Charles J. French writes about protecting organizations from phone-based cyber threats, including vishing, voice impersonation and unwanted calls. Their posts connect voice security to healthcare operations and patient safety, and discuss Mutare’s work in this area.
Check first: Confirm audience breakdown by employer type and role, comparable post engagement, and commercial route.
Main ideas
The phone is the security gap left behind · A convincing call can get around controls built for other attacks · Hospital phone security affects care, not only IT
French writes about protecting organizations from phone-based cyber threats, especially vishing, voice impersonation and unwanted calls.
Their posts connect voice security to practical consequences: how an attack can bypass existing controls, disrupt hospital work or affect patient experience.
Follow their work for arguments that make the phone channel part of the cybersecurity conversation, not just a nuisance or an afterthought.
French makes an under-discussed security risk concrete by showing how it reaches people and operations.
They compare voice security’s current position with email security before phishing defenses became standard, describe a help-desk impersonation attack that captures credentials and an active MFA session, and translate unwanted hospital calls into effects on nurses, patients and experience measures.
They also use industry news and named research to frame the issue, while the Cisco Live post shows they carry the message into partner and conference settings.
The common thread is a practical case for securing the voice channel; the posts also promote Mutare and its services.
French’s posts make a consistent case that organizations should treat phone calls as a cybersecurity risk, not just a nuisance or an operational issue. They connect voice attacks to familiar security gaps, show how they can reach staff before other controls apply, and argue that in hospitals the consequences can extend to patient care.
The phone is the security gap left behind
French compares today’s voice channel with email before secure email gateways became standard.
Read more
Their point is that spam can develop into phishing and more serious attacks, and that awareness training alone does not stop malicious traffic before it reaches people.
In a post promoting Mutare’s 2026 Voice Threat Survey, French traces email’s path from spam to phishing and business email compromise, then argues that voice needs a technical control at the perimeter too.
A convincing call can get around controls built for other attacks
French emphasizes that attackers can begin with a phone call rather than malware.
Read more
The risk is not only a cloned voice: a caller posing as internal IT can persuade an employee to hand over credentials and an active MFA session.
French describes an extortion group reported by Unit 42 that calls an employee, claims a security update is needed, and uses the interaction to obtain credentials and a live MFA session. Their argument is that controls downstream of the call may not stop that first step.
French links unwanted and deceptive calls to interruptions in clinical work and the patient experience.
Read more
That framing brings nursing, clinical, and patient-experience leaders into a discussion often treated as an IT or security concern.
A HIMSS26 post connects calls reaching hospital phones with disrupted bedside care and HCAHPS measures for quietness and staff responsiveness. It cites one health system where a voice traffic filter blocks 8,000 unwanted calls a day.
As software defenses improve, attackers may target people instead
French welcomes efforts to find and fix software vulnerabilities, but argues that attackers can shift toward the human voice channel.
Read more
They use this contrast to explain why protecting software does not remove the need to consider social engineering by phone.
Reacting to Anthropic’s Project Glasswing, French praises the effort to harden critical infrastructure and then points to a phone call and a polite request for credentials as a way to reach a person without exploiting a software flaw. The threat figures in that post are cited from Mandiant and Palo Alto Networks Unit 42.
Across the posts, the argument moves from describing voice as an overlooked channel to drawing a direct analogy with email security and explaining how AI may make attacks on people more attractive.
Answers the newcomer question “why does anyone need to defend phone calls?” with a category argument grounded in a history security buyers already accept.
Read more
French draws a direct parallel between the voice channel today and email in 2001: spam was an annoyance nobody budgeted for, then came phishing and business email compromise, and the secure email gateway became non-negotiable.
The post argues that generative AI has given attackers cloned voices, hyper-personalized scripts and cheap scale, making vishing a preferred path to initial access “precisely because we hardened everything else and left the phone wide open.”
They cite Mutare's 2026 Voice Threat Survey as evidence that security leaders are catching up and treating voice as part of cybersecurity strategy, not something adjacent to it.
The closing argument: awareness training never fixed email; a technical control at the perimeter did.
For brands planning a campaign
A strong narrative for a webinar or thought-leadership piece aimed at security leaders: open with the email analogy, use the survey as the data hook, then introduce the product once the category argument lands.
Shows how French turns an industry headline into an argument for their category, drawing on named analyst data rather than vendor claims—the clearest example of their data-based style.
Read more
Reacting to Anthropic's Project Glasswing coalition with AWS, Microsoft, Google, Cisco and CrowdStrike to find and fix software vulnerabilities, French agrees that hardening critical infrastructure is the right move, then argues it will push attackers toward people instead of code.
The post cites third-party figures: Mandiant's M-Trends 2026 finding that voice phishing has overtaken email as the leading social engineering vector, Palo Alto Networks Unit 42 reporting that 36% of incident response cases began with a social engineering tactic, and the human element appearing in roughly 60% of breaches.
Their summary: attackers reach a human through “a phone call.
A convincing voice.
A polite request for credentials.
No zero-day required.”
For brands planning a campaign
A useful angle for newsjacking and co-marketing: third-party statistics can anchor a sponsored article or event session, while the framing positions voice defense as the gap left by AI-driven software hardening, not a competing priority.
Answers “how do you get a hospital's clinical leadership to care about phone security?” by translating the threat into metrics those leaders are already accountable for.
Read more
Written for HIMSS26, this post reframes unwanted calls as a hospital operations problem rather than an IT one: patients can't rest, staff are pulled from bedside care, and the effects show up in HCAHPS measures such as “Quietness of hospital environment” and “Responsiveness of hospital staff.”
French connects those scores to money—2% of Medicare payments at risk through Value-Based Purchasing, with 25% of the VBP performance score tied to patient experience—and cites one health system where a voice traffic filter blocks 8,000 unwanted calls per day.
The post also warns that AI-powered vishing can fool experienced staff and names the company as an AHA Preferred Cybersecurity & Risk Provider.
For brands planning a campaign
A strong angle for reaching CNOs and patient-experience teams, not just CISOs: a webinar or article can lead with reimbursement exposure and nurse workflow, then introduce call filtering as the fix.
Answers “what does a voice-based attack actually look like?” with a short, specific chain that shows why existing security spend does not cover this route.
Read more
French describes an extortion group on Unit 42's radar that skips malware entirely: it phones an employee, poses as internal IT and talks them through a “security update” that surrenders their credentials and a live MFA session.
Patient and operational data are then gone, and a 72-hour ransom clock starts.
Hospitals and medical suppliers are named as targets.
The post's structural argument: every control healthcare is currently buying sits downstream of where the attack begins—the telephone call.
It closes by inviting readers to assess their voice exposure and noting Mutare's AHA Preferred Cybersecurity & Risk Provider status for voice security.
For brands planning a campaign
A ready-made hook for a case study or session on MFA bypass: the concrete attack chain gives a webinar a worked example instead of an abstract threat statement.
Answers “who does this person work alongside?” by showing the event and partner context for the voice-security message.
Read more
At Cisco Live, French thanks Amey Parandekar of Cisco, mentions colleague Vicki Sidor and invites attendees to the Mutare kiosk in the World of Solutions Village at SV-21. They frame the Cisco relationship around a shared conclusion—that voice is a real and growing attack surface—and describe demonstrations of enterprises “shutting down voice-based threats before they reach an agent, employee or patient.”
For brands planning a campaign
An existing channel-partner relationship suggests a partner-adjacent collaboration or joint session may fit better than a standalone creator engagement.
AI deepfake voice fraud and the moving attack surface3
Event presence and channel partnerships as the primary format3
Proprietary survey data as a content anchor3
Voice as the unhardened attack surface2
Vishing and help-desk impersonation as an entry point2
Healthcare framing around patient safety and reimbursement1
Voice as the unhardened attack surface
The core argument in French’s posts is that organizations hardened email and endpoints but left the telephone channel open.
Read more
A 2025-era post puts it plainly: voice is healthcare’s most under-protected attack surface, and most hospitals still have no technical defenses on the voice network. French frames a voice firewall — which filters unwanted and malicious calls at the network edge with layered threat intelligence before they reach staff — as the equivalent of a secure email gateway.
Historical analogy — compares voice security with email security 25 years ago, tracing the path from spam to phishing to business email compromise to the secure email gateway becoming non-negotiable.
For brands planning a campaign
A voice-defense vendor can build thought leadership around the “your stack has a gap” argument rather than product features. The framing works as a webinar premise: what email security’s 25-year arc teaches about the phone channel, with French as the messenger if their employer alignment suits the campaign.
Vishing and help-desk impersonation as an entry point
French repeatedly points to attackers skipping malware and calling employees instead.
Read more
One post describes an extortion group on Unit 42’s radar that phones an employee, poses as internal IT, and talks them through a “security update” that yields credentials and a live MFA session, followed by a 72-hour ransom clock. French cites Mandiant’s M-Trends 2026 finding that voice phishing has overtaken email as the leading social engineering vector, Unit 42’s figure that 36% of incident response cases began with a social engineering tactic, and the roughly 60% of breaches involving a human element.
For brands planning a campaign
This is the strongest hook for a hospital CISO audience: an attack can begin with a phone call, upstream of every control the security budget funds. A joint session or co-authored piece could lead with the MFA-bypass scenario and bring in the vendor’s detection story second.
Healthcare framing around patient safety and reimbursement
French translates nuisance and deceptive calls into clinical and financial terms.
Read more
One post argues that unwanted calls are a clinical problem, not just an IT problem: patients do not rest, staff get pulled from bedside care, and disruption shows up in HCAHPS measures for quietness of the hospital environment and responsiveness of staff — with 2% of Medicare payments at risk through Value-Based Purchasing and 25% of the VBP performance score tied to patient experience. French cites a health system where a voice traffic filter blocks 8,000 unwanted calls per day.
The 8,000-calls-per-day figure and the reimbursement percentages appear in French's posts; the posts here do not independently verify them.
For brands planning a campaign
For a healthcare cybersecurity vendor, this is differentiating language: voice security as patient experience and reimbursement protection, reaching CNOs and patient experience teams alongside CISOs. It suits a webinar pitched to clinical and operational leaders, not just security teams.
AI deepfake voice fraud and the moving attack surface
French argues that as AI makes software harder to exploit, attackers pivot to the human channel.
Read more
They note the surge in AI-powered deepfake voice fraud and attackers using the phone to impersonate IT help desks, vendors, and executives. A post on Anthropic’s Project Glasswing coalition — AWS, Microsoft, Google, Cisco, CrowdStrike and others using a powerful AI model to find and fix vulnerabilities — credits the effort while warning that it raises the relative value of the one attack surface AI cannot patch: the human voice.
For brands planning a campaign
This positions the creator for AI-and-security programming rather than legacy robocall content. A vendor could ask for a segment on how generative AI changes voice fraud economics, using French’s pivot argument as its spine.
Event presence and channel partnerships as the primary format
Much of French’s content is field marketing.
Read more
Posts promote their presence in the Cybersecurity Command Center at HIMSS26 (March 9–12, Venetian Expo, Las Vegas, Booth 10001-01), a kiosk in the World of Solutions Village at Cisco Live (SV-21), and a partnership with Cisco’s Amey Parandekar.
French thanks Cisco for leadership on voice as an attack surface and names colleague Vicki Sidor.
Positioning as an American Hospital Association Preferred Cybersecurity and Risk Provider recurs across posts.
Before booking, ask for the scope of French’s relationships with Mutare, Cisco, and the AHA program, including any payment or sponsorship terms.
For brands planning a campaign
French’s working mode is in-person events and partner amplification, making a conference-linked session, booth activation, or co-branded partner post more realistic than a standalone long-form campaign. Budget and timing should track the healthcare security event calendar.
Several posts use vendor-owned research to carry the argument.
Read more
One promotes a 2026 Voice Threat Survey released the prior day with a complimentary download, using it to show that security leaders increasingly recognize voice as part of cybersecurity strategy rather than adjacent to it. Another draws on third-party threat reports — Mandiant M-Trends and Palo Alto Networks Unit 42 — to make the same case.
For brands planning a campaign
A partner can supply survey or threat-report data and ask French to build a post or session around a single headline statistic. Co-branded research with a clear download path fits their demonstrated format.
The clearest brand connection in French's public posts is Mutare: they write consistently about Mutare's voice security products, speak in the first person about "the problem we solve at Mutare, Inc. every day," and invite people to the company's event booths.
Read more
Two other organizations appear in a material way: Cisco, whose security leader they name as a partner at Cisco Live, and the American Hospital Association, whose preferred-provider designation Mutare holds and which they repeat in promotional posts. Ask French to clarify their formal role at Mutare, including whether they are an employee or owner.
Mutare, Inc.
Disclosed partnership
French's posts center on Mutare's Voice Traffic Filter, a voice firewall that screens unwanted and deceptive calls before they reach staff.
Read more
They write as an insider — "the problem we solve at Mutare, Inc. every day" — describe the product's reported results at a health system blocking 8,000 unwanted calls a day, and direct readers to Mutare booths at HIMSS26 and Cisco Live.
Original disclosure
Mutare is an AHA Preferred Cybersecurity & Risk Provider. Come find us in the Cybersecurity Command Center — Booth 10001-01.
At Cisco Live, French names Amey Parandekar of Cisco, thanks Cisco for recognizing voice as a growing attack surface, and calls the relationship a partnership.
Read more
The post acknowledges the relationship between Mutare and Cisco at an event but does not describe a commercial arrangement.
French repeats Mutare's status as an American Hospital Association Preferred Cybersecurity & Risk Provider for Voice Security, using the designation to reinforce credibility with hospital security and risk leaders.
Read more
The designation belongs to Mutare.
Original disclosure
Mutare, Inc., an American Hospital Association Preferred Cybersecurity & Risk Provider for Voice Security.
John C. also writes about cybersecurity as part of healthcare technology leadership.
Read more
Both teach through first-person observations from executive roles. Readers following French’s security-policy arguments may want John C.’s perspective on how technology decisions fit into governance and leadership development.
John C. focuses on board service, governance questions and continuous learning for healthcare CIOs, including coursework on medical device security. French keeps the focus on voice channels and the claim that they have been left out of the security stack.
Matthew Guldin also works at the intersection of health IT and healthcare conferences.
Read more
Both make practical recommendations grounded in close readings of healthcare technology work, using concrete before-and-after or scenario-based detail to argue for evidence and impact.
Guldin writes about what makes a HIMSS proposal useful, asking for baselines, outcomes and lessons learned. French writes about voice threats and the security gap around phone calls.
Lara Klick also draws on healthcare operations and patient experience.
Read more
Both use everyday operational moments to make a leadership point, arguing that routine reliability and responsiveness matter more than high-level campaigns.
Klick treats answering the phone as a matter of trust and patient experience. French frames the same channel as a security and patient-safety risk, moving from operational nuisance to deliberate attack.
French writes for the people who own voice-channel risk inside hospitals: CISOs, CIOs, risk leaders, CNOs, patient-experience teams and hospital operations staff.
Their posts frame voice security as a patient-safety and reimbursement issue, not an IT side project, citing HCAHPS scores, Value-Based Purchasing, help-desk impersonation, PHI loss and ransomware clocks.
For a healthcare cybersecurity vendor positioning voice-threat defense to hospital CISOs, the subject matter closely matches the intended buyer.
That alignment shows whom the content addresses, not who reads it.
The only measured audience figure in the posts here is French's LinkedIn follower count: 2,831, observed 9 October 2026.
The posts don't break down followers or readers by country, age, gender, employer type, job title or seniority.
Before committing budget, ask for a short summary of survey or platform data showing audience breakdown by employer type and role, plus reach and engagement on the two or three closest comparable posts from the past year.
French's posts repeatedly cover voice phishing and MFA-bypass vishing, AI-cloned voices, voice firewalls and call filtering, AHA Preferred Cybersecurity & Risk Provider status, and conference appearances at HIMSS26 and Cisco Live.
Posts for conference audiences include explicit "come find us at Booth 10001-01" invitations; one addresses clinical leaders and patient-experience teams by name.
For a webinar or thought-leadership collaboration, the topic fit and operational, patient-facing framing of technical voice-threat arguments support the placement.
Ask for recent results on comparable posts, including reach, impressions and engagement for clinical-safety angles versus conference posts.
French's posts present them as a representative of Mutare, a voice-security vendor, and show vendor-side collaboration patterns rather than an open sponsorship program.
Across six posts, they promote Mutare's Voice Traffic Filter, distribute the company's 2026 Voice Threat Survey, promote trade-show appearances with specific booth locations, and credit a named technology partner, Cisco.
They also state Mutare's status as an American Hospital Association Preferred Cybersecurity & Risk Provider for voice security.
The posts disclose no rate card, media kit, sponsorship policy, audience package, booking process, or payment terms.
They show formats for Mutare and its named partners, not that outside brands can buy placements in French's feed.
One post invites readers to make contact about voice-security exposure, but publishes no official partnership or inquiry link.
Before planning spend, ask directly about availability, pricing, disclosure requirements, and how to inquire about a partnership.
Trade-show and event promotion
Buyer requirement
Provide the show name, dates, venue, exact stand or kiosk location, and a specific reason for the audience to stop by.
French's posts name HIMSS26 with booth 10001-01 in the Cybersecurity Command Center at the Venetian Expo, March 9-12, and a Mutare kiosk at CiscoLive in the World of Solutions Village, SV-21.
The invitation must tell readers where to find you and who they will meet.
Threat-narrative product education
Buyer requirement
Supply a concrete threat source and explain the control that addresses it.
French pairs outside research with a product claim: Mandiant's M-Trends 2026 finding that voice phishing overtook email as a leading social engineering vector, Unit 42's figure that 36% of incident response cases began with a social engineering tactic, and a Unit 42-tracked extortion group that phones employees and talks them through a fake security update.
Partners need a citable incident or statistic and a plain description of what stops the threat to hold up with a skeptical CISO audience.
Named co-marketing with a technology partner
Buyer requirement
Be willing to be named publicly and have a specific contact credited.
The CiscoLive post thanks Cisco, names Amey Parandekar, and describes the partnership in Cisco's terms as recognizing voice as an attack surface.
Partners who cannot be identified or provide a person to credit do not fit this format.
Original-research distribution
Buyer requirement
Provide the report, a working download link, and a lesson that makes the data useful beyond the announcement.
The 2026 Voice Threat Survey post links to a complimentary download and frames the findings around awareness of voice as part of cybersecurity strategy, using the email-security timeline as a comparison.
Partners need finished research, not a teaser, because the claimed value is that security leaders can act on the result.
Vertical messaging for healthcare buyers
Buyer requirement
Translate the offer into hospital operations and reimbursement language for a clinical audience.
French connects unwanted and deceptive calls to nursing-station disruption, patient rest, HCAHPS measures, CMS Value-Based Purchasing, and the share of the performance score tied to patient experience, and cites one health system blocking 8,000 unwanted calls per day.
Healthcare partners must supply their own operational numbers or accept a generic frame; a general enterprise pitch will not fit this audience.
Strong fit on audience and argument; weak on measured audience scale, an independent voice, and a published commercial route.
Read more
Brief
A healthcare cybersecurity vendor selling voice-channel threat defense wants to reach hospital CISOs, CIOs, risk leaders, CNOs, and patient-experience teams through a webinar or thought-leadership collaboration.
Reasons
The buyer is named in the posts. French writes directly to CISOs, CIOs, and risk leaders, as well as clinical leaders, CNOs, and patient-experience teams — the mix a voice-defense vendor needs to bring hospital operations leaders into the room, not just security.
French makes the argument a voice-defense vendor needs to make: organizations hardened email and endpoints but left voice open; attackers call the help desk instead of exploiting software; and awareness training never fixed email, but a technical control at the perimeter did. A partner does not have to build the category case from scratch.
Their posts supply the worked example a webinar needs. One walks through an extortion group that phones an employee, poses as internal IT, and talks them through a fake security update that hands over credentials and a live MFA session, followed by a 72-hour ransom clock. It is a concrete attack chain, not an abstract threat statement.
French translates the threat into numbers hospital leadership is accountable for: HCAHPS measures on quietness of the environment and staff responsiveness, 2% of Medicare payments at risk through Value-Based Purchasing, 25% of the VBP performance score tied to patient experience, and one health system blocking 8,000 unwanted calls per day. Non-security executives engage with that frame where they would not engage with a firewall pitch.
Their evidence style suits a skeptical security audience: they stack named third-party figures from Mandiant's M-Trends 2026 report and Palo Alto Networks Unit 42 alongside vendor claims, rather than relying on vendor numbers alone.
The delivery rhythm matches the healthcare security calendar: HIMSS26 in the Cybersecurity Command Center at booth 10001-01, Cisco Live in the World of Solutions Village at SV-21, conference posts that include show dates, venue, and stand location, and a named-partner co-marketing post crediting Cisco's Amey Parandekar.
A buyer must price in these limits: the only measured audience figure published in the posts is 2,831 LinkedIn followers, as of 9 October 2026, with no breakdown by employer type, role, seniority, or location. The posts advocate for Mutare's Voice Traffic Filter, Mutare's 2026 Voice Threat Survey, conference appearances, and the AHA Preferred Cybersecurity & Risk Provider status. No rate card, media kit, sponsorship policy, or booking route is published, and nothing shows that an outside brand can buy a placement in the feed. A competing voice-security vendor should also ask whether French can work with them while their public platform features another vendor's product.
Before committing budget, ask French and Mutare for reach and engagement on the two or three closest comparable posts from the past year, any audience survey or platform data showing employer type and role, and written confirmation of availability, pricing, and disclosure terms.
When to choose a specialist
Poor fit as described. The issue is not the topic; it is the role and format.
Read more
Brief
A vendor wants French to publish an independent, side-by-side test of voice and email security gateways — including published pricing, a documented lab comparison, and a scored verdict — as long-form video on their own channel, paid as a sponsorship.
Reasons
French's posts do not show independent product evaluation. They promote one vendor's product and its partners, distribute that vendor's own survey, and relay third-party analyst findings. There is no comparison test, scoring, published pricing, or example of French evaluating competing products against each other.
The posts do not show long-form video delivery. Every item is short-form LinkedIn text with hashtags, booth invitations, and a download link. There is no video, audio, transcript, or recording to demonstrate the on-camera capability this format requires.
The commercial route is unverified. No rate card, sponsorship policy, audience package, or booking process appears, and a general invitation in one post to discuss voice-security exposure is not a partnership offer. Ask whether paid placements are available before building a plan around them.
The audience evidence does not support the reach claim a sponsorship needs. Topic alignment is clear; measured readership is not. The only audience figure available is a follower count of 2,831 observed 9 October 2026, with no data on employer type, role, or seniority. Ask for audience data before claiming decision-makers are reading.
To change the decision, ask for published placement terms and a booking route, sample videos or session recordings showing delivery, and audience composition data by employer type and role. With those in place, a narrower brief could work: French as on-camera host of a session built by the vendor's technical team, rather than as the independent tester.
A worked campaign example
Assets
One co-authored LinkedIn post in French's demonstrated format: a named third-party statistic, the control that answers it, a plain description of what stops it, and one clear action.
One downloadable checklist hospitals can use to inventory their voice exposure, written to work outside the webinar.
A short follow-up post after the session featuring the strongest question from the live audience.
Audience
Hospital CISOs, CIOs, and risk leaders as the primary registration target, with CNOs and patient-experience leads deliberately invited so the vendor gains clinical-side contacts, not only security contacts.
Concept
A 45-minute webinar for a voice-defense vendor, co-hosted by French, built on the email-security parallel and focused on the hospital cost of unwanted calls. Working title: "Email had 25 years. Voice has a support desk."
Measures
Track registrations from hospital and health-system email domains, the title mix among attendees (security versus clinical and operations), attendance rate against registration, and qualified follow-ups from the assessment rather than raw lead count. Ask for these before agreeing to a spend figure, and compare them with the vendor's own past webinar benchmarks rather than industry averages.
Preconditions
Confirm that Mutare approves French's participation and that the sponsoring vendor is not a direct Mutare competitor.
Confirm in writing how the collaboration will be disclosed, who owns the recording, and where it will be published.
Treat all 8,000-calls-per-day and reimbursement percentages as French's reported figures unless the vendor independently sources them.
Before forecasting target-account potential from audience scale, ask French for platform or survey data on readers' employer types and roles, plus reach for comparable posts.
Run of show
Minutes 0–5: French opens with the email arc: in 2001, spam was an annoyance nobody budgeted for; then it became phishing, phishing became business email compromise, and the secure email gateway went from optional to non-negotiable. The voice channel sits at the same inflection point today.
Minutes 5–18: Tell the attack chain once, concretely: a call to an employee, an impersonated internal IT help desk, a fake security update, credentials and a live MFA session handed over, data gone, and a 72-hour ransom clock running. French's line about where the attack begins—upstream of every control the organization already funds—carries the segment.
Minutes 18–28: Cover the clinical and financial costs: unwanted calls reaching nursing stations, patients unable to rest, staff pulled from bedside care, HCAHPS measures on quietness of the environment and staff responsiveness, 2% of Medicare payments at risk through Value-Based Purchasing, 25% of the VBP performance score tied to patient experience, and one health system blocking 8,000 unwanted calls per day.
Minutes 28–38: Bring in a panel with the vendor's product lead, a CISO or risk leader, and a patient-experience or nursing leader. Ask what a hospital would have to change in its budget and workflow—not what the product does.
Minutes 38–45: Take Q&A, then offer one next step: a voice-exposure assessment, not a demo request.
Choose John C. when the vendor needs to reach CIOs and board-level leaders rather than security practitioners, or when the webinar focuses on governance and risk ownership.
Read more
One post argues that board service, not a CIO role, taught the most about leading a business, and lists the questions a board asks: is the strategy clear, are investments prioritized, how are risks managed, is the company financially viable, and are the right leaders coming through.
The second makes cybersecurity fluency a baseline expectation for a healthcare CIO and names what they should be able to question: medical device and IoMT risk, identity and access management, Zero Trust, ransomware resilience, third-party and supply-chain risk, incident response, AI-enabled threats, and clinical downtime.
That governance framing is directly usable for a voice-defense pitch aimed at executives who sign off on budget.
The tradeoff is coverage.
Neither post treats voice as an attack surface, vishing, or help-desk impersonation, so the vendor must supply the threat case and clinical cost argument.
The material speaks to CIOs and boards, not CISOs in security operations, CNOs, or patient-experience leaders.
Where Charles J.
French can provide a worked attack chain and HCAHPS-style numbers, they bring standing and framing but no ready-made voice-security narrative.
Choose Matthew Guldin when the vendor needs help building the session, not reaching its audience.
Read more
Both posts come from reviewing HIMSS conference proposals and land on the same rule: implementation isn't an outcome; impact is.
Guldin asks for a specific problem and baseline, credible before-and-after numbers such as length of stay, clinician minutes saved, denial rates, or dollars, a title and learning objectives that match the content, and explicit lessons about what proved harder than expected and what did not work.
They also warn against letting a provider/vendor case study turn into a product pitch, a key risk for a vendor-hosted webinar.
For a campaign that needs substance and limited commercial bias, Guldin is a useful editorial partner.
Guldin's contribution is method, not reach or subject matter.
These posts offer no voice-security content, healthcare attack narrative, or clinical and patient-experience audience argument.
Ask for a practitioner voice to supply the threat material and a separate route to the CISO and clinical titles targeted by the campaign.
Guldin is best used alongside a practitioner voice, not as the practitioner.
Choose Lara Klick when the vendor wants to reach the clinical and patient-experience side of the room: CNOs, nursing leaders, and patient-experience teams, especially when selling to hospital operations as well as security.
Read more
One post makes the phone itself the subject: answer calls, call people back, measure callback timeframes and pickup and drop rates, and treat baseline reliability as where trust is won or lost.
It includes two concrete service examples.
The other recounts running hospital operations through September 11, 2001, including setting up emergency on-site childcare for staff, coordinating blood donation, and activating mass-casualty protocols—the clearest evidence here of someone who has led healthcare operations under pressure.
Klick's phone message is about service reliability and respect, not security.
The vendor must bridge from “answering the phone is basic trust” to “the phone is an attack surface,” a jump part of the audience may resist.
With no cybersecurity, vishing, or MFA-bypass material, the vendor must supply the threat case.
This is a patient-experience and operations voice, not a route to security practitioners; reach CISO registrants elsewhere.
French cover voice security in healthcare, vishing and help-desk impersonation, AI-cloned voice fraud, a 2026 voice threat survey, and appearances at HIMSS26 and Cisco Live.
The posts span roughly March to August 2026; posting dates are partly indicated by event references such as the HIMSS26 show dates of March 9–12, so the order of the posts and any change over time are inferred rather than confirmed by timestamps.
The account shows a single follower count, observed in October 2026.
Several research reports and findings cited in the posts — Mandiant's M-Trends 2026 report, Palo Alto Networks Unit 42 material, and Mutare's 2026 Voice Threat Survey — are presented as French describes them, rather than confirmed independently.
The posts do not state a job title or employment arrangement with Mutare, and do not mention a signature book, show, or earlier career history, so those identity questions remain open.
