Experience Requirements
Candidates must have a minimum of two years cumulative paid work experience in one or more knowledge areas of the HCISPP Common Body of Knowledge (CBK) that includes security, compliance and privacy. Legal experience may be substituted for compliance and information management experience may be substituted for privacy. Of the two years of experience, one of those years must be in the healthcare industry.
A candidate that doesn’t have the required experience to become a HCISPP may become an Associate of (ISC)² by successfully passing the HCISPP examination. The Associate of (ISC)² will then have three years to earn the two years of required experience. You can learn more about HCISPP experience requirements and how to account for part-time work and internships at www.isc2.org/Certifications/HCISPP/experiencerequirements.
Accreditation
HCISPP is in compliance with the stringent requirements of ANSI/ISO/IEC Standard 17024.
What will You Need to Know to Pass the HCISPP Exam?
The HCISPP exam evaluates your expertise across seven domains. Think of the domains as topics you need to master based on your professional experience and education.
- Domain 1. Healthcare Industry
- Domain 2. Information Governance in Healthcare
- Domain 3. Information Technologies in Healthcare
- Domain 4. Regulatory and Standards Environment
- Domain 5. Privacy and Security in Healthcare
- Domain 6. Risk Management and Risk Assessment
- Domain 7. Third-Party Risk Management