HIPAA for IT, Security & Administrators Training

Introduces this HIPAA course for IT, security, and admin staff, explaining why the people who run systems carry outsized responsibility for protecting patient data.

Defines PHI and ePHI and walks through HIPAA’s administrative, physical, and technical safeguards that keep electronic health data confidential and available.

Explains how to grant least-privilege access when staff join or change roles and promptly revoke it when they leave to prevent lingering ePHI exposure.

Shows how to record, review, and retain audit logs so unusual access to ePHI gets caught early and you can prove who touched what and when.

Covers encryption at rest and in transit, multi-factor authentication, and the technical controls the proposed HIPAA Security Rule update would make mandatory.

Details routine vulnerability scanning, defined patching deadlines, and network segmentation that limit how far an attacker can move toward ePHI.

Explains how to maintain an accurate asset inventory and map where ePHI lives, moves, and rests so nothing sensitive goes untracked or unprotected.

Outlines how to detect, contain, and report security incidents, including the proposed rule to notify within 24 hours once a contingency plan is activated.

Shows how to spot insider threats and privilege misuse, from snooping on records to abusing elevated access, before they become reportable breaches.

Covers how malware and ransomware reach healthcare systems and the layered defenses, backups, and habits that keep ePHI safe and recoverable.

Explains how to vet vendors, manage business associate agreements, and reduce the supply-chain risk that third-party tools introduce to ePHI.