ISC2 · Historical ISC2 HCISPP Certification Exam Outline, effective September 1, 2022, with footer v10/2021. This is the outline linked from ISC2's HCISPP page on October 19, 2026. Although its filename contains September-2019, its cover states the 2022 effective date. The workbook label maps to the same credential, officially styled HealthCare Information Security and Privacy Practitioner.

This original 20-question sample covers selected topics across the outline. It does not reproduce official exam questions or cover every tested topic.

• HCISPP — HealthCare Information Security and Privacy Practitioner
• HCISPP Certification Exam Outline
• ISC2 Code of Ethics
• Covered Entities and Business Associates
• DICOM PS3.1 — Scope and Field of Application
• NIST SP 800-53 Revision 5: Security and Privacy Controls for Information Systems and Organizations
• HL7 FHIR R5 — Security
• NIST SP 800-88 Revision 2: Guidelines for Media Sanitization
• Minimum Necessary Requirement
• Summary of the HIPAA Security Rule
• Breach Notification Rule
• NIST SP 800-34 Revision 1: Contingency Planning Guide for Federal Information Systems
• NIST SP 800-30 Revision 1: Guide for Conducting Risk Assessments
• NIST SP 800-53A Revision 5: Assessing Security and Privacy Controls in Information Systems and Organizations
• Guidance on HIPAA & Cloud Computing
• Business Associates
• Guidance on Risk Analysis
• Uses and Disclosures for Treatment, Payment, and Health Care Operations
• Disclosures for Public Health Activities
• What personal health information do individuals have a right under HIPAA to access?
• EDPB — Data Controller or Data Processor
• HIPAA and Research
• HHS Guidance Regarding Methods for De-identification
• Fact Sheet: Ransomware and HIPAA
• NIST SP 800-61 Revision 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management
• Does the HIPAA Privacy Rule Require Medical Record Retention?
• HCISPP Certification to be Sunset