Official (ISC)2 Guide to the HCISPP CBK

Steven Hernandez MBA, HCISPP, CISSP, CSSLP, SSCP, CAP, CISA, is a Chief Information Security Officer practicing in the U.S. Federal Government in Washington DC. Hernandez has over seventeen years of information assurance experience in a variety of fields including international healthcare, international heavy manufacturing, large finance organizations, educational institutions, and government agencies. Steven is an Honorary Professor at California State University San Bernardino and affiliate faculty at the National Information Assurance Training and Education Center located at Idaho State University. Through his academic outreach, he has lectured over the past decade on numerous information assurance topics including risk management, information security investment, and the implications of privacy decisions to graduate and postgraduate audiences. In addition to his credentials from (ISC)2, Hernandez also holds six U.S. Committee for National Security Systems certifications ranging from systems security to organizational risk management. Steven also volunteers service to (ISC)2’s Government Advisory Board and Executive Writers Bureau. Steven enjoys relaxing and traveling with his wife, whose patience and support have been indispensable in his numerous information assurance pursuits.

As the rapidly evolving healthcare industry faces challenges to keep personal health information protected—including growing volumes of electronic health records, new government regulations, and a complex IT security landscape—there is an increasing need to ensure knowledgeable security and privacy practitioners are in place to protect this sensitive information. ... This Official (ISC)2® Guide to the HCISPPSM CBK® textbook covers the diversity of the healthcare industry, the types of technologies and information flows that require various levels of protection, and the exchange of healthcare information within the industry, including relevant regulatory, compliance, and legal requirements. — W. Hord Tipton, Executive Director, (ISC)2

• Domain 1–Healthcare Industry. Domain 1–Review Questions. Domain 2–Regulatory Environment. Domain 2–Review Questions. Domain 3–Privacy and Security in Health Care. Domain 3–Review Questions. Domain 4–Information Governance and Risk Management. Domain 4–Review Questions. Domain 5–Information Risk Assessment. Domain 5–Review Questions. Domain 6–Third-Party Risk Management. Appendix: Answers to Domain Review Questions.