This module turns threat recognition into applied first-line containment. Learners practice the three-step response procedure a Tier 1 healthcare IT technician follows for any suspected cybersecurity incident, that is, isolate the suspicious activity, preserve the evidence, and escalate to the Security Operations Center, without conducting forensic analysis, making severity judgment calls, or attempting autonomous resolution.

This module builds the security controls literacy needed to read a healthcare organization's Microsoft 365 and Azure security posture across four core control categories: identity protection, conditional access, encryption, and logging. This is not administrator-level configuration work; it's the ability to look at a policy and recognize what category it belongs to, what it's meant to enforce, and where it lives in Microsoft's admin surfaces.

This module turns security-control literacy into applied Tier 1 verification. Learners practice the three basic cloud security checks a Tier 1 healthcare IT technician runs on a support account—sign-in settings verification, MFA status confirmation, and audit visibility check—following documented procedures. This is verification work, not configuration work; findings are documented and warm-transferred, not autonomously resolved.

This module builds the audit literacy needed to read a healthcare team's Microsoft 365 file storage configuration and classify what you're looking at against three data security aspects: how files are stored (encryption, retention, sensitivity labels), how they're shared (link types, external controls), and who can access them (permission structure, guest access). This is audit-level reading, not policy design.

This module turns data security audit literacy into applied Tier 1 file-handling. Learners practice the three secure file-handling practices most common in healthcare support, adjusting sharing links, correcting access permissions, and handling data movement requests, following documented procedures without making autonomous compliance judgments.

This module builds the privacy literacy needed to recognize patient-linked data when it shows up in Microsoft 365 configurations, Microsoft diagnostic surfaces, or support documentation, and to apply the core healthcare privacy principles that shape what a Tier 1 technician does with it. This is foundational recognition and principle work; the applied redaction procedure follows.

This module turns privacy recognition into an applied redaction discipline. Learners work through the redaction procedure across the three artifact categories that a Tier 1 healthcare IT technician handles most, such as screenshots, ticket details, and diagnostic logs, replacing patient and provider identifiers with role labels or stripping them entirely following documented procedures. This is the foundational hands-on privacy skill that threads through every ticket a technician will ever work.

This module builds the foundational HIPAA terminology and requirements literacy that a Tier 1 healthcare IT technician needs to recognize when a support ticket involves protected health information and to speak the same language as the Compliance Officer during any escalation. This is recall-tier learning, that is, knowing the terms and requirements, not judgment-tier work; procedural application follows in Module 2.

This module turns HIPAA recall into applied procedural adherence. Learners process PHI-involving support tickets by following documented HIPAA SOPs and pre-approved runbooks exactly, and recognize immediately when a scenario falls outside documented guardrails, escalating without hesitation to the Compliance Officer. This is procedural work with a hard boundary: Tier 1 does not make autonomous HIPAA judgment calls, ever.

Work on a coordinated, complex PHI-involving support ticket end-to-end as a Tier 1 healthcare IT technician. The ticket comes from an emergency medicine physician who reports a suspected phishing incident with potential credential compromise, and who is also worried about shared clinical case files (containing PHI) that she was collaborating on last week. Your job is to run the correct containment, verification, audit, redaction, and escalation steps across all five skill areas, including cybersecurity, cloud security, data security, information privacy, and HIPAA, so the specialized teams (Security Operations Center, Identity and Access Management Operations, HIPAA Privacy and Compliance Office) can act on clean, procedurally-complete information. This is the culminating project: integrated compliance-and-security discipline under time pressure, with no autonomous judgment calls.