Frequently Asked Questions (FAQs)

Frequently Asked Security Awareness Questions

What is Security Awareness Training?

Employee Security Awareness Training is a course that teaches employees best practices to help reduce the risk of a cyber-attack or breach of sensitive information.
Expensive IT technology and complex, cutting edge systems can help protect a business, but even when the IT department has barricaded the cyber back door… just a simple click on a link, attachment or website by just one employee can open the front door to a catastrophic data breach.
Employee Security Awareness Training

• Needs to be taught so it becomes a habit, applicable every day, in and out of the working environment.
• Must ensure that employees protect sensitive information, keep business-critical systems up and running, and that the organization fully complies with industry regulations.
• Must incorporate all aspects of cyber security, from security basics on using strong passwords to detecting and responding to ransomware malware attacks.
• Is essential to transform employees from a potential security liability, to the company’s most vital resource in the battle against cyber-attacks.

What is On-line Security Awareness Training?

Accessible via the internet, Online Security Awareness Training teaches employees cybersecurity best practices to help reduce the risk of a criminal data breach.

What is Cyber Security Awareness Training?

Cyber Security Awareness Training teaches employees best practices for helping reduce the risk of a disastrous data breach in their company.

What is On-line Cyber Security Awareness Training?

Employee Cyber Security Awareness Training is a series of internet-based lessons to teach employees how to help reduce the risk of a data breach. The goal is to transform employees from their role as most common data security liability, into the company’s most vital resource in the battle against cyber-attacks.

What is HIPAA Training?

HIPAA, the Health Insurance Portability and Accountability Act, is a federal law that requires employees with access to Protected Health Information (PHI) receive training to ensure that they understand correct privacy and security practices.

Which employees need HIPAA training?

Any employee who has direct or indirect access to patient’s protected health information needs HIPAA training, including clinical staff, housekeeping staff, dietary workers, administrative and clerical staff, and contract workers.

Why is HIPAA Training for Employees Important?

Not only is staff training mandated by law, employees represent the most vulnerable aspect of a company’s security profile. A patient’s PHI is handled over and over during a typical shift. All employees need to understand what compliance with the HIPAA law requires and understand their responsibilities with respect to patient data.
HIPAA training fosters an environment in which everyone has a common understanding of the correct way to handle patient information. This helps to identify errors or misconduct before any patient records are compromised. HIPAA training for employees also minimizes the liability an organization can face should a breach occur.

Who Needs to Comply with HIPAA Training?

Organizations and contractors who have access to PHI must comply with HIPAA requirements and be certified. This includes:

• Healthcare Providers
• Employer Group Health Plans
• Health Insurance Companies
• Healthcare Clearing Houses
• Business Associates of any of the above
• Anyone else working in or with the healthcare industry

What are the HIPAA Training Requirements?

HIPAA training for implementation of the Privacy Rule states that it must be: “as necessary and appropriate for the members of the workforce to carry out their functions.” Employees have different levels of involvement with patient PHI, but training should cover the handling of patient PHI in a manner that allows everyone to understand their responsibilities across the board with respect to patient data.

What is HIPAA On-line Training?

HIPAA, the Health Insurance Portability and Accountability Act is a federal law that requires employees who have any access to Protected Health Information (PHI) to receive privacy and security training. Online refers to accessing the HIPAA training via the internet rather than in a classroom setting.

Why is Online HIPAA Training for Employees Important?

Training minimizes the liability an organization can face should a cyber breach occur. Not only is staff training mandated by Federal law, HIPAA compliance training over the internet makes this education easily accessible, and helps to ensure that employees and contractors understand the risks involved with careless handling of PHI.

What are HIPAA Training Requirements?

HIPAA training for implementation of the Privacy Rule states that it must be: “as necessary and appropriate for the members of the workforce to carry out their functions.” Employees have different levels of involvement with patients PHI, but training should cover the handling of patient PHI in a manner that allows everyone to understand their responsibilities across the board with respect to patient data.

What is PCI Training?

PCI Training refers to the Payment Card Industry (PCI) Data Security Standard which requires that each company that accepts credit card payments or stores, processes, or transmits cardholder data must train employees about best practices for data handling. Cardholder data refers to all personally identifiable information that is associated with a credit or debit card. This includes primary account numbers, the name on the card, and expiration dates along with all other personally identifiable information (PII).

What is On-line PCI Training?

Any company that accepts credit card payments must provide specific PCI Training to employees about key safeguards for storing, processing, or transmitting cardholder data. PCI refers to the Payment Card Industry (PCI) Data Security Standard; Online refers to making the training accessible through the internet.

Why do PCI Training?

If a company accepts credit card payments, or stores, processes, or transmits cardholder data, the Payment Card Industry (PCI) Data Security Standard requires that all company employees be trained in best practices for handling cardholder data.

How often is PCI training required?

PCI Standards require that you train your employees periodically, typically upon hire and annually.

Who needs PCI training?

If a company handles credit card information, PCI Standards require that the company provide PCI training to all its employees.