HITRUST, SMU launch security graduate certificate program

HITRUST has partnered with Southern Methodist University’s (SMU) Cox School of Business to create the first Healthcare Information Security and Technology Risk Management Graduate Certificate Program.

This new program was founded to address the evolving role of chief information security officers (CISOs) and chief technology risk officers (CTROs) within healthcare organizations by providing security and risk professionals the industry-specific skills and competencies lacking today and needed to advance into these senior leadership positions, according to a release. 

The growth of sensitive personal health information coupled with the need for instant access has put the focus on cybersecurity threats. Plus, the federal government is levying significant panelties for those organizations that experience breaches due to poor security procedures and policies.

"Digital risk officers (DROs) will require a mix of business acumen and understanding with sufficient technical knowledge to assess and make recommendations for appropriately addressing digital business risk," wrote Paul Proctor et al., vice president and distinguished analyst at Gartner. "Many traditional security officers will change their titles to digital risk and security officers, but without material change in their scope, mandate and skills they will not fulfill this role as we are defining it."

The Healthcare Information Security and Technology Risk Management Graduate Certificate Program addresses the major lack of relevant curriculum to develop these complex roles as well as a lack of relevant credentials that prospective employers can use to identify candidates. Unlike other certificates and courses today that are primarily basic or technical, the program addresses the gap for healthcare-specific information security technology, leadership and business-level management paths. Individuals passing the exam will receive a certificate in Healthcare Information Security and Technology Risk Management (CHISTRM).

The curriculum will include topics such as IT and security challenges in the healthcare environment, how to create a culture of security and privacy, IT leadership, the IT infrastructure, project management and risk assessment and management.

“Successful healthcare industry CISOs in today’s connected digital economy need not only technical expertise but also business knowledge, to work effectively with CXOs on increasingly critical information security and risk management issues. That is the focus of the CHISTRM program," said Amit Basu, PhD, professor at SMU and program director.