Rebel, Yell!
In late 2019, the phrase “OK, Boomer” started being used by millennials toward the elders who preceded them mockingly. This behavioral pattern isn’t new. Younger generations have always rebelled against their elders. Even in cultures where the elderly population is highly respected, the younger generations have developed their own language, music, art, literature and customs. The difference now is that this is the first time that the elderly out-number the younger members of society. This trend is projected to continue for the next 40 years. While some may see this as a troubling number, for those who work in healthcare, this has different implications.
The healthcare field is growing at a rate that is concurrent with the predicted rise in cybersecurity jobs. Indications are showing that these are global trends. What happens when you have an aging population, causing a rise in healthcare needs, coupled with a shortage of cybersecurity professionals? One could conclude that the need for qualified security and privacy professionals in the healthcare field will increase as well. This is a great opportunity for astute healthcare security professionals.
While data security has been the primary focus for many years, since the records are now all electronically available, privacy has become equally important. In healthcare, privacy is the force that drives security, especially now that new strains of malicious software steal data and hold it hostage. Good backups are no longer the best insurance against malicious software.
More Than Skin Deep
Individuals trained solely in security and privacy may not be enough for a healthcare organization, or any company that interacts with the healthcare sector. The only training that currently concentrates on security and privacy focused specifically in a healthcare setting is the HCISPP credential offered by (ISC)2. However, while this certification shows that the candidate has studied, passed, and has been granted membership into (ISC)2, there is more to the certification than what appears on the surface. The obvious benefits of the HCISPP certification includes knowledge of all the core concepts, including risk management, international regulations, and governance, but, as evidenced by those who possess this specialized credential, there are other hidden gems to be mined.
The Bigger Picture
The HCISPP certification offers more to candidates than just the near-sighted bubble of their immediate security practice. Hasan Najdi, of Beirut University, mentions that “(The HCISPP certification) allowed me to extend the practices at my institution to go above and beyond the local nation’s regulatory requirements.”
Information Protection Advisor, Olawale Adeyemo, remarks that, “The HCISPP certification is the only certification that ensures that information security professionals are ready to handle the complexity of the challenges presented in the healthcare industry.”
David Semanek, Research Technician for the New York State Psychiatric Institute, says “Applying the knowledge gained from this certification has given my organization an edge to grow with confidence and trust in our security and privacy policies and culture. David elaborates further saying, “(ISC)2's emphasis on using common risk frameworks and embedding them in every aspect of the certification gives a competitive advantage to certification holders. I am able to navigate often difficult, competing objectives using the clarity provided by risk-informed decision making, supported by the comprehensive and relevant knowledge provided by the other domains covered in the HCISPP.”
Favorable Cross-Currents
Many people interviewed for A Second Opinion: Detecting the Benefits of HCISPP ended up in the healthcare field after starting in other, seemingly unrelated professions, as was the case with Rema Deo, the Managing Director of 24By7Security, Inc., in Coral Springs, Florida. She started her career in the financial services sector and adds that “starting to work with the healthcare industry, achieving the HCISPP certification really helped enhance my credibility with my team and with my clients. I had experience in most of the concepts partially in healthcare and partially in financial services. Even though I was working in healthcare, people would always point to my experience in financial services instead and talk about how financial industry was different from healthcare. That’s why achieving this healthcare industry certification was like an instant stamp of approval.”
Rema’s experience shows that, with the correct mindset, and a sense of resiliency, a person can easily transition from one vertical into a respected position in the healthcare field with the HCISPP certification.
A Thirst for More
When speaking with certified HCISPP members, these hidden benefits were uncovered. Martin Spence, the Vice President and security officer, indicated that “coming out of the training and certification process I felt better prepared and also very aware of how much more I needed to learn. That has helped drive positive change in the organization and our preparedness.” Others echoed the sentiment of continued education. (ISC)2-member, Chris Reed states that “having this foundation gives me the opportunity to reference and further enhance my knowledge around healthcare and the related security and privacy concerns.” Tim Smit, who holds the Senior Global Privacy and Cybersecurity Risk Consultant position for Lockton Companies, adds, “within 90 days of obtaining my HCISPP, I began to instruct on the material as an instructor for (ISC)2. Both in learning and then instructing the material has reinforced the information to allow my knowledge to continue to grow from every student that attends the courses.
A Greater Purpose
Sometimes, a certification does more than just proving that a person is knowledgeable. In some cases, it serves a greater purpose. Keith Deumling, Director of Cybersecurity at the Cleveland Clinic, says “as cybersecurity professionals, we must strive to adapt and develop a strong understanding of the business we are trusted to protect.”
On a more emotionally striking level, Information Security Officer, and Adjunct Professor, Shawn O’Reilly, best describes this greater calling when he says, “I knew I would be doing a disservice to my current position if I did not get certified.”
A Sense of Gratitude and A Desire to Contribute
For some, the HCISPP credential offers more than just a validation of knowledge, it offers a sense of belonging to a strong community governed by a respected organization. Kumar Setty, of Sakti Labs in Illinois, offers the following, “the main benefit derives from the HCISPP being sponsored by the (ISC)2 organization, which is very reputable and is known globally for its integrity, high standards, and for the competence of the professionals who obtain its certifications.”
Xavier Rubiralta Costa, of Barcelona, Spain, partook in exam development, stating, “I had the opportunity of participating as a volunteer in HCISPP Item Writing Workshops and I was surprised by the sound and rigorous process of preparation of exam questions where different points of view are taken into account. In that same vein, IT Security consultant, Josh Sutherland, offers the following advice, “if you pass the test and get a chance to volunteer to do an exam writing workshop, do it! It is a rewarding experience to meet your peers and give back.”
More Than Just A Certificate
The voices of these, as well as many other members of the (ISC)2 organization are powerful reminders that the benefits that come from studying for, and then sitting for the exam, go beyond the obvious. The most common statement among all of the interviewees was that the HCISPP gave them increased confidence when working with their peers and superiors in the healthcare profession.
To help you discover more about how HCISPP can help your career, and your organization, we produced an eBook, gathering the opinions and views of over thirty professionals with the HCISPP credential. They offer compelling thoughts about their journey in information security, the exam process, and other aspects of working in this dynamic and rapidly growing field.
How the HCISPP Certification Can Help You to Succeed
The HCISPP Common Body of Knowledge (CBK) includes all aspects of security and privacy in a healthcare setting. The information gained through the study of the CBK is not only useful in achieving the certification, but it offers actionable, practical knowledge for any security practitioner in the healthcare field. Attaining the HCISPP certification shows a dedication to the healthcare security profession, which translates to a more valuable member of a healthcare security team. There are also the hidden benefits of gaining a better perspective, the urge to learn more, and the desire to reciprocate the knowledge.
If you are a security practitioner working in the healthcare field, or looking to enter the area of healthcare security, the HealthCare Information Security and Privacy Practitioner (HCISPP) certification offered by (ISC)2 is the perfect vehicle to enhance your knowledge and skills. Not only does this credential give you the skills you need to function at the highest levels of a healthcare organization, but it shows your employer that you possess specialized knowledge and dedication specific to the healthcare profession.
To learn more about HCISPP and learn further insights from certified healthcare security professions, read our new eBook, A Second Opinion: Detecting the Benefits of HCISPP.