Skip to content
Claim this template

Free course template · US federal

HIPAA security awareness

A ready-made course, live deck and two surveys for all workforce members. AhaSlides tracks progress, completion and scores for you. 30 minutes, 6 lessons, 12-question final check. Last reviewed 8 October 2026; not legal advice.

Claim the templatePreview the courseDownload SCORM for your LMS

Free. No credit card. Edit everything.

Course outline at a glance

  • Explain why healthcare is a top target and what ePHI is
  • Video
  • Tabs
  • Quiz

  • Describe how a ransomware attack unfolds from a phishing email
  • Timeline
  • Quiz

  • Spot red flags in emails, texts, calls and log-in alerts
  • Flashcards
  • Sorting activity
  • Accordion
  • Multi-select quiz

  • Use strong passwords/passphrases, MFA and safe device habits
  • Checklist
  • Video
  • Accordion
  • Quiz

  • Report a suspected security incident immediately
  • Process
  • Scenario
  • Quiz

Final check: 12 questions, 80% to pass

Try some questions from the course

Question 1 of 3

What is the best summary of the lesson from a hospital ransomware attack?

 

Attacks can disrupt care itself. Everyone's habits protect patients, not just IT.

Lesson 1, The threat today, teaches this. See the outline

Question 2 of 3

Which step could a second sign-in check (MFA) have blocked?

 

MFA stops an attacker who has only the password.

Lesson 2, Anatomy of an attack, teaches this. See the outline

Question 3 of 3

Your phone shows an MFA approval request, but you are not signing in. What do you do?

 

An unexpected prompt means someone has your password. Deny it and report it.

Lesson 4, Protect yourself, teaches this. See the outline

Try next questionClaim the template

Learners earn a certificate

Your organisation

Certificate of completion

This certifies that

Alex Morgan

has completed

HIPAA security awareness

Completed on12 October 2026
Sample certificate with a placeholder learner name.

Style 1 of 6: Purple geometric

Everyone who finishes gets a certificate with their name, the course title and the completion date. Add your own logo, colours and signer.

Three pieces that work together

Learners prepare on their own, you answer questions live, and the surveys tell you what stuck. 7 fields to fill in with your own policy, contacts and locations; each one is highlighted inside the course.

Claim the template
The HIPAA security awareness course as a learner first sees it

Completion is tracked for you

Learners sign in to take the course, so every start, finish and score is recorded in AhaSlides. No spreadsheet to keep.

  • Who has finished

    See who has not started, who is in progress and who has completed the course.

  • Every score

    Each learner's result on the 12-question final check, against the 80% pass mark.

  • What landed

    Survey results show what people took away, and the 30-day check-in shows whether they use it.

Claim the template

6 lessons, about 30 minutes

What learners can do at the end of each lesson. Minutes are an estimate.

  • Lesson 1: The threat today · 6 min

    Explain why healthcare is a top target and what ePHI is.

  • Lesson 2: Anatomy of an attack · 4 min

    Describe how a ransomware attack unfolds from a phishing email.

  • Lesson 3: Spot the red flags · 6 min

    Spot red flags in emails, texts, calls and log-in alerts.

  • Lesson 4: Protect yourself · 5 min

    Use strong passwords/passphrases, MFA and safe device habits.

  • Lesson 5: Respond & report · 5 min

    Report a suspected security incident immediately.

  • Lesson 6: Final assessment · 4 min

    12 questions, 80% to pass. The result is saved to the learner's record.

Based on: 45 CFR §164.308(a)(5) - security awareness & training: (ii)(A) security reminders, (B) protection from malicious softwar…

Claim the template

Often taught together

Courses teams often run alongside this one.

Browse all templates (opens in a new tab)

Common questions

Yes. The course, the live deck and both surveys are free. Claiming the template into your AhaSlides account is free too.

The course itself is self-paced and online, and the live deck lets you add a live session. Whether online delivery meets your local rules depends on the law that applies to you, so check 45 CFR §164.308(a)(5) or ask your own counsel.

At onboarding + periodic security reminders; annual refresher is industry best practice (would become explicit under the proposed rule - see Notes).

All workforce members (including management) of covered entities and business associates - hospital nurses, clinic staff, billing/IT, remote coders.

Record completion in your own LMS or record system, so you can show who finished the course and when. Check the retention period that applies to you in 45 CFR §164.308(a)(5).

Yes, everything. Change the wording, swap scenarios for ones from your workplace, add your logo, or remove parts that don't apply. Keep anything your own law requires you to cover.

Your own details, each highlighted inside the course:
  • Password policy
  • Approved tools
  • Security incident contact
  • Phish report button howto
  • Security officer name
  • LMS or record system
Then edit anything else you like: wording, scenarios, your logo.
Visit the help centre (opens in a new tab)

Ready to run it?

Free. Copy the course, live deck and both surveys into your AhaSlides account in one click.

Claim the template