Welcome to the ISC2 Healthcare Essentials: Information Security in Healthcare Settings Certificate Program. This module introduces the importance of information security in healthcare organizations, explaining how the healthcare industry is increasingly relying on technology to improve patient care, streamline operations, and share information. It addresses the increased risks of cyber threats, data breaches, and security vulnerabilities that can compromise patient information privacy and security.

Skills you'll gain

This course includes:

This comprehensive module explores the diverse healthcare industry ecosystem, covering various organizations from small physician practices to large hospitals, laboratories, pharmaceutical companies, and public health organizations. It examines how these entities exchange patient information and the security requirements for protecting this data. Topics include healthcare delivery systems, governance, organizational challenges, professional roles, pharmaceutical regulations, clinical research practices, health insurance models, medical coding systems, public health initiatives, and records management. The module also covers third-party relationships, data sharing agreements, cloud computing, health information management, data life cycle, and healthcare informatics.

Skills you'll gain

This course includes:

This module focuses on providing security professionals with knowledge to manage emerging healthcare technologies and identify threats throughout the information life cycle. It examines how healthcare organizations partner with vendors, third parties, and business associates via cloud and other service offerings, and the importance of understanding information sharing, access, use, and destruction. Topics include increased exposure affecting confidentiality, integrity, and availability; oversight and regulatory challenges; interoperability issues; electronic health records; big data; cloud computing environments; communications technologies; distributed ledger technologies (blockchain); Internet of Things (IoT); data life cycle management stages; and connectivity requirements for third-party relationships.

Skills you'll gain

This course includes:

This concluding module summarizes the key challenges and considerations for security professionals in healthcare settings. It addresses how emerging technologies pose challenges to security management as legacy systems and inadequately monitored devices are deployed in new ways. The module covers regulatory compliance requirements like GDPR and HIPAA, data life cycle management applying the CIA triad (confidentiality, integrity, availability) to each phase, and third-party connectivity requirements. It includes a comprehensive final assessment to evaluate understanding of information security principles in healthcare settings.

Skills you'll gain

This course includes: