ISC2 HCISPP Exam Syllabus Topics:
| Topic | Details |
|---|---|
Healthcare Industry (12%) | |
| Understand the Healthcare Environment Components | - Types of Organizations in the Healthcare Sector (e.g., providers, pharma, payers) - Health Insurance (e.g., claims processing, payment models, health exchanges, clearing houses) - Coding (e.g., Systematized Nomenclature of Medicine Clinical Terms (SNOMED CT), International Classification of Diseases (ICD) 10) - Revenue Cycle (i.e., billing, payment, reimbursement) - Workflow Management - Regulatory Environment - Public Health Reporting - Clinical Research (e.g., processes) - Healthcare Records Management |
| Understand Third-Party Relationships | - Vendors - Business Partners - Regulators - Other Third-Party Relationships |
| Understand Foundational Health Data Management Concepts | - Information Flow and Life Cycle in the Healthcare Environments - Health Data Characterization (e.g., classification, taxonomy, analytics) - Data Interoperability and Exchange (e.g., Health Level 7 (HL7), International Health Exchange (IHE), Digital Imaging and Communications in Medicine (DICOM)) - Legal Medical Records |
Information Governance in Healthcare (5%) | |
| Understand Information Governance Frameworks | - Security Governance (e.g., charters, roles, responsibilities) - Privacy Governance (e.g., charters, roles, responsibilities) |
| Identify Information Governance Roles and Responsibilities | |
| Align Information Security and Privacy Policies, Standards and Procedures | - Policies - Standards - Processes and Procedures |
| Understand and Comply with Code of Conduct/Ethics in a Healthcare Information Environment | - Organizational Code of Ethics - (ISC)² Code of Ethics |
Information Technologies in Healthcare (8%) | |
| Understand the Impact of Healthcare Information Technologies on Privacy and Security | - Increased Exposure Affecting Confidentiality, Integrity and Availability (e.g., threat landscape) - Oversight and Regulatory Challenges - Interoperability - Information Technologies |
| Understand Data Life Cycle Management (e.g., create, store, use, share, archive, destroy) | |
| Understand Third-Party Connectivity | - Trust Models for Third-Party Interconnections - Technical Standards (e.g., physical, logical, network connectivity) - Connection Agreements (e.g., Memorandum of Understanding (MOU), Interconnection Security Agreements (ISAs)) |
Regulatory and Standards Environment (15%) | |
| Identify Regulatory Requirements | - Legal Issues that Pertain to Information Security and Privacy for Healthcare Organizations - Data Breach Regulations - Protected Personal and Health Information (e.g., Personally Identifiable Information (PII), Personal Health Information (PHI)) - Jurisdiction Implications - Data Subjects - Research |
| Recognize Regulations and Controls of Various Countries | - Treaties - Laws and Regulations (e.g., European Union (EU) Data Protection Directive, Health Insurance Portability and Accountability Act /Health Information Technology for Economic and Clinical Health (HIPAA/HITECH), General Data Protection Regulation (GDPR), Personal Information Protection and Electronic Documents Act (PIPEDA)) |
| Understand Compliance Frameworks | - Privacy Frameworks (e.g., Organization for Economic Cooperation and Development (OECD) Privacy principles, Asia-Pacific Economic Cooperation (APEC), Generally Accepted Privacy Principles (GAPP)) - Security Frameworks (e.g., International Organization for Standardization (ISO), National Institute of Standards and Technology (NIST), Common Criteria (CC)) |
Privacy and Security in Healthcare (25%) | |
| Understand Security Objectives/Attributes | - Confidentiality - Integrity - Availability |
| Understand General Security Definitions and Concepts | - Identity and Access Management (IAM) - Data Encryption - Training and Awareness - Logging, Monitoring and Auditing - Vulnerability Management - Segregation of Duties - Least Privilege (Need to Know) - Business Continuity (BC) - Disaster Recovery (DR) - System Backup and Recovery |
| Understand General Privacy Definitions and Concepts | - Consent/Choice - Limited Collection/Legitimate Purpose/Purpose Specification - Disclosure Limitation/Transfer to Third-Parties/ Trans-border Concerns - Access Limitation - Accuracy, Completeness and Quality - Management, Designation of Privacy Officer, Supervisor Re-authority, Processing Authorization and Accountability - Training and Awareness - Transparency and Openness (e.g., notice of privacy practices) - Proportionality, Use and Disclosure, and Use Limitation - Access and Individual Participation - Notice and Purpose Specification - Events, Incidents and Breaches |
| Understand the Relationship Between Privacy and Security | - Dependency - Integration |
| Understand Sensitive Data and Handling | - Sensitivity Mitigation (e.g., de-identification, anonymization) - Categories of Sensitive Data (e.g., behavioral health) |
Risk Management and Risk Assessment (20%) | |
| Understand Enterprise Risk Management | - Information Asset Identification - Asset Valuation - Exposure - Likelihood - Impact - Threats - Vulnerability - Risk - Controls - Residual Risk - Acceptance |
| Understand Information Risk Management Framework (RMF) (e.g., International Organization for Standardization (ISO), National Institute of Standards and Technology (NIST)) | |
| Understand Risk Management Process | - Definition - Approach (e.g., qualitative, quantitative) - Intent - Life Cycle/Continuous Monitoring - Tools/Resources/Techniques - Desired Outcomes - Role of Internal and External Audit/Assessment |
| Identify Control Assessment Procedures Utilizing Organization Risk Frameworks | |
| Participate in Risk Assessment Consistent with the Role in Organization | - Information Gathering - Risk Assessment Estimated Timeline - Gap Analysis |
| Understand Risk Response (e.g., corrective action plan) | - Mitigating Actions - Avoidance - Transfer - Acceptance - Communications and Reporting |
| Utilize Controls to Remediate Risk (e.g., preventative, detective, corrective) | - Administrative - Physical - Technical |
| Participate in Continuous Monitoring | |
Third-Party Risk Management (15%) | |
| Understand the Definition of Third-Parties in Healthcare Context | |
| Maintain a List of Third-Party Organizations | - Third-Party Role/Relationship with the Organization - Health Information Use (e.g., processing, storage, transmission) |
| Apply Management Standards and Practices for Engaging Third-Parties | - Relationship Management |
| Determine When a Third-Party Assessment Is Required | - Organizational Standards - Triggers of a Third-Party Assessment |
| Support Third-Party Assessments and Audits | - Information Asset Protection Controls - Compliance with Information Asset Protection Controls - Communication of Results |
| Participate in Third-Party Remediation Efforts | - Risk Management Activities - Risk Treatment Identification - Corrective Action Plans - Compliance Activities Documentation |
| Respond to Notifications of Security/Privacy Events | - Internal Processes for Incident Response - Relationship Between Organization and Third-Party Incident Response - Breach Recognition, Notification and Initial Response |
| Respond to Third-Party Requests Regarding Privacy/Security Events | - Organizational Breach Notification Rules - Organizational Information Dissemination Policies and Standards - Risk Assessment Activities - Chain of Custody Principles |
| Promote Awareness of Third-Party Requirements | - Information Flow Mapping and Scope - Data Sensitivity and Classification - Privacy and Security Requirements - Risks Associated with Third-Parties |
Reference: https://www.isc2.org/Certifications/HCISPP
The most gratifying after service
A good exam dump like HCISPP exam simulator should own considerate service. Just high quality is far from excellent. Contrasting with many other exam dumps, the HCISPP exam dump has unsurpassable quality as well as the unreachable heights service. In some other exam dumps, you may be neglected at the time you buy their products. It's impossible that you have nothing to do with us after buying ISC HCISPP pass-sure dumps. We cannot ignore any problem you meet after choose HCISPP exam dump, you are welcomed to ask our service system any time if you come across any doubt. As the exam dump leader, the HCISPP exam simulator will bring you the highest level service rather than just good. That is why purchasing HCISPP pass-sure dumps have become a kind of pleasure rather than just consumption.
After purchase, Instant Download: Upon successful payment, Our systems will automatically send the product you have purchased to your mailbox by email. (If not received within 12 hours, please contact us. Note: don't forget to check your spam.)
Unbelievable convenient
As we mentioned just now, what HCISPP exam dump are not only the highest level quality and service but also something more. For instance, it provides you the most convenient delivery way to you. Nobody prefers complex and troubles. As the best exam dump, HCISPP pass-sure dumps must own high standard equipment in all aspects. The aspect even is extended to the delivery way. Many candidates may give up the goods result from the complex and long time delivery. However, it can't exist on the way of HCISPP exam simulator. We have a card up our sleeves that all materials of ISC HCISPP exam dump will in your hand with ten minutes for that HCISPP pass-sure dumps supports the e-mail manner to delivery fields which guarantees the absolutely convenient delivery way for you.
There are three main reasons that you will purchase a product. First you need it. Second, the product has high quality. Third, the throughout service is accompanied with the product. Now here the HCISPP pass-sure dumps in front of you with far more than these three reasons. You can't miss it.
ISC2 HCISPP Exam Certification Details:
| Sample Questions | ISC2 HCISPP Sample Questions |
| Exam Code | HCISPP |
| Number of Questions | 125 |
| Duration | 180 mins |
| Exam Name | ISC2 Certified HealthCare Information Security and Privacy Practitioner (HCISPP) |
| Schedule Exam | Pearson VUE |
| Exam Price | $599 (USD) |
| Passing Score | 700 / 1000 |
Remarkable quality of ISC HCISPP exam dump
First of all, of course you need HCISPP exam dump if you want pass the exam and take an advantage position in the fierce competition world. Then what's more important, the absolutely high quality of ISC HCISPP exam simulator is the fundamental reason for us to introduce it to all of you with fully confidence. You must have known high quality means what. It can be amount to high pass rate. That's to say the HCISPP pass-sure dumps which owns the highest quality owns the highest pass rate. Of course, we do not take this for granted. We do feedbacks and relative researches regularly, as we thought, totally all have passed the examination who choose HCISPP exam simulator. Okay, now aside this significant research. As the back power of HCISPP exam dump also can totally support such high quality. The best and strongest teams---from the study team to the after service are all stand behind the exam dump. Once you choose HCISPP pass-sure dumps means such strong power same standing behind you. In other words, it just like that you are standing on the shoulder of giants when you are with the HCISPP exam simulator.
Setlla 
Jerome 
Olivia 
Edith 
Nora 
Aldrich 
Jason 
Neil 
Kevin 
Gemma 
Kent 
Muriel 
Vivien 
Martha 
Meredith 
Monroe 
Walker 
