Too often, facilities and systems are designed with no consideration for security, resulting in numerous vulnerabilities that are often difficult to remediate without a great deal of rework after they are built, requiring security that is “bolted on” after the fact. Beyond the basics of protecting data, cybersecurity practitioners in the healthcare industry need the specialized skills used to determine requirements for effective security controls to protect hospitals, clinics, and other medical facilities, while maintaining compliance with healthcare laws. In this course, Specialized Engineering: Healthcare Facilities, you’ll learn the critical knowledge to apply security engineering principles to the design, implementation, and validation of controls needed to protect healthcare facilities. First, you’ll explore security engineering processes such as requirements gathering, control design, and testing, and solution implementation, and see how they specifically apply to healthcare security. Next, you’ll discover how to design those administrative, technical, and physical controls to meet security requirements by balancing tradeoffs between security, functionality, and resources. You’ll also see how governance can influence the design and architecture phases of the security engineering process and how the facility must be designed to comply with appropriate healthcare security laws and regulations. Finally, you’ll learn how to assess and validate security designs to ensure they fulfill initial and changing requirements over the life of the facility. When you’ve completed this course, you’ll have the skills and knowledge of security engineering needed to approach designing healthcare security from the ground up, “baking it in” to facilities and systems, rather than having to fit security in afterwards.
Author Name: Bobby Rogers
Author Description:
Bobby E. Rogers is an information security engineer working as a contractor for Department of Defense agencies, helping to secure, certify, and accredit their information systems. His duties include information system security engineering, risk management, and certification and accreditation efforts. He retired after 21 years in the U.S. Air Force, serving as a network security engineer and instructor, and has secured networks all over the world. Bobby has a master’s degree in information assura… more