Skip to site content
U.S. Department of Health and Human Services
Office of Information Technology (OIT)

Information Systems Security Awareness

Information Systems Security Awareness (ISSA) is mandatory annual security awareness training for all IHS system users and fulfills Federal mandates and regulations. IHS develops the modules in line with National Institute of Standards and Technology (NIST) guidelines on information security awareness and information security trainings.

The ISSA modules fulfill an IHS user's annual requirements for the following:

  • Acknowledgement and acceptance of the IHS Rules of Behavior
  • Privacy training
  • Protecting sensitive information and the Health Insurance Portability and Accountability Act (HIPAA) & the Health Information Technology for Economic and Clinical Health Act (HITECH)
  • Physical and information security
  • Appropriate email use
  • Protecting mobile devices and portable media
  • Social engineering awareness
  • Incident response and learning from past incidents

You can take the training or learn more at the ISSA website.