Ementorhub

Skills you'll gain

Threat Modeling

Patient Safety

Information Assurance

Risk Analysis

Information Privacy

Healthcare Industry Knowledge

Health Care Procedure and Regulation

Personally Identifiable Information

Security Controls

Risk Management Framework

Medical Privacy

NIST 800-53

ISO/IEC 27001

Risk Management

Continuous Monitoring

Data Security

There are 6 modules in this course

Risk management is a crucial element for understanding information and privacy security. This domain sets the foundation for the entire course; terms defined here will be used in this book and in your day-to-day career. Risk management is one of the most complicated and important topics in information security, and this chapter does not pretend to cover all the different elements pertaining to it, but it provides a high-level glimpse of the essential concepts of this vital function. In the healthcare industry, the importance of adopting a risk management approach is even more crucial, due to the sensitive nature of the information. Data sharing can, in many cases, be a matter of life and death in the healthcare industry. However, patient safety is not the only objective. Saving someone's life only to have their most sensitive secrets leaked to unauthorized parties is counterproductive. Hence, the security and privacy practitioner must balance the clinical need for information and the patient's rightful expectation of privacy. Like other industries, the healthcare industry relies on technology to improve operations and patient care. In many cases, these technologies come with associated risks that must be considered. The industry also has unique regulatory and business requirements that the security and privacy practitioner must uphold. This course will cover the following learning objectives: - Define the foundations of enterprise risk management. - Explain the information risk management and assessment process. - Identify control assessment procedures using organization risk frameworks. - Explain the process of monitoring for and mitigating risk. - Define continuous monitoring.

Module 1: Principles of Enterprise Risk Management

Module 2: Information Risk Management Frameworks and Processes

Module 3: Control Assessment Procedures

Module 4: Risk Response, Continuous Monitoring, and Controls to Mitigate Risk

Course Conclusion