Skip to content
AIHCM - American Institute of Healthcare Management
All programs
CYBRFoundation·Digital Health & AI

Cybersecurity for Healthcare Staff: Phishing, Ransomware and Devices

The attacks that actually reach healthcare staff, and the habits that stop them.

Cybersecurity for Healthcare Staff: Phishing, Ransomware and Devices

Program overview

Healthcare is among the most attacked sectors, and almost every successful intrusion starts with a person rather than a firewall. This course covers what staff actually encounter: phishing and spear-phishing aimed at clinicians, credential theft, ransomware and what happens to a hospital during an outage, removable media, connected medical devices, and the specific risk of shared workstations and shoulder surfing. It ends with downtime working — what clinical staff do when systems are gone — which is the part most training omits and the part that matters most.

Why this program

Attacks staff actually encounter, not abstract threat models

Includes connected medical device risk

Covers shared workstations and clinical realities

Ends with downtime working

usually omitted

Who it is for

NursePhysicianPharmacistMedical SecretaryAllied HealthLab TechnicianHealthcare Manager

Program objectives

  • Recognise phishing and social engineering targeted at healthcare staff
  • Apply safe credential and authentication practice
  • Describe how ransomware affects clinical operations
  • Identify the risks introduced by connected medical devices
  • Apply safe practice at shared and mobile workstations
  • Operate safely during an unplanned systems outage

Learning outcomes

  • Identify indicators of phishing in a described message
  • Apply appropriate authentication practice to a given scenario
  • Describe the clinical consequences of a ransomware outage
  • Recognise device and removable-media risks in a described unit
  • Apply safe practice to a shared workstation situation
  • Plan clinical continuity actions for a systems downtime event

Curriculum

Module 1: Why Healthcare Is Targeted

1 lessons
  • Why Healthcare Is TargetedPreview

    Value of health data, urgency, and the attacker's calculation.

Module 2: Phishing and Social Engineering

1 lessons
  • Phishing and Social Engineering

Module 3: Credentials and Access

1 lessons
  • Credentials and Access

Module 4: Ransomware and Devices

1 lessons
  • Ransomware and Devices

Module 5: Working Through Downtime

1 lessons
  • Working Through Downtime

Duration and structure

2.5h
Total study hours
2h
Content
0.5h
Assessment

5 lessons across 5 modules. Duration is expressed in study hours.

What you receive

Verifiable AIHCM digital certificate

This certificate confirms completion of Cybersecurity for Healthcare Staff: Phishing, Ransomware and Devices. Duration is expressed in study hours.

Delivery format

  • Self-paced — start any time.
  • Study on any device.
  • Lifetime access to the version you enrolled in.

Program handbook

Open the program handbook (print / save as PDF)