HCISPP HealthCare Information Security and Privacy Practitioner All-in-One Exam Guide

CHAPTER 6

Risk Management and Risk Assessment

This chapter covers Domain 6, “Risk Management and Risk Assessment,” of the HCISPP certification. After you read and study this chapter, you should be able to:

•   Understand risk management concepts, leading frameworks, and relevant processes

•   Be able to assess risk management controls for effectiveness and efficiency

•   Differentiate between quantitative and qualitative approaches to measuring risk

•   Conduct risk management activities relevant to role and position in the organization

•   Evaluate risk and support risk treatment decisions such as risk avoidance, mitigation, or transfer of residual risk in the organization

Healthcare information privacy and security has evolved from solely ...