Cybersecurity for Healthcare Staff: Phishing, Ransomware and Devices
The attacks that actually reach healthcare staff, and the habits that stop them.

Program overview
Healthcare is among the most attacked sectors, and almost every successful intrusion starts with a person rather than a firewall. This course covers what staff actually encounter: phishing and spear-phishing aimed at clinicians, credential theft, ransomware and what happens to a hospital during an outage, removable media, connected medical devices, and the specific risk of shared workstations and shoulder surfing. It ends with downtime working — what clinical staff do when systems are gone — which is the part most training omits and the part that matters most.
Why this program
Attacks staff actually encounter, not abstract threat models
Includes connected medical device risk
Covers shared workstations and clinical realities
Ends with downtime working
usually omitted
Who it is for
Program objectives
- Recognise phishing and social engineering targeted at healthcare staff
- Apply safe credential and authentication practice
- Describe how ransomware affects clinical operations
- Identify the risks introduced by connected medical devices
- Apply safe practice at shared and mobile workstations
- Operate safely during an unplanned systems outage
Learning outcomes
- Identify indicators of phishing in a described message
- Apply appropriate authentication practice to a given scenario
- Describe the clinical consequences of a ransomware outage
- Recognise device and removable-media risks in a described unit
- Apply safe practice to a shared workstation situation
- Plan clinical continuity actions for a systems downtime event
Curriculum
Module 1: Why Healthcare Is Targeted
1 lessonsWhy Healthcare Is TargetedPreview
Value of health data, urgency, and the attacker's calculation.
Module 2: Phishing and Social Engineering
1 lessons- Phishing and Social Engineering
Module 3: Credentials and Access
1 lessons- Credentials and Access
Module 4: Ransomware and Devices
1 lessons- Ransomware and Devices
Module 5: Working Through Downtime
1 lessons- Working Through Downtime
Duration and structure
5 lessons across 5 modules. Duration is expressed in study hours.
What you receive
This certificate confirms completion of Cybersecurity for Healthcare Staff: Phishing, Ransomware and Devices. Duration is expressed in study hours.
Delivery format
- Self-paced — start any time.
- Study on any device.
- Lifetime access to the version you enrolled in.
