A tailored course, built for your situation
Mastering ISO 27799 for Chief Compliance Officers in Healthcare
Become the recognized authority on health information security and compliance in your organization
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Senior compliance and privacy leaders in healthcare organizations who are expected to align ISO standards with HIPAA, internal risk frameworks, and executive decision-making
Who this is not for
Individuals new to compliance or those without responsibility for information security frameworks or cross-functional coordination
What you walk away with
- Lead ISO 27799 implementation with confidence and organization-wide credibility
- Position yourself as the internal reference on health information security controls
- Align ISO 27799 controls with HIPAA requirements and audit expectations
- Deliver clear, authoritative responses during executive reviews and regulator-facing discussions
- Build repeatable templates and playbooks that reinforce your status as the subject matter expert
The 12 modules (with all 144 chapters)
Module 1. Foundations of ISO 27799 in Healthcare
Understand the core structure and healthcare-specific controls of ISO 27799, including alignment with HIPAA and organizational risk posture.
12 chapters in this module
- Origins of ISO 27799
- Healthcare context for security
- Linking to HIPAA Privacy Rule
- Linking to HIPAA Security Rule
- Scope of protected health information
- Roles in health information handling
- Baseline control mapping
- Risk assessment alignment
- Regulatory overlap awareness
- Executive reporting expectations
- Audit preparedness fundamentals
- Control ownership models
Module 2. Access Control and Authorization Models
Design secure access frameworks for EHRs, claims systems, and internal portals using ISO 27799 guidance.
12 chapters in this module
- Role-based access principles
- User provisioning workflows
- Privileged access oversight
- Session timeout enforcement
- Multi-factor authentication use
- Emergency access design
- Access review cycles
- Delegation controls
- Service account governance
- Access logging standards
- Incident linkage procedures
- Audit trail retention
Module 3. Asset Management in Health Systems
Classify and protect health data assets across cloud, on-premise, and hybrid environments.
12 chapters in this module
- Data classification schema
- PHI labeling standards
- Data lifecycle stages
- Storage location inventory
- Cloud asset tracking
- Mobile device handling
- Third-party data flows
- Asset ownership rules
- Decommissioning procedures
- Data retention alignment
- Legal hold requirements
- Audit-ready asset logs
Module 4. Privacy by Design in Practice
Embed privacy controls into system development and vendor integration from the start.
12 chapters in this module
- Privacy impact assessments
- Vendor onboarding checks
- Data minimization tactics
- Consent management models
- Notice distribution methods
- Opt-out mechanism design
- Data anonymization standards
- Re-identification risk control
- Processing agreement terms
- Breach notification triggers
- Patient data rights workflows
- Internal privacy monitoring
Module 5. Security Incident Management
Respond to data events with documented, compliant procedures aligned to ISO 27799 and HIPAA.
12 chapters in this module
- Incident definition criteria
- Detection mechanisms
- Escalation pathways
- Response team roles
- Containment protocols
- Forensic readiness
- Legal counsel notification
- Regulator reporting timelines
- Patient notification rules
- Post-event review process
- Corrective action tracking
- Documentation retention
Module 6. Business Continuity Planning for Healthcare
Ensure availability of critical systems and data under disruption using ISO 27799 guidance.
12 chapters in this module
- Critical system identification
- Recovery time objectives
- Failover testing schedules
- Data backup verification
- Alternate site readiness
- Staff communication plans
- Vendor dependency review
- Insurance alignment
- Regulatory reporting continuity
- Patient access assurance
- Audit documentation
- Plan maintenance cycle
Module 7. Vendor Risk Oversight
Manage third-party compliance and security expectations with ISO 27799-aligned assessments.
12 chapters in this module
- Vendor risk classification
- Pre-contract review steps
- Due diligence checklists
- BAAs and data clauses
- Audit right negotiations
- Ongoing monitoring frequency
- Performance issue handling
- Subcontractor oversight
- Exit process controls
- Penetration test sharing
- Compliance reporting demands
- Termination safeguards
Module 8. Audit and Compliance Review Readiness
Prepare for internal and external audits with organized, repeatable evidence packages.
12 chapters in this module
- Control mapping methodology
- Evidence collection workflow
- Control testing procedures
- Gap identification process
- Remediation tracking
- Management sign-off steps
- Audit committee reporting
- Internal auditor coordination
- External auditor liaison
- Corrective action timelines
- Follow-up audit preparation
- Continuous monitoring setup
Module 9. Training and Awareness Programs
Develop effective security and privacy training tailored to healthcare staff roles.
12 chapters in this module
- Role-based curriculum design
- Onboarding integration
- Phishing simulation use
- Annual training delivery
- Manager accountability
- Content refresh cycle
- Policy attestation methods
- Compliance quiz design
- Reporting awareness metrics
- Incident reporting culture
- Leadership messaging
- External benchmarking
Module 10. Policy Development and Maintenance
Create clear, enforceable policies that align with ISO 27799 and organizational needs.
12 chapters in this module
- Policy hierarchy structure
- Stakeholder review process
- Approval workflows
- Version control system
- Distribution methods
- Acknowledgment tracking
- Enforcement standards
- Exception handling
- Legal alignment checks
- Industry update integration
- Review cycle schedule
- Retirement procedures
Module 11. Executive Communication and Reporting
Deliver concise, actionable updates to leadership on compliance and risk posture.
12 chapters in this module
- Risk dashboard design
- Executive summary writing
- KPIs for compliance
- Incident escalation levels
- Budget justification
- Strategic initiative alignment
- Board-level summary prep
- Metrics interpretation
- Trend reporting
- Outsider explanation skills
- Timeline clarity
- Action recommendation framing
Module 12. Sustaining Compliance Excellence
Maintain long-term compliance quality through continuous improvement and organizational learning.
12 chapters in this module
- Continuous monitoring tools
- Automated control checks
- Internal audit integration
- Feedback loop design
- Benchmarking against peers
- Regulatory change tracking
- Team knowledge sharing
- Mentorship development
- Innovation encouragement
- Lessons learned capture
- Annual improvement plan
- Succession planning
How this maps to your situation
- New regulatory scrutiny on health data
- Increasing third-party vendor complexity
- Executive demand for compliance clarity
- Need for audit-ready posture
Before vs. after
Before
Compliance efforts are reactive, fragmented, and often questioned during leadership reviews.
After
You lead with authority, consistently recognized as the definitive source on health information security and ISO 27799 alignment.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 2.5 hours per module, designed for completion in 2-3 weeks with consistent pacing.
If nothing changes
Without a clear, recognized standard for health information governance, compliance initiatives risk appearing inconsistent, leading to repeated scrutiny, redundant audits, and diminished influence in strategic discussions.
How this compares to the alternatives
Unlike generic compliance courses, this program is tailored to healthcare Chief Compliance Officers and centers on ISO 27799 as the benchmark for health information security , combining structured learning with actionable frameworks you can deploy immediately.
Frequently asked
Is this course focused on HIPAA or ISO 27799?
It integrates both, showing how ISO 27799 provides a robust framework that aligns with and strengthens HIPAA compliance.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Can I apply this directly to my current role?
Yes , every module includes templates and examples designed for immediate use by Chief Compliance Officers in healthcare settings.
$199 one-time. Approximately 2.5 hours per module, designed for completion in 2-3 weeks with consistent pacing..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours