HCISPP Study Guide

Timothy Virtue, Justin Rainey

• Publisher: Syngress
• Year: 2014
• ISBN:
  9780128020890
• Topic: Computer Science
• Subtopic: Cyber Security
• Index: Computer Science

The HCISPP certification is a globally-recognized, vendor-neutral exam for healthcare information security and privacy professionals, created and administered by ISC². The new HCISPP certification, focused on health care information security and privacy, is similar to the CISSP, but has only six domains and is narrowly targeted to the special demands of health care information security.

Tim Virtue and Justin Rainey have created the HCISPP Study Guide to walk you through all the material covered in the exam's Common Body of Knowledge. The six domains are covered completely and as concisely as possible with an eye to acing the exam. Each of the six domains has its own chapter that includes material to aid the test-taker in passing the exam, as well as a chapter devoted entirely to test-taking skills, sample exam questions, and everything you need to schedule a test and get certified. Put yourself on the forefront of health care information privacy and security with the HCISPP Study Guide and this valuable certification.

• Provides the most complete and effective study guide to prepare you for passing the HCISPP exam - contains only what you need to pass the test, and no fluff!
• Completely aligned with the six Common Body of Knowledge domains on the exam, walking you step by step through understanding each domain and successfully answering the exam questions.
• Optimize your study guide with this straightforward approach - understand the key objectives and the way test questions are structured.

Chapter 1

Introduction

Abstract

This chapter provides an overview of the importance of information security and privacy, the target audience for the book, HealthCare Information Security and Privacy Practitioner (HCISPP) certification requirements, and learning objectives.

Keywords

Introduction

HCISPP requirements

Target audience

Learning objectives

This chapter will help readers understand

Importance of information security and privacy

Target audience

HealthCare Information Security and Privacy Practitioner (HCISPP) certification requirements

Learning objectives

Background

The importance of security and privacy is rapidly increasing across all industries, especially given a recent acceleration in public data breach and record disclosures. As this book was composed the public has witnessed large breaches within the retail industry involving stolen credit card and personal information. At first glance one might discard this type of threat as not applicable to healthcare organizations given their core business involves the delivery of patient care. In many cases they might be wrong given patients regularly pay for healthcare services using a credit or debit card, the massive amount of personal health information (PHI) within the organization, a significant increase in the use of health information technology (which creates additional privacy and security risk), and PHI being shared outside organizational boundaries with third parties to support the delivery of healthcare services. Healthcare organizations will need qualified risk management professionals to assist with managing the broad array of risks faced within the industry. The HCISPP certification is for individuals who want to understand how to assess risk and implement and maintain security and privacy controls specific to the healthcare industry while being compliant with the many laws and regulations that govern the healthcare industry. Individuals with certifications such as the HCISPP are more likely to be selected for job interviews based on the immediate recognition of an industry certification and the qualifications it conveys. Since the exam details are subject to change, per (ISC)2, we encourage candidates to obtain the most current HCISPP Candidate Information Bulletin available from (ISC)2 prior to beginning their exam preparation. Candidates may require a deeper understanding of some concepts discussed throughout this book depending on the nature of their current or future roles, educational background, and work experience in each of the specific HCISPP exam domains. However, this book was written to provide a foundational level of knowledge and teach candidates only what is necessary to pass the HCISPP examination – nothing more, nothing less. Consider this the first step in a journey, as a security and privacy practitioner in the healthcare industry. Since the healthcare industry, the technology that supports it, and the laws and regulations that govern it continuously change we encourage HCISPP candidates and certificate holders to actively participate in the industry, stay abreast of changes, and commit to...

Table of contents

• Cover
• Title page
• Table of Contents
• Copyright
• Dedication
• Author Bio
• Technical Editor Bio
• Preface
• Acknowledgments
• Chapter 1: Introduction
• Chapter 2: Healthcare Industry
• Chapter 3: Regulatory Environment
• Chapter 4: Privacy and Security in Healthcare
• Chapter 5: Information Governance and Risk Management
• Chapter 6: Information Risk Assessment
• Chapter 7: Third-Party Risk Management
• Index