A Second

Opinion:
DETECTING THE
BENEFITS OF HCISPP FOR
A CAREER IN CYBERSECURITY
Healthcare is a dynamic and growing field where
security and privacy have become increasingly
important. Many critical infrastructure industries
interact with the healthcare system, including legal,
insurance, finance, and manufacturing. These
interactions have opened up new roles for the
security professional.

Many security professionals have gravitated towards

the healthcare field, taking advantage of these
greenfield opportunities. In order to enhance their skills,
many have undertaken the task of becoming certified
with the HCISPP credential. The HCISPP certification
has offered many benefits to healthcare security and
privacy professionals, including increased confidence,
professional recognition, career advancement,
and healthcare knowledge on a global scale.

isc2.org/Certifications/HCISPP
 Discover how HCISPP Certification
Helped Them in Their Careers

A cybersecurity career in the healthcare

industry is broader than you might imagine…
including the following categories and
industries from (ISC)2 members.

Health Care Providers Direct Suppliers Outsourced Services Enablers

isc2.org/Certifications/HCISPP
Healthcare Providers
From hospitals and doctors, to surgery
and specialist care, cybersecurity roles
occupy areas of the frontline.

isc2.org/Certifications/HCISPP
Attaining a Deeper Understanding
of Broader Challenges
Rafael Ramirez
Clinical Engineering Manager
Franciscan Health
The HCISPP opened the door to cybersecurity, which
perhaps was always propped open, but I never peeked
in. The journey of towards the HCISPP exam uncovered
area in information security I had previously overlooked
or disregarded. Throughout my career in Healthcare
Technology Management (HTM), I have been deeply
involved with medical devices, systems, and other
associated aspects in healthcare that have increasingly
involved aspects of information security and privacy.
The HCISPP certification has enabled me to bridge
the gap, founded on a common language, concepts,
and practices, to support foundational privacy and
security practices within the healthcare environment.
The HCISPP certification was my first within the area of
information security, and it inspired further interest, and
was the springboard that has propelled me to obtain
other industry-leading certifications, including the CISSP.
Professionally and personally, I have undoubtedly
benefited from the HCISPP credential, and have become
more engaged in the information security community.
 Addressing a Technically Complex and
Challenging IT Environment

Healthcare is the most challenging IT

environment to work in, especially if
your job is with a Healthcare Delivery
Organization (HDO). It is highly regulated,
very complex technically, and has the
tendency to be stratified across different
business lines. The HCISPP certification
addresses this, explaining how healthcare
organizations function and describing
the laws that govern data use.

The HCISPP provided good preparation

stepping into my ISO position. I work directly
with doctors and other clinical staff, but also
people with revenue cycle, claims, social Shawn Savadkohi
workers, compliance, and legal duties. The Healthcare Information
HCISPP provided sufficient detail to have Security Officer
conversations with various stakeholders about San Mateo County Health
how information security improvements
will benefit different service lines.
I Would Be Doing a Disservice to My
Position if I Did Not Get Certified
The HCISPP certification was exactly what I needed
to address the knowledge gap in my current
job responsibilities in the HIPAA Security Officer
role. The most beneficial part of obtaining this
certification was getting a complete understanding
of not just security, but privacy, the regulatory
environment, and the overall healthcare industry.
Since obtaining my certification, I have a much better
understanding of the dynamics of the security and
privacy and the importance of regulatory compliance
with the HIPAA Privacy and Security Rules.

I have always valued knowledge and education as

part of my career, which is why when I found out
Shawn O’Reilly about the HCISPP certification and its benefits, I
Information Security Officer,
knew I would be doing a disservice to my position
Adjunct Professor
if I did not get certified. The impact the HCISPP
SUNY Upstate Medical University,
credential has had on my career has been amazingly
LeMoyne College
instrumental in my career development. I am more
confident in my position and strongly believe the
details covered within the certification have allowed
me to understand the security, privacy practices, and
methods that can be applied to my organization.
 Proven Credibility to Start Conversations
About Data Governance, Security, and Risk

The biggest benefit of having the HCISPP

certification to my current job is that since I am
the highest ranking information security person
in our company, it shows my executive team that
I know and understand, not only about security
in general, but also how it applies to healthcare.

Since we are a network of senior and

long-term care facilities, the privacy and
security or our data is very important. This
certification allows me to have the credibility
to start the conversations about data
governance, security, and risk. I still have to
be knowledgeable once the conversations Robert George
start, but this certification means that people
take what I say a little more seriously Buckingham, Jr.
because I have proven my knowledge. Senior Director,
Information Systems
Presbyterian SeniorCare Network
 Deep Topic Knowledge
Mark W Hinchee
Facility Information Security Official
Shriners Hospitals for Children
I firmly believe that every IT job is an IT security job.
Although IT is important to healthcare, it shouldn’t
be and usually isn’t the focus. Because of this, many
people often fall victim to the “get it done and
ask questions later” mentality. Understanding the
regulatory requirements and how risk management
issues are managed in healthcare allows me to
quickly provide guidance without lengthy research.
Ultimately, our goal in healthcare is to save lives. I
take this responsibility very seriously, and the HCISPP
certification has aided me in this effort. Earning the
HCISPP certification gave me almost immediate
credibility. Although I had been performing the role
for a few years, the HCISPP certification solidified my
expertise with peers, subordinates, and executives.
Education and awareness training, when delivered by a
subject matter expert, takes on a whole new meaning.
Most medium to large sized healthcare organization
have a well-established academic approach. Being
able to go deep into a topic for justification or to
answer a question “on the fly” makes all the difference.
 In-Depth Understanding of the Healthcare
Information Security and Privacy Environment

The healthcare industry is dynamic and in

a state of continuous change. The HCISPP
certification demonstrates an in-depth
understanding of the healthcare information
security and privacy environment to facilitate
expert level advisory services to our clients.

It is critical to understand the information and

technologies specific to healthcare in order
to protect assets appropriately. An HCISPP
credential holder can apply these unique sets
of skills to rapidly implement an information
security program or mature an existing program.
Eric A. Nielsen
Chief Executive Officer
Defense In Depth Cyber Security
 A Competitive Advantage to
Certification Holders
Attaining the HCISPP certification allowed me to immediately
expand my role within my organization to meet the needs
of a dynamic compliance environment while using risk-
based approaches to solving practical issues. I can trust
that the decision-making process informed by the HCISPP
certification will give my organization the best security
and privacy outcomes, taking into account the need of
our employees to have the tools to do their jobs without
experiencing friction from compliance activities. Applying
the knowledge gained from this certification has given
my organization an edge to grow with confidence and
trust in our security and privacy policies and culture.

For me, the greatest benefit of the HCISPP credential is the

risk-based approach to decision making that allows us to
have confidence in the operational and policy decision we
make. The (ISC)2 emphasis on using common risk frameworks
David Semanek and embedding them in every aspect of the certification
Research Technician gives a competitive advantage to certification holders. I
New York State Psychiatric Institute am able to navigate often difficult, competing objectives
using the clarity provided by risk-informed decision making,
supported by the comprehensive and relevant knowledge
provided by the other domains covered in the HCISPP.
A Guide in Bridging the Gap Between Prior
Experience and the Healthcare Industry

I started my career as a consultant serving mostly

financial companies and learning most of the financial
regulations. I wanted to move to a healthcare company,
knowing that they weren’t as mature in information
security as the financial, or other industries.

The HCISPP certification guided me in bridging the

gap between my prior experience and the healthcare
industry by helping me to understand new terms
and a different corporate culture. Comparing the
CIA triangle in healthcare with other industries, the
priorities are vastly different in how to apply information
security principles. Being able to understand health
care specific terminology and concepts has allowed
me to engage more in conversations. I have also
been able to make smarter risk-based decisions George Chacko
while creating an encompassing program for the Director, Information Security
company. All of these aspects are creating the New York Blood Center
building blocks as I move forward in my career.
Direct Suppliers
Medical software and hardware, as well
as medical research require cybersecurity
roles to facilitate the supply chain.

isc2.org/Certifications/HCISPP
Tools to Effectively Communicate

The biggest benefit of the HCISPP credential is

gaining a fuller understanding around privacy
regulations and compliance with respect
to healthcare. That understanding allows me
to ask better questions and provide better
guidance. Far too often, discussions around
privacy begin and end with encryption.

The HCISPP Common Body of Knowledge

expands the understanding of privacy
while providing us with the concepts and a
common language. When I have conversations
with engineers, product managers, senior
executives, auditors, regulators, and various
personnel, I have the tools to ensure that
Damyen Lofton privacy is included through the development
Architect Information pipeline and effectively communicated
Security up and down the chain of command.
Kaiser Permanente
 Solidified Knowledge Around the
Healthcare Security and Privacy Practices

Studying for the HCISPP certification really

solidified my knowledge around the
healthcare security and privacy practices
needed in a healthcare company. Going into
the HCISPP certification process, I felt that
my knowledge was strong, and coming out
of the training I felt better prepared and also
very aware of how much more I needed to
learn. That has helped drive positive change
in the organization and our preparedness.
Often it seems that privacy or security is
considered someone else’s problem to solve.

The new skills and knowledge gained

through the HCISPP certification have Martin Spence
given me the confidence to evangelize VP, Service & Support Operations
routinely on security and privacy concerns
Security Officer
and help people understand that security
Major Health Care Company
and privacy is everyone’s responsibility.
Security Compliance and Assurance

After achieving the HCISSP certification, I

have become a contact person to help in
increasing awareness for the risks involved
in personal data processing as well as in
developing more secure procedures. Moreover,
I have been able to advise on projects with
the most diversified goals, to adapt more
secure and private measures. Additionally,
I can, with the Data Protection Officer, help
research groups in complying and being
assured they can perform their job in a more
secure manner, respecting the privacy of the
Ana Ferreira owners of the data they handle every day.
Researcher – Cybersecurity
in Healthcare
University of Porto –Faculty
of Medicine
 Strong Grounding in the Issues of
Cybersecurity and Privacy in Healthcare

The biggest benefits to me of holding the

HCISPP certification are the addition of
substantial validated credibility. Certifications
and licenses are fundamental requirements for
being recognized and accepted as a properly
qualified professional and subject matter expert in
a healthcare environment. Attaining the HCISPP
certification has brought that sort of recognition
to me and has helped with my being invited
to important discussions in my company that I
might otherwise not have been part of.

The HCISPP certification clearly proves that

I have a strong grounding in the issues of
cybersecurity and privacy in healthcare
specifically. This has helped me to be recognized, Ross A. Leo
accepted and integrated into the structure and CISO
team-orientation of my company, which enables ObservSMART Invisalert
me to be much more effective in my role. Solutions, Inc.
Practical Knowledge for Crucial Moments

Having studied and subsequently passed the HCISPP

exam, I found that (ISC)2 took great care in selecting the
Common Body of Knowledge (CBK) for the exam. The
CBK aligned well with real-world needs and ensured
that the certification candidate received a much deeper
understanding of the foundation of healthcare security
and privacy. This foundation gives me the opportunity
to reference and further enhance my knowledge around
healthcare and the related security and privacy concerns
that are directly applicable to my current position.

I have found with many of the (ISC)2 exams that

the content creators focus on the practicality of the
information they are testing on, and due to this I
find it very easy to remember, retain, and eventually
recall the information in practice, on the job, and
Chris Reed especially in crucial moments required in my role. This
Chief Information foundational knowledge allows me to reference and
Security Officer recall supporting and accompanying resources as well
WellHive Holdings, LLC as being able to pivot my expertise to meet the needs
of multiple healthcare use-cases and privacy concerns.
 Better Security Services for Clients

I have been a consultant for the government,

energy and financial industries in the past.
Providing consulting services in healthcare is a
new field for me. Studying for the HCISPP exam
helped me to quickly become familiar with
the particularities of the industry, regulatory
requirements, and other background knowledge.

My job is mainly to help customers solve the

problems of IT infrastructure, cloud computing
platforms, application software, and business data
security protection. Through the study of HCISPP
Common Body of Knowledge, I have gained an
understanding of international protection of medical
health data privacy and security management. The
HCISPP certification has helped me to provide Adam Zhang
better security consulting services to my clients. Cybersecurity Consultant
Taiji Computer Corporation Limited
Attests My Authority in Healthcare
Information Security Issues

I am a Biomedical Engineering professional with

over 17 years of experience in healthcare technology
management, systems design, and medical device
integration. I previously did not have a formal
education or any credentials in information security to
prove my knowledge in healthcare privacy and security.
The HCISPP certification provided the necessary
credentials and attested my authority in healthcare
information security issues. It also helped me earn
respect from my peers as well as privacy and security
professionals in healthcare delivery organizations.

After achieving the HCISPP certification, I can

confidently discuss privacy and security issues
related to medical devices and provide solutions
to improve their organization’s security posture.
Asadullah Khan Additionally, the HCISPP Common Body of Knowledge
Director, Clinical Engineering-IT provided an opportunity to learn privacy and security
TRIMEDX practices as well as regulations implemented around
the globe. This certification will serve as a stepping
stone towards achieving higher goals in my career.
 Addresses the Specific Challenges Facing
the Healthcare Sector Today
The biggest benefit of the HCISPP certification is its focus.
Unlike other cross-industry, broadly-defined cybersecurity
certifications, it is designed to address the specific
challenges facing the healthcare sector today.
Healthcare is unique among other critical infrastructure
sectors. Phishing, insider threats, malware and other
cyber-threats adversely affect healthcare in unique ways.
The policy focus of the HCISPP Common Body of
Knowledge is also unique, but critically important to
understand in the healthcare space, and is also covered in
depth. The HCISPP certification is so valuable because
it not only specifically addresses the unique cyber-
challenges of healthcare, but also reaffirms one’s commit-
ment to healthcare and to securing one of our most critical
infrastructure sectors.

As a Graduate Adjunct Professor within Salve Regina

University’s Healthcare Administration Master’s program, Matt McMahon
I see the value in the HCISPP. I have incorporated some Acting Product Security Officer
of the HCISPP study guides as required reading for the and Cybersecurity Training
courses I developed and taught. I believe that as time Board Member
progresses, the HCISPP credential will be the Siemens Healthineers
certification of choice for cybersecurity leaders working
within the healthcare sector.
Outsourced Services
Helping healthcare providers requiring
specialist skills in finance, insurance
and compliance

isc2.org/Certifications/HCISPP
A Great Certification for the Fast-paced
Industry of Healthcare Tech

Achieving the HCISPP certification really helped

add clout to my extensive background in the
Healthcare Information and Technology space.
Previously I held a degree in English Literature
although I worked in IT for about 5 years during and
after college. I then transitioned into a government-
based healthcare position and worked my way
up the career ladder. Even though I had amassed
knowledge and experience in the areas of privacy,
security and audit within healthcare, I felt like I
was stuck in my career track. After doing some
research, I decided to study for and subsequently
passed, the HCISPP exam. The certification helped
validate my well-earned skills and knowledge.

Olivia Moreno Now, I work for a great company in the rewarding

Compliance Specialist fast-paced industry of Healthcare Tech. The biggest
Centene Corporations
benefit of studying and passing the HCISPP exam
was showing me that I was a lifelong learner.
 Challenge-Ready

One of the biggest benefits of having the

HCISPP certification is the foundational
knowledge and experience it provides for
any professional looking to secure and protect
healthcare information. The Common Body
of Knowledge exposes individuals to all the
relevant Federal, State, Local, and International
laws governing healthcare information.

With the ever-changing threat landscapes,

continuous modification, and complexity of
regulatory frameworks and laws that affect the
healthcare industry, the HCISPP certification
is the only certification that ensures that
information security professionals are ready Olawale Adeyemo
to handle the complexity of the challenges Information Protection Advisor
presented in the healthcare industry. Cigna
Overcoming the Hurdles of Security

The biggest benefit achieving my HCISPP credential

is that it provides validation that I understand not only
general cybersecurity concepts, but also cybersecurity
within the healthcare space. When it comes to
securing information, healthcare has some interesting
intricacies. By achieving the HCISPP designation,
it showed to our clients that I understood the
industry, the regulations, and the hurdles that many
IT and security departments have to overcome.

As I have moved from being a consultant into a

full-time position for an organization, the HCISPP
certification provides me with an understanding
of many of the questions of our potential, and
current customers. The HCISPP credential also
identifies to our privacy team that I understand
Thomas Graham their issues, as a true assurance program
CISO must address both security and privacy.
CynergisTek
 A Path Towards Expertise

The biggest benefit of obtaining the HCISPP

certification was that it provided me with knowledge
and confidence that I needed to step into a new career.

It was during my Master’s in Technology Management

program that I fell in love with privacy and security. I
had worked in Health IT for many years before that,
and despite healthcare data being some of the most
private and sensitive data that we as individuals
have, there was a lack of people with both interest
in and knowledge of how to protect it. I decided
to become an expert in it and started with the
HCISPP certification. That knowledge then allowed
me to seek and gain experience in challenging
data protection projects both in healthcare as Tatjana Misic
well as in privacy-focused GDPR compliance. Information Security Specialist
CareFirst BCBS/FEPOC
 Bona Fide Knowledge

The biggest benefit of attaining the HCISPP

certification has been the external validation
of my knowledge in the area of healthcare
related privacy and security. It immediately
establishes my authenticity and good faith
approach when working with colleagues and
vendors. Plus, by validating my knowledge, it
made me more self-confident when dealing
with other privacy and security professionals.

I have worked with HIPAA-related concerns

for many years. Studying for the HCISPP
exam helped me refresh my knowledge
John Jessop across the entire scope of HIPAA.
Associate Director, Office
of the CISO
Multinational non-profit
 Ability to Form Partnerships

Working with small healthcare practices

to achieve security means working with
practice-owners, usually doctors and IT
vendor owners. Small practices are usually
seen as “low-hanging fruit” for cybercrime,
as they frequently lack adequate security
controls. I use the knowledge I have acquired
through the HCISPP certification to help
private practices to create and implement
security programs which will also enable
them to meet HIPAA compliance as well.

Having the HCISPP credential gives me

credibility and the ability to bring doctors
and IT vendors together to form partnerships Debi Carr
to protect small, vulnerable practices. Cyber Security &
Studying for the HCISPP exam requires HIPAA Compliance
time, but in the end, it is well worth it. D K Carr and Associates LLC
Enablers
Educating and developing the capabilities
of healthcare providers

isc2.org/Certifications/HCISPP
 An Instant Stamp of Approval

Achieving the HCISPP certification really helped

enhance my credibility with my team and with my
clients. I had experience in most of the concepts
partially in healthcare and partially in financial
services. Even though I was working in healthcare,
people would always point to my experience in
financial services instead and talk about how financial
industry was different from healthcare. That’s why
achieving the HCISPP certification was like an
instant stamp of approval – a validation of sorts.

We encouraged multiple team members to obtain

the HCISPP certification. I was able to help and
guide them as they prepared for the exam. After
they obtained their HCISPP certifications, they also
felt an instant boost to their confidence as they
Rema Deo conducted HIPAA risk assessments, developed policies
Managing Director and procedures, and provided training to clients. The
24By7Security, Inc. HCISPP certification is an indication that the candidate
has a minimum amount of healthcare industry
experience in addition to having passed the exam.
 Accelerated Career Enablement

The biggest benefit of achieving the HCISPP

certification is that it instantly shows the job market
and your employer your expertise. The HCISPP
credential not only provides employers with the
confidence that you understand the cybersecurity
and privacy fields, but that you have a solid
understanding of the healthcare field in general.

The HCISPP certification delivers the platform

to become a change agent by protecting the
patients we serve and ensuring the delivery
of life-saving services. The HCISPP certification
also enabled me to land a senior consultant Fortune Onwuzuruike
role at an accelerated rate in my career. Senior Technology Consultant
Protiviti
 Learning and Instructing

Within 90 days of obtaining my HCISPP, I began to use

the material as an instructor for (ISC)2. Both learning,
and then instructing the material has reinforced the
information to allow my knowledge to continue to
grow from every student that attends the courses.

I have also been fortunate enough to be working in

a healthcare organization that allowed me to shadow
the operations and services functions to learn exactly
what, why, and how organizations operate while
applying the training material to real-world situations.
It has enabled me to become a trusted advisor.

If you are a healthcare practitioner, no matter

Tim Smit what area, I believe the HCISPP training
Sr. Global Privacy and should be a requirement to better understand
Cybersecurity Risk Consultant why and how you should protect sensitive data
Lockton Companies while working in the healthcare industry.
 Professional Enrichment and
Broadening Visions
The main benefits of having achieved HCISSP
certification are professional enrichment and
broadening visions. The HCISPP certification is
broad and covers all the key elements: security,
privacy, healthcare sector, regulations, information,
technology, risk, governance, and third-party
provider concerns. It is based on, and contributes
to develop technological, legal and business
knowledge and competencies. The HCISPP study
material contains the right balance between these
different areas, inviting one to go further, while
being conscious of the heterogeneous landscape of
organizations. It allows practitioners to enhance
their professional value in this challenging area
where there is a lack of qualified practitioners.

As a European, the HCISPP certification has

increased my knowledge of American regulations
Xavier Rubiralta
Project Manager Cybersecurity
and healthcare systems, which has been very
and Privacy
useful to progress in the international arena. The
Autonomous University of Barcelona
HCISPP Common Body of Knowledge has a global
perspective and encourages the diversity vision.
HCISPP is a worldwide powerful certification.
 Rewarding Experiences

I have a great understanding of how the

business of healthcare works and how
security and privacy work together to
protect our patient data. The HCISPP
certification has validated my knowledge
and instills confidence when I work with
different departments in the organization.
If you pass the test and get a chance to
volunteer to do an exam writing workshop,
do it! It is a rewarding experience to
meet your peers and give back.

Josh Sutherland
IT Security Consultant
Genesis HealthCare System
 It Has Opened Doors and Led to
Job Opportunities

Achieving the HCISPP certification has proven to be very

beneficial to my career in that I have gained credibility
from peers and clients who work in the healthcare
industry. On its own, the HCISPP credential is a great
certification to achieve in terms of cachet, preparation,
and content. However, the main benefit derives from Kumar Setty
the HCISPP certification being sponsored by the (ISC)2, Principal Consultant
which is very reputable and is known globally for its Zakti Labs
integrity, high standards, and for the competence
of the professionals who obtain its certifications.

For me, the HCISPP certification has opened doors with

prospective clients and has led to job opportunities.
 Stand-Out Credentials

As a cybersecurity consultant, education,

experience and certifications play a big role
when getting certain jobs. This is true especially
when dealing with doctors. They like seeing the
credentials behind a name, which shows them that
the person understands their industry even better.

Considering my team are all cybersecurity

consultants with numerous security
certifications and experience, having the
HCISPP certification helps me stand out as a
healthcare security and privacy expert.
Britt Garrett
Senior Security Consultant
Aon
A Unique Balance of Healthcare-specific Technical Controls,
International Regulations, and Risk Management

The HCISPP certification demonstrates that cybersecurity

professionals have a strong foundational knowledge specific
to many of the technical and regulatory aspects unique to the
healthcare industry. Furthermore, the diverse set of domains
contained within the HCISPP Common Body of Knowledge
(CBK) requires understanding many complex concepts that
are present in healthcare systems of varied size and care types.
This diversity contained within the CBK allows the HCISPP
certification to serve as a standard measure of experience
and expertise that cybersecurity leaders can use to evaluate
candidates to occupy vital roles within their organization.
This unique balance of healthcare-specific technical controls,
international healthcare-specific regulations, and risk
management concerns positions the HCISPP credential as one
of the few healthcare-focused cybersecurity certifications to
include in a progressive workforce development program.

The HCISPP certification also allows cybersecurity Keith Duemling

professionals to participate in complex clinical Director of Cybersecurity,
environments with a well-developed understanding of Technology Protection
the role of technology in healthcare and the challenges Cleveland Clinic
involved with securing highly specialized systems with
rigorous availability and reliability requirements.
 Tackling Security and Privacy in
the Healthcare Sector
Hasan Najdi
Senior Information Security Officer
American University of Beirut
Medical Center
The HCISPP Common Body of Knowledge (CBK)
sets the foundation for security and privacy. It
tackles the healthcare industry, the technologies
employed within that sphere, and focuses in
specifically on governance, risk, and compliance
topics. The HCISPP certification definitely
stands out in putting things in perspective
in terms of security and privacy within the
healthcare sector. It allowed me to extend the
practices at my institution to go above and beyond
the local nation’s regulatory requirements.
There are numerous sources of material, which
emphasizes the value of the certification, based
on the knowledge and experience requirements
among candidates. The biggest advice I can
provide for HCISPP candidates is to grasp the
fundamental concepts within each domain.
 A True Understanding of Security
and Privacy

In this new digital age, security and privacy have

evolved to become board level responsibilities.
The HCISPP credential is an essential certification
and is unique in the industry as it covers both
security and privacy domains in the same program.
Healthcare data often deals with a broader area
compared to traditional personally identifiable
information (PII) and requires professionals to truly
understand how security and privacy go hand-in-
hand when working in the healthcare industry.

The HCISPP certification is the perfect certification

to help healthcare workers prepare for the Jason Lau
challenges ahead. Chief Information
Security Officer
Crypto.com
How will you benefit from
HCISPP Certification?
Earning the HCISPP healthcare cybersecurity certification is a proven way to
build your career and show employers you’re on the forefront of protecting
patient health information and navigating a complex regulatory environment.

The HCISPP is the only certification that combines cybersecurity skills with
privacy best practices and techniques. It demonstrates you have the knowledge
and ability to implement, manage and assess security and privacy controls to
protect healthcare organizations using policies and procedures established by
the cybersecurity experts at (ISC)².

Prove your skills, advance your career, and gain support from a community of
cybersecurity leaders here to help you throughout your professional journey.

Ready to take the next step? Get started at:

isc2.org/Certifications/HCISPP
 Free Resources for Your Journey

Ultimate Guide to White Paper: The Hiring Managers

the HCISPP Not All Life Savers Guide to Defending
Wear White Coats Against Cyberattacks in
Healthcare
About (ISC)2
(ISC)² is an international nonprofit membership association
focused on inspiring a safe and secure cyber world. Best
known for the acclaimed Certified Information Systems Security
Professional (CISSP) certification, (ISC)² offers a portfolio of
credentials that are part of a holistic, pragmatic approach
to security.

Our membership, more than 150,000 strong, is madeup of

certified cyber, information, software and infrastructure security
professionals who are making a difference and helping to
advance the industry. Our vision is supported by our
commitment to educate and reach the general public through
our charitable foundation – The Center for Cyber Safety
and Education™.

For more information on (ISC)²

visit www.isc2.org, follow us on Twitter, or connect with us on
Facebook and LinkedIn