
Explore the essentials of cybersecurity in healthcare, focusing on access control, authentication, phishing, malware, and ransomware through real cases like the Boston Children's Hospital incident.
Protect electronic health care information by examining cyber threats, rising data breaches, attacker motives, and the role of ransomware and legacy systems.
Explore authentication mechanisms that verify who you are using biometrics, tokens, and passwords, and compare three categories—something you are, something you have, and something you know.
Explore how passwords work in healthcare cybersecurity, why longer, more complex combinations slow hackers, and the limits of password security illustrated by real-world risks like a Ring camera.
Explore how something you own, such as fobs, RFID cards, and badges, forms the core of authentication in healthcare, and how two-factor and multi-factor authentication strengthen access control through encryption.
Explore biometric identification in health care security, including handwriting signatures, voice recognition, face recognition with depth sensing, fingerprint, iris, and DNA, and compare convenience and accuracy for access control.
Explore how healthcare cybersecurity hinges on authenticating access and verifying identities across multiple databases. Learn how the FIDO standard enables passwordless, interoperable authentication for emergency responders and sensitive systems.
Phishing and its forms: spear phishing, whaling, smishing, and voice phishing show how attackers target audiences with urgent messages to lure clicks and breach data.
Celebrate your completion of this course and apply the tools and skills you learned as you pursue future endeavors with confidence.
WHY CYBERSECURITY MATTERS TO YOU
Cybersecurity is no longer just the responsibility of the IT department.
Healthcare organizations depend on electronic health records, connected medical devices, networks, and enormous amounts of sensitive patient information. A security failure can compromise patient privacy, disrupt operations, damage an organization's reputation, and even affect patient care.
Yet cybersecurity can seem complicated—especially if you don't work in IT.
That's exactly why I created this course. You don't need to become a cybersecurity expert, but if you work in or around healthcare, you should understand the fundamentals. I'll take a subject that can seem highly technical and break it down into concepts that make sense—Plain & Simple.
WHAT YOU'LL LEARN
We'll start with the basics of cybersecurity and then explore how organizations control and authenticate access to their systems and information.
You'll learn about:
Why cybersecurity has become such an important healthcare issue
How organizations control and authenticate access
Passwords—and why they remain both essential and vulnerable
Multi-factor authentication (MFA) and security devices
Biometrics—using something you are to prove your identity
Modern authentication approaches, including FIDO
Phishing and spam—and why people remain an important part of cybersecurity
You'll also have a quiz and practical assignment to reinforce what you've learned.
CYBERSECURITY—PLAIN & SIMPLE
This course is designed for healthcare professionals, managers, students, and business professionals who aren't cybersecurity specialists but need to understand the subject. No technical background is required.
My approach is practical rather than highly technical. I spent 35 years designing, developing, and bringing medical technology to market, progressing from engineering leadership to VP of Marketing and ultimately president of a healthcare IT company. I've also spent many years teaching graduate-level university courses.
My goal isn't to turn you into a cybersecurity expert. It's to help you recognize the risks, understand the terminology, ask better questions, and play your part in protecting your organization and its patients.
Want to continue learning? My companion course, Cybersecurity in Healthcare: Threats & Real-World Cases, explores malware, ransomware, HIPAA, vulnerabilities, and actual cybersecurity incidents.