Cyber Risk E-learning

Complete a short cyber risk e-learning, name your practice's cyber risk lead, and tick off one of the ten national security standards. Workforce Hub will pay your practice $150 for it.

The course is Cyber Risk for Primary Health Organisations (PHOs), available in the Northern region through Ko Awatea LEARN. About 15 minutes of content, so allow up to 45 minutes to do it justice.

How to complete and claim

1. Nominate your cyber risk lead. Your organisation decides who. Where IT is shared across a group, this may sit at corporate level, so check with them before you nominate.

2. Complete the course on Ko Awatea LEARN. The link opens the login page, then search the catalogue for the course name.

3. Download your verified record of learning.

4. Send it to Kiaora@workforce.co.nz with:
   - Your practice's trading and legal name, address, GST number
   - The name and email for payment confirmation, and, if your practice isn't already paid by ProCare,
   - Your bank account with a deposit slip or bank-verified proof, if ProCare doesn’t already pay you
   - This line: "We agree to ProCare issuing a buyer-created tax invoice for this payment and will not issue our own tax invoice."

We handle the rest, and the $150 arrives without you raising an invoice.

About the $150
Workforce Hub pays $150 per practice on completion. Claims are open now. Anyone else in the team is welcome to do the training, and we'd rather they did, but the payment is one per practice.

What your cyber risk lead takes on
The role is ongoing, not a one-off. Your lead keeps cyber risk on the practice risk register and raises it with your board or partners. Beyond the training, expect around two hours a year.

Why this matters
Patient information is the most sensitive thing your practice holds. As the shared digital health record grows, more of it moves between more organisations, and smaller providers hold the same information with fewer people watching it.

Health New Zealand has published a security checklist for smaller health organisations, built on the National Cyber Security Centre's 10 minimum cyber security standards. The aim is for every practice to reach baseline. One of those standards, risk management, needs a nominated person responsible for cyber risk.

This e-learning is how you meet it. It shows your lead how to spot cyber risk, write it down, and raise it properly. That moves cyber risk out of the IT pile and into your practice's risk framework.

The checklist is becoming a self-assessment tool, and Health New Zealand is running face-to-face workshops in each region. We'll share Northern region details when they're set.

Read about the information sharing and security programme on the Health New Zealand website.

Questions? Kiaora@workforce.co.nz