• Classroom
  • Online, Instructor-Led

The HealthCare Information Security and Privacy Practitioner (HCISPP) educational course are intended to communicate to the audience the basic structure, the essentials of the legal basis, the issues of and the information security and privacy particulars within the described context of the American healthcare delivery system. An integral part of this course is to prepare the attendee (with the required minimum experience) to sit for the (ISC)² HCISPP certification examination.

Learning Objectives

  • Determine the Healthcare environment components, third-party relationships, and foundational health data management concepts.
  • Compare information governance frameworks, roles and responsibilities, security, and privacy policies as well as standards and procedures.
  • Identify the impact of healthcare information technologies on privacy and security.
  • Verify regulatory requirements, regulations and controls and the privacy and security compliance frameworks.
  • Define security objectives, attributes, security definitions, concepts and security and privacy governance.
  • Verify basic risk management methodologies and the information risk management life cycles.
  • Participate in risk assessment consistent with a role in the organization and remediate gaps.
  • Identify risk response and control assessment procedures from within organizational risk frameworks as well as continuous monitoring.

Framework Connections

The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):