Paul Ford

Paul Ford is the Chief Information Security Officer of Greenway Health, appointed in October 2024. He leads the company's Cyber Security Department, overseeing the programs and initiatives that safeguard Greenway's data and systems. Ford has aligned Greenway's security posture with the HITRUST framework to maintain HIPAA compliance and preserve the confidentiality, availability and integrity of the company's products and services. His focus includes developing and implementing policies and controls to protect systems containing electronic Protected Health Information and other critical assets, and managing compliance with frameworks such as HIPAA, HITRUST and NIST.

Career path

Ford brings more than 16 years of experience in information security. He held key information technology roles at the U.S. Naval Academy, contributing to enterprise-scale projects and strengthening security operations. He later served as Manager of Information Technology at Credible Behavioral Health, where he oversaw the corporate IT department and implemented security programs. Before joining Greenway, Ford was Director of Information Security at Inovalon Inc., where he led teams responsible for the delivery of cybersecurity and IT services. His expertise spans cybersecurity operations, security architecture, security engineering, application security, and governance and compliance.

Public commentary on AI and authentication

Ford has written and spoken on healthcare cybersecurity topics for Greenway, including a piece produced with AWS on cloud security practices. Discussing the growth of generative AI tools in the workplace, Ford said, "Over the last year, there has been a significant increase in AI adoption, but it also introduces risk, especially with retail generative AI such as ChatGPT and Copilot," noting that sensitive data leakage is becoming a genuine concern. He has argued that multifactor authentication alone is no longer sufficient to protect sensitive information, pointing to threat actors who have developed ways to bypass such controls. Under his direction, Greenway has partnered with AWS to deploy Adaptive Authentication, a risk-based approach to verifying user identity before granting network and application access. Ford has recommended that organizations adopt phishing-resistant methods such as biometrics and FIDO passkeys and apply adaptive authentication across all access points. He has also described artificial intelligence as the new frontier for cybersecurity, calling for organizations to mature their AI governance and risk posture. Ford has said cybersecurity teams must evolve alongside emerging technologies to continue delivering secure value to customers.