The HCISPP - HealthCare Information Security and Privacy Practitioner training course is designed provides the knowledge and skills related to HealthCare Security and Privacy and/or to prepare for the (ISC)2 HCISPP.
By attending HCISPP - HealthCare Information Security and Privacy Practitioner workshop, delegates will learn to:
- Conceptualize the diversity in the healthcare industry. In order to achieve this, learners will gain knowledge of the diverse types of healthcare organizations, types of technologies, how information and data flows and is managed, how data is exchanged, and the levels of protection required for that data
- Identify and describe the relevant legal and regulatory requirements regarding healthcare information. These requirements are necessary in order to ensure that the organizations policies and procedures are in compliance and that all trans-border data exchange procedures are followed
- Describe security and privacy concept principals as they relate to the Healthcare industry. Learners will be able to understand the relationship of security and privacy, and how to manage and handle all information requiring data protection in the healthcare industry
- Identify how organizations manage information risk, and what security and privacy governance means for that information. The learners will be introduced to basic risk management methods and lifecycles, and the activities that support these concepts
- Describe risk assessment, and the risk assessment practices and procedures for an organization
- Identify concepts for managing third-party relationships. Learners will gain knowledge regarding concepts pertaining to their use of information, any additional security and privacy assurances, third-party assessments, third-party security and privacy events, and recognize the mitigation process of third-party risks
HCISPP candidates must have a minimum of two years of work experience in one domain of the HCISPP common body of knowledge that includes security, compliance, and privacy. Legal experience may be substituted for compliance and information management experience may be substituted for privacy. One of the two years of experience must be in the healthcare industry.
The HCISPP certification is for healthcare security and privacy practitioners who are the frontline defense in protecting patient health information. These practitioners are tasked with implementing, managing, or assessing the proper controls to protect patient health information. HCISPPs are instrumental to a variety of job functions and employers, including:
- Compliance officers
- Information security managers
- Privacy officers
- Compliance auditors
- Risk analysts
- Medical records supervisors
- Information technology managers
- Privacy and security consultants
- Health information managers