in healthcare.
This session offers practical lessons for hospital leaders navigating today’s complex healthcare threat landscape.



