Conversations in Innovation: Christine Wheaton

Staying One Step Ahead in Healthcare Cybersecurity

Two years. Now, less than one day.

That is how Christine Wheaton describes the dramatic acceleration of today's cybersecurity threat landscape.

"In 2019, it could take nearly two years for someone to exploit or break into a system vulnerability," Wheaton said. "Today, AI can help reduce that timeline to less than a day. That's how quickly things are changing."

For Wheaton, Vice President and Chief Information Security Officer at Henry Ford Health, that reality reinforces the challenge facing cybersecurity teams across every industry. As technology evolves, so do the threats. Staying ahead requires constant vigilance, continuous learning and a willingness to adapt.

At Henry Ford Health, Wheaton leads efforts to safeguard the systems, data and technology that support patient care. Her team monitors emerging threats, evaluates risks and develops strategies to protect critical infrastructure from cybercriminals, nation-state actors and increasingly sophisticated AI-assisted attacks.

No two days are the same.

"One moment we're talking about emerging security risks, and the next we're looking at regulatory developments, organizational priorities or geopolitical events that could affect the landscape," Wheaton said. "Everything is connected, and everything is changing."

An Unexpected Path into Technology

While cybersecurity has become one of healthcare's most critical functions, Wheaton's path into the field was anything but traditional.
She began her career in finance, where she found herself constantly searching for more efficient ways to complete routine work. That curiosity led her to begin writing simple programs to automate tasks, sparking a broader interest in technology and how systems operate.

"I actually started in finance," Wheaton said. "I was always looking for ways to make processes more efficient. That eventually led me into technology, and from there I just kept wanting to learn more."

Over time, that curiosity expanded into application development, networking, architecture, infrastructure, operations and cybersecurity. Her career took her through roles in banking, retail and the automotive industry before ultimately leading her into healthcare, where she now helps protect the technology systems that support patient care.

Throughout each step of that journey, one thing remained consistent: a desire to understand how things work and how they can work better.

That mindset made cybersecurity a natural fit, bringing together technology, problem-solving and continuous learning in a field that never stands still.

AI on Both Sides of Cybersecurity

Artificial intelligence is transforming cybersecurity for both attackers and defenders.

Threat actors can use AI to create more convincing phishing attempts, generate malicious code more quickly and automate parts of an attack. As a result, the speed and sophistication of threats continue to increase.

At the same time, AI is becoming an increasingly valuable tool for cybersecurity professionals.

"AI is changing the game for everyone," Wheaton said. "The same technology that can help attackers move faster can also help us identify risks, analyze information and make decisions faster. It's helping us better understand an incredibly complex environment."

For Wheaton and her team, AI can help process enormous amounts of security information, identify patterns, prioritize risks and focus attention on the threats that require the most immediate response. Rather than replacing human expertise, these tools help strengthen it.

The team is also looking toward the future, evaluating emerging technologies and security strategies that can help Henry Ford Health remain prepared for the next generation of cyber threats, including advancements in areas such as post-quantum encryption.

The same technology creating new risks is also creating new opportunities to defend against them.

Protecting More Than Technology

The consequences of a successful cyberattack extend far beyond a computer screen.

An attack can interrupt operations, delay access to important systems and affect people throughout a healthcare organization. For Wheaton, that reality shapes how she views her role.

"People often think cybersecurity is only about technology," she said. "But at the end of the day, it's really about protecting people. The systems we support are directly connected to patient care, caregivers and critical operations across the organization."

Whether safeguarding patient information, supporting caregivers or helping critical systems remain available, cybersecurity plays an essential role in supporting Henry Ford Health's mission.

Much of that work happens quietly behind the scenes. Patients may never see the monitoring, planning and problem-solving involved, but those efforts help create the trusted digital environment modern healthcare depends on.

A Field That Never Stands Still

For Wheaton, the most exciting part of cybersecurity is also what makes the work challenging: it is constantly evolving.

New technologies create new opportunities. New threats introduce new challenges. Every day brings another puzzle to understand and another problem to solve.

Success does not come from relying on a single tool or assuming yesterday's approach will work tomorrow. It comes from remaining curious, continuing to learn and being willing to adapt.

"The moment you think you've learned everything is the moment you fall behind," Wheaton said. "You have to stay curious. You have to keep learning. That's what allows you to adapt."

As the time required to launch cyberattacks continues to shrink, that mindset becomes even more important.

For Wheaton and her team, staying one step ahead is about more than protecting technology. It is about helping protect the people who depend on it.