(ISC)²® Introduces New Healthcare Security and Privacy Certification

Nov. 4, 2013 - PRLog -- Hong Kong, November 5, 2013 — (ISC)²® (“ISC-squared”), the world’s largest not-for-profit information security professional body and administrators of the CISSP®, today announced it has launched a new certification, the HealthCare Information Security and Privacy Practitioner (HCISPP^SM), the first foundational global standard for assessing both information security and privacy expertise within the healthcare industry. The credential, available worldwide beginning today, is designed to provide healthcare employers and those in the industry with validation that a healthcare security and privacy practitioner has the core level of knowledge and expertise required by the industry to address specific security concerns.

As with all its credentials, (ISC)² conducted a job task analysis (JTA) study to determine the scope and content of the HCISPP credential program. Subject matter experts from the (ISC)² membership and other industry luminaires from organizations in Hong Kong, Europe, and the United States attended several exam development workshops and contributed to develop the Common Body of Knowledge (CBK®) that serves as the foundation for the credential.

The HCISPP is a demonstration of knowledge by security and privacy practitioners regarding the proper controls to protect the privacy and security of sensitive patient health information as well as their commitment to the healthcare privacy profession. It is a foundational credential that reflects internationally accepted standards of practice for healthcare information security and privacy. For executives accountable for protecting sensitive healthcare data, HCISPP demonstrates a proactive commitment to ensuring an organization is making the necessary human resources investment in information security.

To attain the HCISPP, applicants must have a minimum of two years of experience in one knowledge area of the credential that includes security, compliance and privacy. Legal experience may be substituted for compliance and information management experience may be substituted for privacy.  One of the two years of experience must be in the healthcare industry. All candidates must be able to demonstrate competencies in each of the following six CBK domains in order to achieve HCISPP:

o   Healthcare Industry

o   Regulatory Environment

o   Privacy and Security in Healthcare

o   Information Governance and Risk Management

o   Information Risk Assessment

o   Third Party Risk Management

Candidates may find more information about HCISPP, download the exam outline, and register for the exam at https://www.isc2.org/hcispp/default.aspx.

“The HCISPP credential was developed based on direct feedback from our membership and industry luminaries from around the world working in healthcare who have observed the evolving complexity of information risk management in the industry as online system migration and regulations increase,” said W. Hord Tipton, CISSP, executive director of (ISC)². “Over the past few years, the healthcare industry has undergone a major transformation to adjust its compliance management practices and data protection requirements – moving from highly paper-based processes to a digital and more connected working environment. (ISC)² has introduced this new healthcare credential to help employers bring more qualified and skilled professionals into this industry who can help protect coveted vital records and personal data.”

The HCISPP provides multiple benefits to healthcare security and privacy practitioners and the organizations that employ them. For practitioners, HCISPP helps them to:

·         Validate their experience, skills, and competency as a healthcare security and privacy practitioner.

·         Demonstrate the qualifications to implement, manage, and/or assess the appropriate security and privacy controls for healthcare organizations.

·         Advance their career with a certification that establishes foundational knowledge and competency in health information security and privacy best practices.

·         Enhance their credibility as a healthcare information security and privacy practitioner with a credential backed by (ISC)²,  the globally recognized Gold Standard in information security certification.

·         Affirm your commitment to continued competence in the most current security and privacy practices through (ISC)² continuing professional education (CPE) requirement.

         For organizations, HCISPP offers to:

·         Provides reinforced defense with qualified, experienced, and credentialed healthcare information security and privacy practitioners.

·         Demonstrate the organization's proactive commitment to minimizing the risk of breaches.

·         Increase confidence that job candidates and employees can do the job right.

·         Mitigate risk by exchanging Protected Health Information (PHI) with 3rd parties that employ HCISPPs.

·         Increase credibility of the organization when working with clients and vendors.

·         Ensure privacy and security personnel are current and capable through HCISPP’s CPE credits requirement.

·         Provide an added level of ethical adherence for their healthcare security and privacy practitioners.

“Information security and privacy have always been of prime importance within the healthcare industry,” said Clara Cheung, senior systems manager, Hospital Authority in Hong Kong. “In recent years, there has been a global trend for the development of national or territory wide electronic healthcare record sharing platforms or systems to enable sharing of patients' records among providers to ensure holistic care. This further heightens the complexity in the balance of information security and privacy vs. the need of information sharing in healthcare. A skilled healthcare information security and privacy professional is instrumental in providing a balanced view to facilitate information sharing while protecting patients' privacy.”


© 2013, (ISC)² Inc., (ISC)², CISSP, ISSAP, ISSMP, ISSEP, CSSLP, CAP, SSCP and CBK are registered marks, and CCFP and HCISPP are service marks, of (ISC)², Inc.