HCISPP DOMAIN 1: HEALTHCARE INDUSTRY
Understand the Healthcare Environment Components
Understand Third-Party Relationships
Understand Foundational Health Data Management Concepts
HCISPP DOMAIN 2: INFORMATION GOVERNANCE IN HEALTHCARE
Understand Information Governance Frameworks
Identify Information Governance Roles and Responsibilities
Align Information Security and Privacy Policies, Standards and Procedures
Understand and Comply with Code of Conduct/Ethics in a Health IT
HCISPP DOMAIN 3: INFORMATION TECHNOLOGIES IN HEALTHCARE
Understand the Impact of Healthcare IT on Privacy and Security
Understand Data Life Cycle Management
Understand Third-Party Connectivity
HCISPP DOMAIN 4: REGULATORY AND STANDARDS ENVIRONMENT
Identify Regulatory Requirements
Recognize Regulations and Controls of Various Countries
Understand Compliance Frameworks
HCISPP DOMAIN 5: PRIVACY AND SECURITY IN HEALTHCARE
Understand Security Objectives/Attributes
Understand General Security Definitions and Concepts
Understand General Privacy Definitions and Concepts
Understand the Relationship Between Privacy and Security
Understand Sensitive Data and Handling
HCISPP DOMAIN 6: RISK MANAGEMENT AND RISK ASSESSMENT
Understand Enterprise Risk Management
Understand Information Risk Management Framework (RMF)
International Organization for Standardization (ISO)
National Institute of Standards and Technology (NIST)
Understand Risk Management Process
Identify Control Assessment Procedures using Org Risk Frameworks
Participate in Risk Assessment Consistent with the Role in Organization
Understand Risk Response (e.g., corrective action plan)
Utilize Controls to Remediate Risk (e.g., preventative, detective, corrective)
Participate in Continuous Monitoring
HCISPP DOMAIN 7: THIRD-PARTY RISK MANAGEMENT
Understand the Definition of Third-Parties in Healthcare Context
Maintain a List of Third-Party Organizations
Apply Management Standards and Practices for Engaging Third-Parties
Determine When a Third-Party Assessment Is Required
Support Third-Party Assessments and Audits
Participate in Third-Party Remediation Efforts
Respond to Notifications of Security/Privacy Events
Respond to Third-Party Requests Regarding Privacy/Security Events
Promote Awareness of Third-Party Requirements
