LEADERSHIP PROGRAMME
HIPAA Security Training for Healthcare Executives and Managers
Protect electronic health information and clinical continuity through informed management decisions, workforce awareness and practical incident response.
HIPAA Security Rule, 45 CFR §164.308(a)(5)(i)

WHO THIS IS FOR
Practical decisions in your regulatory context.
Executives and managers of HIPAA covered entities and business associates handling electronic protected health information.
HIPAA Security Rule, 45 CFR §164.308(a)(5)(i)
Section 164.308(a)(5)(i) requires a security awareness and training programme for all workforce members, including management. This course focuses on leadership within that wider requirement. It addresses the Security Rule and electronic protected health information, and does not replace role-specific procedures, Privacy Rule training or legal assessment.
INSIDE THE COURSE
6 modules. Decisions you can practise.
Each module includes a practical role-specific scenario, a decision check and a written reflection. Complete the modules before taking the final scenario assessment.
- 0115 min
HIPAA scope, ePHI and management duties
Identify protected electronic information and management’s place in workforce security training.
- 0215 min
Risk analysis and patient-care priorities
Challenge an ePHI risk analysis against real clinical workflows and treatment priorities.
- 0315 min
Workforce awareness and everyday safeguards
Respond to phishing, suspicious logins and unsafe handling without undermining care.
- 0415 min
Access, business associates and cloud services
Evaluate access decisions and business-associate assurances before sharing ePHI.
- 0515 min
Incident response and care during disruption
Coordinate security response and emergency-mode care with reliable recovery checks.
- 0615 min
Evaluation, training evidence and improvement
Use evaluations and workforce evidence to improve safeguards as operations change.
- ✓
12 scenario questions · 80% pass mark
Allow approximately 30 minutes for the final assessment and review.
LEARNING THAT LEAVES A RECORD
Practise, assess and document completion.
Apply the decisions
Work through role-relevant situations, explain your reasoning and connect the learning to your company’s procedures. Progress is saved as you complete each module.
Keep named evidence
After the module checks, written exercises and a passing assessment, receive a named certificate showing the course version and result. Administrators can export company completion reports and individual certificates.
Lessons and assessment are in English. Written responses are retained, not independently graded. Duration and the pass mark are Academy choices, not statutory thresholds. Completion is not accreditation or proof of organisational regulatory compliance.
Primary sources
Programme version: hipaa-executive-v2 · Content reviewed 14 October 2026
