The Truth About How Hospital Size Shapes IT Strategy

If you’ve ever wondered whether a health system’s bed size truly changes the way IT leaders prioritize, fund, and execute work, our 2026 CHIME survey* data says yes. Smaller hospitals (≤250 beds) and larger systems (250+ beds) share many of the same pressures, but their answers diverge in telling who is responsible for strategic decision‑making, how IT investments are allocated, which initiatives receive top priority, and where partnerships and advisory services deliver the greatest organizational value.

Executive snapshot  

• Decision authority is widening at the top. In smaller organizations, CIOs remain the chief decision‑makers for IT spend (45%), while CEOs have moved into a close second at 33%, a notable rise from the single‑digit results seen in 2025. In larger systems, CIO leadership still dominates (56%), though not to the near‑unanimous extent reported in 2025.
• Top priorities align, but the emphasis changes. Both bed sizes agree that EHR implementation/optimization, cybersecurity, and application rationalization are at the top of IT projects, but large systems lean hardest into EHR work, while smaller hospitals push cybersecurity and application rationalization to the top spot. What stands out most is the shift among larger hospitals: in 2025, 0% ranked EHR optimization as their leading priority, yet by 2026 it has become the primary area of budget allocation, a significant change in focus year over year.
• Talent pressure is universal; cybersecurity sits on top. Cybersecurity remains the hardest skill to hire across sizes, with both hospitals reporting very low turnover yet persistent recruiting gaps.
• Partnerships are normalized; use cases differ. Both sizes are considering managed services, but small hospitals gravitate to cybersecurity (SOC) and help desk, while large systems skew toward legacy application support and cybersecurity (SOC).

Talent & sourcing: The universal cyber gap

Both bed sizes identify cybersecurity as the hardest skill to recruit and retain, but smaller organizations show a wider spread in responses, suggesting multiple talent gaps rather than one dominant shortage, especially in rural markets where specialized IT roles are difficult to source. Despite these challenges, smaller hospitals report exceptional stability, with 89% citing IT turnover under 5%, while larger systems experience higher and more varied turnover, reaching 10–15% in some responses. This contrast highlights a key trend: small hospitals keep the talent they have, while large systems struggle more with turnover.

When faced with staffing challenges, smaller hospitals are more likely to hire a contractor for a specific, short-term project; larger systems are choosing to reassign work or reorganize current IT staff. This is the exact opposite of what we saw in 2025. The shift is likely driven by changing pressures: smaller hospitals are operating with leaner teams and fewer specialized roles, making temporary external help a faster way to close immediate gaps without long‑term commitments. Larger systems, on the other hand, appear to be controlling costs and optimizing internal capacity, choosing to redeploy staff rather than add contractor spend. This year’s results suggest a recalibration of how each group balances budget, bandwidth, and labor flexibility.

Managed Services: Normalized, but not identical

Across sizes, managed services have moved from “maybe” to a consideration for organizations. What differs is where they’re applied. Small hospitals are considering help/service desk and cybersecurity (SOC). Large systems lean into legacy application support as well as cybersecurity (SOC). The strategic thread is the same: stability first, then speed. Crucially, other options were only slightly lower, within just a few percentage points of the top answer, underscoring wide willingness to adopt multiple managed services models.

Advisory needs vary significantly by bed size. Larger systems now rank organizational optimization as their most valuable advisory service, while smaller hospitals place the highest value on cybersecurity advisory. This represents a notable shift from 2025. Large hospitals previously identified cybersecurity advisory as their top need (47%), yet in 2026 that drops to 0%, signaling a move toward broader operational alignment rather than point‑in‑time security support. In smaller hospitals, technology adoption and digital transformation consulting declines sharply, from 38% in 2025 to 11% in 2026, suggesting a pivot toward stabilizing foundational capabilities before pursuing transformation.

Application Rationalization: A shared priority, different realities

Application rationalization continues to be a high‑urgency initiative for organizations of all sizes, but the degree of urgency and the approach to executing it differ dramatically between smaller hospitals and larger systems.

In larger organizations (250+ beds), application rationalization has become a defining operational priority, with 78% classifying it as a high‑urgency initiative in 2026. Beyond cost and efficiency, this urgency increasingly reflects the need to prepare for AI adoption, by inventorying and eliminating duplicate or obsolete solutions, and to meet rising resilience expectations by reducing technical debt and terminating contracts for underutilized, unsupported, or redundant applications. As a result, rationalization is shifting from a periodic clean‑up to a continuous, strategic discipline.

To support this level of maturity, CIOs report that large systems are leveraging both full‑time and part‑time internal resources, a trend consistent with how these organizations address broader staffing challenges. Many have also completed a rationalization initiative within the last 24 months, signaling that rationalization is embedded into their ongoing modernization and governance cycles rather than handled as a one‑off project.

Smaller hospitals (≤250 beds) also recognize application rationalization as important, with 45% rating it a high‑urgency initiative. At the same time, an almost equal 44% say it is not a current priority, suggesting that the work often takes a back seat to more immediate pressures such as cybersecurity risks and staffing constraints.

These organizations typically rely on part‑time internal resources to manage rationalization efforts, and when they do take action, it is most commonly focused on contract consolidation and negotiation, where immediate cost savings and simplification can be realized without large program overhead.

The responsibility for rationalization is consistent across bed sizes: both groups most often identify the CIO as the accountable executive (45% in small hospitals and 45% in large hospitals). This reinforces that rationalization is seen as a strategic IT initiative requiring top‑level ownership, regardless of organizational scale.

Cost‑savings & efficiency priorities

What leaders elevate to the #1 lever for cost and efficiency diverges by hospital size — and it reveals the operating model each group is running.

• Smaller hospitals (≤250 beds): The most common #1 picks are Cybersecurity Best‑Practice Development (20%) and Cloud Migration/Data Center Reductions (14%), with Process/Workflow Optimization (9%) and AI/RPA (9%) following. The pattern signals a pragmatic tilt: reduce risk, lower run costs, and streamline workflows within lean teams.
• Larger systems (250+ beds): Leaders most frequently rank AI/RPA (18%) and Process/Workflow Optimization (18%) as their top levers, indicating a push toward scaled process improvement and automation across complex environments.

What to do next

If you’re ≤250 beds:

• Strengthen Cybersecurity Resilience with Practical, High‑ROI Moves: Cybersecurity is both your top recruiting challenge and your top IT initiative, making it the highest priority to stabilize first.
  • Consider cybersecurity services or fractional cyber leadership to close expertise gaps without adding headcount.
• Use Managed Services to Expand Bandwidth Where It Hurts Most: Small hospitals are most likely to consider help/service desk and cybersecurity managed services, and these categories ranked only a few points above others.
  • Offload Service Desk tiers or application maintenance to free internal staff.
  • Use cybersecurity or monitoring services to maintain 24/7 coverage.
  • Treat managed services as a strategic extension, not a replacement, of current staff.
• Prioritize Rationalization Where You Can Get Fast Wins: Smaller hospitals are split: 45% say app rationalization is high urgency, while 44% say it’s not a priority. This signals a tight‑capacity environment.
  • Contract consolidation and negotiation.
  • Eliminating duplicate or low‑use applications.
  • Simplifying vendor portfolios for savings and maintainability.

If you’re 250+ beds:

• Operationalize EHR Optimization as a Program, Not a Project: EHR implementation/optimization rose from 0% as a top priority in 2025 to the #1 budget allocation in 2026, marking a major pivot.
• Embed Application Rationalization into Modernization Cycles: With 78% ranking it high urgency, rationalization is officially a strategic discipline.
• Double Down on Automation and Workflow Optimization: Top #1 cost‑savings priorities are AI/RPA (18%) and Process/Workflow Optimization (18%).
• Use Internal Staff Reallocation Before Contractor Spend: Large systems have shifted from contractor reliance in 2025 to reassigning internal staff as the primary response to staffing challenges.
  • Use contractors selectively for high‑specialty or legacy needs.
• Expand Managed Services Around Legacy and High‑Complexity Environments:
  • Offload legacy systems to free internal staff for modernization.
  • Use cybersecurity services to standardize security monitoring across the enterprise.
  • Apply managed services selectively to stabilize operations before scaling transformation.

Whether your hospital or healthcare organization is small or large, our teams align to your operating model, from advisory and governance to EHR, rationalization, cyber readiness, Service Desk/AMO, and legacy application support, so you can deliver outcomes within your budget realities.

For more information:

• For an overview of the results, download the 2026 CHIME CIO Survey Results Infographic.
• For the overall findings, see our 2025 part 1 blog, Inside the CIO Playbook: Strategies Fueling Health IT Growth and part 2 blog, The Strong Partnerships and Talent Strategies Healthcare CIOs Need.

Don’t miss the next edition of the CHIME Survey, subscribe to our blog to stay up to date with all of our resources.

About the CHIME Survey

The respondent demographic was primarily made up of Chief Information Officers (56%). More than half of participants (53%) represented mid-to-large healthcare organizations with 250 beds or more. This audience profile affords us insight into the rationale of those responsible for maintaining and implementing healthcare technology within seasoned organizations.

Are you a CHIME member who didn't get a chance to respond to the survey, but would like to be a voice next year? Get started today.

*The 2026 online survey and the data reported is based on responses from 24 healthcare executives, all CHIME members, sponsored by CereCore.