Programs available now.

HIPAA Workforce Training

45 CFR §164.530(b)

Annual training required of every workforce member at any HIPAA-covered entity or business associate. PHI handling, the minimum necessary standard, incident recognition, breach reporting, and sanctions. Designed for real workflows rather than checkbox completion.

For: Front office, clinical staff, contractors — every workforce member of a covered entity or business associate  ·  Duration: ~45 minutes, annual

HIPAA Security Rule for IT Custodians

45 CFR §164.308–§164.312

Technical track for the IT staff responsible for HIPAA Security Rule compliance. Access controls, audit logs, encryption requirements, technical safeguards, and the obligations of a business associate.

For: Technical staff at covered entities and business associates  ·  Duration: ~75 minutes, annual

GLBA Safeguards Rule for Financial Institutions

16 CFR Part 314 (FTC Safeguards Rule)

Workforce training aligned with the 2023 FTC Safeguards Rule. Customer information protection, the Written Information Security Program requirement, vendor risk, and incident response obligations.

For: Mortgage brokers, financial advisors, RIAs, and other GLBA-covered workforces  ·  Duration: ~60 minutes, annual

IRS Pub 4557 / WISP for Accounting Firms

IRS Publication 4557

Required Written Information Security Program training for tax preparers. Tax-season threats, client data handling, secure e-filing, business email compromise prevention, and the WISP framework as published by the IRS.

For: Tax preparers and accounting firm staff  ·  Duration: ~60 minutes, annual

State Privacy Laws Awareness

CCPA/CPRA, NY SHIELD, TX/CT/UT/VA privacy acts

Multi-state operations cannot ignore state-level privacy obligations. Coverage of the major state privacy laws, breach notification timelines, consumer rights handling, and the patchwork of obligations that comes with a national workforce or customer base.

For: Workforces handling consumer data across multiple states  ·  Duration: ~45 minutes, annual

Construction Field Operations Security

Jobsite IT (tablets, hotspots, trailer networking), physical security of project trailers, social engineering at the gate, secure document handling on active sites. Built for the field, not the office.

For: Project managers, superintendents, and field staff  ·  Duration: ~60 minutes

Legal Practice Cybersecurity and Client Confidentiality

ABA Model Rule 1.6 and state bar opinions on technology use

Anchored to ABA Model Rule 1.6 and the state bar opinions interpreting it for modern technology use. Privilege protection, secure client communications, legal-tech vendor management, and breach reporting under state bar disciplinary rules.

For: Attorneys, paralegals, legal administrative staff  ·  Duration: ~60 minutes, annual

Manufacturing OT/ICS Awareness for Office Workforce

The office side of a manufacturing operation rarely understands what the plant runs on. Coverage of the separation of IT and OT, USB hygiene at manufacturing sites, the ransomware impact on production lines, and why an office mistake can take down a shift.

For: Office workforces at manufacturers with industrial control systems  ·  Duration: ~45 minutes

Healthcare Front Desk PHI Handling

Companion to HIPAA Workforce — sharper focus on the front desk

Specifically for the patient-facing front desk: phone calls about a patient, walk-in records requests, family member inquiries, fax handling, scheduling that touches PHI. The most-exposed workforce role in a clinical environment, with training to match.

For: Patient-facing reception, scheduling, and intake staff  ·  Duration: ~45 minutes, annual

Cybersecurity for Board Members and Executive Leadership

Cyber risk in business terms — the language of liability, regulatory exposure, customer trust, operational continuity. The common questions to ask a CIO or CISO. The decisions that fall to leadership during a breach.

For: Boards, C-suite executives, senior leadership  ·  Duration: ~90 minutes, project-based

Information Security Program Oversight for Operations Leaders

How to build and oversee an information security program without being a security engineer. Written Information Security Program development, policy lifecycle, audit preparation, vendor management. The operational program a regulator or auditor expects to see.

For: COO, VP of Operations, Director-level oversight  ·  Duration: ~3 hours, project-based

Password and Account Security Essentials

Password managers, MFA app versus SMS, account recovery without giving away the keys, and what to do when a login attempt looks suspicious.

For: All workforce members  ·  Duration: ~30 minutes

Data Classification and Handling

The categories that govern your organization’s information — confidential, internal, public — and the practical rules for each. Share permissions, encryption when sending externally, cloud-sync hygiene.

For: All workforce members  ·  Duration: ~30 minutes

Remote and Hybrid Work Security

Home network hygiene, VPN use, family and visitor access, secure print at home, and the specific risks that come with conducting work outside the office.

For: Any remote or hybrid workforce member  ·  Duration: ~30 minutes