Iron Fort User Documentation

Training

Security Awareness Training

HIPAA requires all workforce members who access patient data to complete security training. Iron Fort helps you manage this requirement.

Training Requirements

Initial Training: Before anyone gets access to patient data systems

Annual Training: Every year for all workforce members

Role-Specific Training: Additional training based on job responsibilities

Incident-Based Training: When new threats emerge or policies change

Training Program Features

Course Management: - Centralized training library - Automatic assignment based on roles - Progress tracking for all staff - Completion certification - Documentation storage

Required Training Topics:

The platform covers all HIPAA-mandated topics:

1. ePHI Threats and Vulnerabilities
   Understanding risks to patient data

2. Information Access Control
   Who can access what and why

3. Password Management
   Creating and protecting credentials

4. Incident Reporting
   How to report security problems

5. Malicious Software
   Recognizing and avoiding threats

6. Social Engineering
   Phishing, spear phishing, and vishing

7. Log-in Monitoring
   Understanding access tracking

8. Policies and Procedures
   Your organization's rules and requirements

Training Documentation

Iron Fort automatically maintains required records: - Participant names - Training dates - Topics covered - Completion status - Certificates issued - Sign-in records

All records are kept for 6 years as required by HIPAA.

Security Reminders

Beyond formal training, send periodic security reminders when: - Policies are updated - New security controls are added - Controls are significantly changed - New threats appear - HIPAA rules change - Leadership directs

Training Reports

Access real-time reports showing: - Completion rates by department - Overdue training assignments - Compliance percentages - Individual training histories - Certification status

Best Practices

1. Schedule Annual Training: Same time each year for consistency
2. New Hire Protocol: Complete before system access granted
3. Track Completion: Monitor and follow up on overdue assignments
4. Document Everything: Maintain detailed records for audits
5. Keep Content Current: Update for latest threats and policies

---