DOI: 10.3390/info17100939 ISSN: 2078-2489

Assessing Cybersecurity Capabilities in AI-Enabled Healthcare Systems Using trustSense

Kitty Kioskli, Eleni Seralidou, Theofanis Fotis, Nineta Polemi

As the adoption of advanced technologies such as artificial intelligence (AI) expands across healthcare, effectively managing associated cybersecurity risks and meeting the EU Artificial Intelligence Act’s human oversight requirements will require a highly skilled and capable security workforce. This study presents the deployment of trustSense, a rigorous assessment socio-technical tool designed to evaluate organisational maturity in security and trustworthy-AI practices. trustSense was applied across two medical organisations, focusing specifically on evaluating staff cybersecurity capabilities. The anonymous assessment generated comprehensive reports detailing the teams’ effectiveness in managing incidents and identifying operational capability gaps. By identifying human readiness gaps and offering targeted social mitigation strategies, this case study demonstrates how targeted human maturity assessments equip healthcare institutions to proactively manage cybersecurity risks and build resilient operations. The findings demonstrate trustSense as a practical and effective tool for assessing cybersecurity capability, revealing actionable readiness gaps, and supporting targeted improvement in AI-enabled healthcare environments. Future work will extend the evaluation across a broader range of organisations and examine changes in capability maturity over time.