Practice on 2026 LATEST CPHRM Exam Updated 123 Questions
Download Latest CPHRM Dumps with Authentic Real Exam QA's
NEW QUESTION # 23
A physician dies upon arrival to the emergency department from her home following a gunshot wound to the chest. The police report a history of domestic violence. The organization is required to notify the
- A. Office of the Medical Examiner.
- B. Department of Health and Family Services.
- C. state Board of Medicine.
- D. organization's public relations department.
Answer: A
Explanation:
According to Health Care Risk Management standards supported by ASHRM and the American Hospital Association Certification Center, deaths resulting from violent, traumatic, or suspicious circumstances are legally reportable to the appropriate medico-legal authority, typically the Office of the Medical Examiner or Coroner. A gunshot wound constitutes a violent and potentially criminal cause of death, triggering statutory reporting requirements.
When a patient is pronounced dead on arrival due to trauma, particularly with a history suggestive of domestic violence, the death falls within the jurisdiction of the medical examiner. The medical examiner has authority to determine cause and manner of death, order autopsy if indicated, and coordinate with law enforcement to preserve forensic evidence. Hospitals are required by state law to notify this office promptly.
The state Board of Medicine oversees professional licensure and discipline, not death investigation. The Department of Health and Family Services may have reporting roles for public health matters, but traumatic deaths are typically handled by the medical examiner. The public relations department may manage communications but is not a regulatory notification requirement.
Legal and regulatory objectives emphasize compliance with mandatory reporting statutes and preservation of evidence. Therefore, the appropriate entity to notify is the Office of the Medical Examiner.
NEW QUESTION # 24
Generally, an incident is defined as:
- A. Only billing disputes
- B. Only events that cause death
- C. Any happening not consistent with routine care/operations (including near-misses)
- D. Only patient complaints
Answer: C
Explanation:
Broad incident definitions (including near-misses and unsafe conditions) support proactive risk management.
If reporting is limited only to severe harm, the organization loses learning opportunities from early warning signals. Risk management objectives favor capturing deviations from expected process-falls without injury, specimen labeling near-misses, medication dispensing discrepancies-because these events reveal system vulnerabilities that can later cause major harm. Strong incident management includes classification, timely review, escalation thresholds, root cause analysis for significant events, and feedback to frontline staff. This approach aligns with systems-based safety: identify hazards, implement controls, and monitor effectiveness.
NEW QUESTION # 25
What group reports information (historically HIPDB content; now within NPDB) related to fraud/abuse oversight?
- A. Any patient advocacy blog
- B. School boards
- C. Restaurant inspectors
- D. Peer review organizations (for certain state/federal reporting categories)
Answer: D
Explanation:
The Healthcare Integrity and Protection Data Bank (HIPDB) was created to combat healthcare fraud and abuse; it isno longer operational as a separate bank, and its content was merged into the NPDB. Reporting and querying are governed by HRSA rules defining authorized entities, including certain peer review and oversight organizations in specific reporting frameworks. Risk management objectives include ensuring organizations understand which actions must be reported, ensure due process, and comply with data handling rules. Proper reporting supports system integrity by preventing practitioners or entities with serious adverse actions from moving undetected across organizations. For hospitals and health plans, this strengthens credentialing and contracting decisions, reducing organizational exposure to negligent credentialing and improper network participation risks.
NEW QUESTION # 26
Which of the following are essential elements of a standard loss run?
- A. date, location, and root cause analysis
- B. date, frequency, and severity
- C. common law, case law, and analysis
- D. date, expense, and indemnity
Answer: D
Explanation:
According to Health Care Risk Management standards supported by ASHRM and the American Hospital Association Certification Center, a standard loss run is a report generated by an insurer or third-party administrator summarizing claims activity for a specific period. Loss runs are critical tools in risk financing, underwriting review, actuarial analysis, and budgeting for self-insured retentions.
Essential elements of a standard loss run include the date of loss, indemnity payments, and expense payments.
Indemnity reflects amounts paid or reserved for compensation to claimants, while expense represents allocated loss adjustment expenses such as defense costs, expert witness fees, and investigation costs. These data elements allow the organization to evaluate financial exposure, trends in claim development, and adequacy of reserves.
While frequency and severity are important analytical concepts derived from loss data, they are not typically listed as standalone fields within the basic loss run report. Legal analysis, case law references, and root cause analyses are not standard components of loss run documentation.
Risk financing objectives emphasize accurate tracking of financial exposure and informed forecasting.
Therefore, date, expense, and indemnity are essential elements of a standard loss run report.
NEW QUESTION # 27
Which of the following is the MOST likely root cause of medication errors in healthcare entities?
- A. manual medication delivery systems
- B. illegible physician handwriting
- C. look-alike, sound-alike drugs
- D. system or process failure
Answer: D
Explanation:
According to Health Care Risk Management standards supported by ASHRM and patient safety principles endorsed by The Joint Commission, the most likely root cause of medication errors is system or process failure. Modern patient safety frameworks emphasize that errors rarely result from isolated individual mistakes. Instead, they typically arise from weaknesses in processes, workflow design, communication systems, technology integration, or inadequate safeguards.
Illegible handwriting, manual systems, and look-alike or sound-alike drugs are recognized contributing factors. However, these elements represent components within a broader system. For example, illegible handwriting becomes problematic when standardized order entry systems are lacking. Look-alike medications pose risks when storage, labeling, or verification processes are insufficient. Manual medication delivery systems increase risk when redundancy and double-check mechanisms are absent.
Root cause analysis methodologies consistently demonstrate that unsafe system design, poor communication processes, lack of standardized procedures, and inadequate training contribute to medication errors. A systems-based approach aligns with just culture principles and focuses on improving processes rather than assigning individual blame.
Clinical and patient safety objectives emphasize system redesign, standardization, and continuous quality improvement. Therefore, system or process failure is the most likely root cause of medication errors.
NEW QUESTION # 28
The source of many medication errors is:
- A. Verbal/telephone orders (when avoidable and not properly verified)
- B. Elevator delays
- C. Radiology scheduling
- D. Patient wristbands
Answer: A
Explanation:
Verbal/telephone orders are widely recognized aserror-pronebecause they can be misheard, misunderstood, or transcribed incorrectly-especially with sound-alike drug names, confusing numerals (15 vs 50), background noise, accents, and interruptions. ISMP and patient safety advisories recommend minimizing verbal orders whenever possible and using safeguards such as read-back/confirm-back, spelling drug names, stating digits individually, and documenting promptly. Risk management objectives include reducing reliance on memory and imperfect communication by prioritizing written or electronic orders (CPOE), standardizing when verbal orders are permitted (true emergencies), and auditing compliance to prevent unsafe normalization. Because medication errors can cause severe harm, controlling verbal order risk is a high-yield safety intervention and improves legal defensibility by aligning practice with recognized safety recommendations.
NEW QUESTION # 29
A hospital's blood transfusions are99.7% error-free. Which function best estimates how many transfusions are likely before an error occurs?
- A. Geometric distribution (time until first failure)
- B. Chi-square test
- C. Linear regression
- D. Multinomial distribution
Answer: A
Explanation:
If each transfusion has an independent probability of error, the number of transfusions until thefirsterror is modeled by thegeometric distribution, which describes "trials until first failure." The expected number of transfusions before an error is approximately, so. Risk management objectives use this type of reliability thinking to convert percentages into operational intuition: "Even a 0.3% error rate becomes a predictable event in high-volume processes." That insight supports prioritizing controls (barcoding, two-person verification, bedside ID checks, standardized labeling, transfusion time-outs) because rare-event rates still produce real harm over time. Interpreting reliability this way also helps boards and leaders understand that
"99.x%" can be unsafe in critical processes and that system redesign is often necessary to reach high reliability.
NEW QUESTION # 30
A 22-year-old man has been treated at a hospital for a psychiatric condition. His mother requests that a copy of the patient's medical record be released to her. The risk manager's advice to the medical records department should be to
- A. check with the psychiatrist for a recommendation to release the medical record.
- B. verify that a specific release of information form has been signed by the patient and then release the medical record.
- C. request evidence that the mother is the guardian of the patient and then release the medical record.
- D. contact the hospital's legal counsel to authorize the release of the medical record.
Answer: B
NEW QUESTION # 31
A risk manager is investigating a claim that has been submitted to the malpractice carrier. There is some question as to whether or not there is coverage under the current malpractice policy. What might the risk manager expect to receive from the malpractice carrier?
- A. contingent acknowledgement of coverage
- B. reservation of rights letter
- C. notice of right to rescind
- D. notice of right to deny coverage
Answer: B
Explanation:
According to Health Care Risk Management standards supported by ASHRM and the American Hospital Association Certification Center, when an insurer identifies potential issues regarding coverage under a liability policy, it commonly issues a reservation of rights letter. This letter informs the insured that the carrier will proceed with investigation or defense of the claim while reserving its right to later deny coverage if policy exclusions, conditions, or other limitations apply.
A reservation of rights protects the insurer from waiving its ability to contest coverage while fulfilling its duty to defend, depending on policy language. It also alerts the insured to potential conflicts of interest and may permit the insured to seek independent counsel in certain jurisdictions.
A contingent acknowledgment of coverage is not a standard legal instrument. A notice of right to deny coverage would typically follow a full coverage determination rather than precede it. A notice of right to rescind involves voiding a policy, usually due to material misrepresentation during underwriting, which is distinct from a routine coverage question.
Claims and litigation objectives emphasize careful review of policy terms and timely communication with insurers. Therefore, when coverage is uncertain, the risk manager should expect to receive a reservation of rights letter from the malpractice carrier.
NEW QUESTION # 32
The risk manager is called by an administrator and told that a member of the pharmacy staff was arrested last night for illegal distribution of controlled substances. Which of the following recommendations should the risk manager make to administration?
* Verify the pre-employment background check.
* Inventory controlled drug stock.
* Interview other pharmacy staff.
* Notify the National Practitioner Data Bank.
- A. 1, 3, and 4 only
- B. 1, 2, and 4 only
- C. 1, 2, and 3 only
- D. 2, 3, and 4 only
Answer: C
Explanation:
According to Health Care Risk Management standards supported by ASHRM and the American Hospital Association Certification Center, when a pharmacy staff member is arrested for illegal distribution of controlled substances, the organization must focus on immediate operational and patient safety concerns.
Verifying the pre-employment background check ensures compliance with hiring policies and identifies whether due diligence was properly conducted.
An immediate inventory of controlled drug stock is essential to detect diversion, identify discrepancies, and comply with DEA requirements for controlled substance accountability. Prompt reconciliation of medication records protects patient safety and mitigates regulatory exposure.
Interviewing other pharmacy staff supports investigation of potential diversion patterns, internal control weaknesses, and workflow vulnerabilities. This step aligns with system-based risk management and prevention of further loss.
Notification to the National Practitioner Data Bank is not automatically required based solely on an arrest.
NPDB reporting typically involves certain professional review actions, licensure restrictions, or clinical privilege actions, not merely criminal charges unless formal disciplinary action occurs.
Health Care Operations objectives emphasize safeguarding controlled substances, regulatory compliance, and internal investigation. Therefore, verifying background checks, inventorying stock, and interviewing staff are appropriate recommendations.
NEW QUESTION # 33
A 22-year-old man has been treated at a hospital for a psychiatric condition. His mother requests that a copy of the patient's medical record be released to her. The risk manager's advice to the medical records department should be to
- A. check with the psychiatrist for a recommendation to release the medical record.
- B. verify that a specific release of information form has been signed by the patient and then release the medical record.
- C. request evidence that the mother is the guardian of the patient and then release the medical record.
- D. contact the hospital's legal counsel to authorize the release of the medical record.
Answer: B
Explanation:
According to Health Care Risk Management standards supported by ASHRM and the American Hospital Association Certification Center, a 22-year-old patient is a legal adult and retains full rights to privacy and control over disclosure of protected health information under HIPAA and applicable state confidentiality laws. Psychiatric records are subject to heightened confidentiality protections in many jurisdictions.
Absent a court order or legal guardianship determination, a parent does not have automatic access to an adult child's medical records. Therefore, before releasing any information, the organization must verify that the patient has executed a valid, specific authorization for release of information that complies with HIPAA requirements. The authorization must clearly identify the recipient, the information to be disclosed, and be properly signed and dated.
Consulting legal counsel or a treating psychiatrist does not substitute for proper authorization. Similarly, requesting guardianship documentation would only be appropriate if the mother asserts legal guardianship status; however, in the absence of such documentation, release cannot occur.
Legal and regulatory objectives emphasize strict adherence to privacy laws, protection of psychiatric records, and proper authorization procedures. Therefore, verification of a signed release of information from the patient is required before disclosure.
NEW QUESTION # 34
A 78-year-old patient in the ICU is unable to speak or swallow. The physician states that she is terminally ill and believes she lacks decision-making capacity. As such, he has deferred to her properly executed advance directive that clearly outlines her wishes for no life-prolonging treatment. The patient's three sons know of the directive, but insist that a PEG tube be placed to assist with feeding. The physician is opposed to placing the tube. The nurse calls the risk manager for advice. Which of the following should the risk manager advise?
- A. More facts are needed; decision making capacity must be determined before moving forward.
- B. The family will outlive the patient, and they have the right to sue; support the family.
- C. More facts are needed; request an ethics consultation.
- D. The patient has the right to autonomy, and the advance directive is proper; support the physician.
Answer: D
Explanation:
Under Health Care Risk Management principles recognized by ASHRM and the American Hospital Association Certification Center, a properly executed advance directive carries legal authority when a patient lacks decision-making capacity. The physician has assessed that the patient is terminally ill and lacks capacity, triggering activation of the advance directive. If the directive clearly states refusal of life-prolonging treatment, including artificial nutrition and hydration, those wishes must be honored in accordance with state law and the Patient Self-Determination Act framework.
Patient autonomy is a foundational ethical and legal principle in health care. Once capacity is lost, previously expressed wishes through a valid advance directive govern care decisions. Family members do not have authority to override a valid directive unless legal defects or ambiguity exist. Their disagreement does not negate the patient's documented preferences.
Although ethics consultation can be helpful in managing conflict, the directive here is described as properly executed and clear. Additional determination of capacity is unnecessary because the physician has already made that assessment.
Risk management objectives emphasize compliance with advance directive statutes, respect for patient autonomy, and reduction of liability through adherence to documented patient wishes. Therefore, the appropriate advice is to support the physician in honoring the advance directive.
NEW QUESTION # 35
An organization's CEO has requested that the risk manager develop policies and procedures for the risk management department. The risk manager should consider developing policies for all of the following EXCEPT
- A. responses to freedom of information requests.
- B. coordination of responses to subpoenas.
- C. departmental accountability for occurrence reporting.
- D. risk management reporting process to the governing body.
Answer: A
Explanation:
According to Health Care Risk Management standards outlined by ASHRM and the American Hospital Association Certification Center, the risk management department should establish formal policies addressing core operational responsibilities. Coordination of responses to subpoenas is a critical function involving legal compliance, protection of privileged information, and collaboration with counsel. Departmental accountability for occurrence reporting is essential to ensure proper event identification, investigation, and trending.
Additionally, defining the risk management reporting process to the governing body supports board oversight and enterprise risk management responsibilities.
Responses to freedom of information requests, however, are generally governed by legal, compliance, or public information offices, particularly in public institutions subject to open records laws. While risk management may provide input if records involve claims or adverse events, primary responsibility for handling such requests typically resides outside the risk management department.
Health Care Operations objectives emphasize clearly defined departmental scope, structured reporting relationships, and alignment with governance responsibilities. Therefore, while subpoena coordination, occurrence reporting, and board reporting are appropriate policy areas for risk management, responses to freedom of information requests fall outside its primary policy development scope.
NEW QUESTION # 36
Which of the following should be included in a risk management plan?
* purpose of the program
* budget for the department
* process of risk management activities
* structure of the program
- A. 1, 3, and 4 only
- B. 1, 2, and 4 only
- C. 2, 3, and 4 only
- D. 1, 2, and 3 only
Answer: A
Explanation:
According to Health Care Risk Management standards defined by ASHRM and the American Hospital Association Certification Center, a formal risk management plan is a governance document that outlines the framework, scope, and operational processes of the program. It is intended to define how risk management activities support organizational objectives and regulatory compliance.
The plan should clearly state the purpose of the program, establishing its mission, goals, and alignment with patient safety and enterprise risk management strategies. It must also describe the structure of the program, including reporting relationships, committee oversight, leadership roles, and accountability mechanisms.
Additionally, the process of risk management activities should be detailed, including event reporting, investigation procedures, claims management, education initiatives, and performance evaluation methods.
While financial planning is important for departmental operations, the budget for the department is typically addressed in administrative or financial planning documents rather than the risk management plan itself. The plan focuses on governance, structure, and operational processes rather than line-item budgeting.
Therefore, inclusion of the program's purpose, structural framework, and operational processes appropriately defines a comprehensive risk management plan.
NEW QUESTION # 37
A claims manager needs to open a loss reserve and perform an investigation of an event. They review the patient demographics, the nature and extent of the injury, and other liability factors. Which of the following would be helpful to the claims manager in determining a loss reserve?
- A. comparable verdicts in the county
- B. the patient's total medical bills
- C. the surgery center's claims history
- D. amount of insurance allowed per occurrence
Answer: A
Explanation:
Within Health Care Risk Management practice as outlined by ASHRM and the American Hospital Association Certification Center, establishing an accurate loss reserve requires an estimation of the probable financial exposure associated with a claim. A loss reserve represents the anticipated cost to resolve a claim, including indemnity payments and defense expenses.
Comparable verdicts in the county are particularly useful because they reflect jurisdiction-specific jury tendencies, local legal climate, and historical award patterns. Venue significantly influences claim valuation, as jury awards can vary substantially between counties and states. Reviewing similar case outcomes allows the claims manager to benchmark potential settlement or verdict ranges based on injury severity and liability factors.
The surgery center's claims history may inform overall risk trends but does not directly determine the value of a specific claim. The patient's total medical bills are relevant but represent only one component of damages and do not account for non-economic damages such as pain and suffering. The insurance limit per occurrence defines maximum exposure but does not guide the realistic reserve estimate unless damages approach policy limits.
Therefore, analysis of comparable local verdicts is most helpful in establishing an appropriate and defensible loss reserve.
NEW QUESTION # 38
Which sentinel event type has been reported among the most frequent categories in Joint Commission-related analyses (noting year-to-year variation)?
- A. Falls (recent years show high frequency)
- B. Parking disputes
- C. Cafeteria food complaints
- D. Gift shop inventory loss
Answer: A
Explanation:
Sentinel event "most common" can change by reporting year and classification approach. Recent summaries of 2023 sentinel event reporting indicatefallswere the most frequently reported category in that dataset, with wrong surgery and unintended retention also high-ranking. Risk management objectives treat this as a dynamic signal: the organization should use current event data, internal trends, and unit-specific hazards to prioritize controls. Falls prevention requires layered interventions-risk stratification, mobility support, medication review, environmental controls, and post-fall huddles to learn and redesign. Leaders should avoid over-fixating on one historical "most common" event type and instead use current surveillance to target the biggest preventable harm burdens.
NEW QUESTION # 39
All of the following are examples of an adverse drug event EXCEPT
- A. a drug reaction experienced by the patient.
- B. an error in ordering or dispensing a drug.
- C. administration of a drug by the wrong route.
- D. controlled substance inventory discrepancy.
Answer: D
Explanation:
Under Health Care Risk Management principles defined by ASHRM and the American Hospital Association Certification Center, an adverse drug event refers to patient harm or potential harm related to the use of medication. This includes medication errors and adverse drug reactions that directly affect patient safety.
Administration of a drug by the wrong route is a medication error that may result in patient harm and therefore qualifies as an adverse drug event. A drug reaction experienced by the patient is, by definition, an adverse drug reaction and falls within the broader category of adverse drug events. Similarly, an error in ordering or dispensing a drug represents a medication error that may cause or has the potential to cause harm to a patient.
In contrast, a controlled substance inventory discrepancy relates to regulatory compliance, diversion risk, or financial accountability, not direct patient injury. While such discrepancies are serious and fall under legal, regulatory, and operational risk domains, they do not constitute an adverse drug event unless patient harm occurs.
Clinical and patient safety objectives emphasize distinguishing between medication-related patient harm and regulatory or operational issues. Therefore, the controlled substance inventory discrepancy is not an adverse drug event.
NEW QUESTION # 40
Aside from clinical risk exposures, which of the following should be evaluated as part of a risk assessment concerning telemedicine?
- A. financial
- B. public awareness
- C. behavioral
- D. operational
Answer: D
Explanation:
According to Health Care Risk Management standards outlined by ASHRM and the American Hospital Association Certification Center, telemedicine risk assessment must extend beyond clinical quality of care to include operational risks. Operational considerations encompass technology infrastructure reliability, cybersecurity protections, credentialing and privileging of providers across state lines, licensing compliance, documentation workflows, data storage, and continuity planning for system outages.
Telemedicine platforms rely heavily on secure networks, interoperability with electronic health records, and protection of protected health information. Operational failures such as system downtime, inadequate bandwidth, or insufficient training can disrupt care delivery and increase liability exposure. Additionally, compliance with regulatory requirements regarding interstate practice and reimbursement policies falls within operational risk management.
Behavioral and public awareness considerations may influence patient engagement but are not primary risk assessment categories. Financial risks are relevant in enterprise risk management; however, the question specifically contrasts clinical risk exposures with other telemedicine-related risks, making operational risk the most directly applicable.
Health Care Operations objectives emphasize comprehensive evaluation of technological, regulatory, and workflow factors in emerging service models. Therefore, operational risks should be evaluated alongside clinical exposures when assessing telemedicine programs.
NEW QUESTION # 41
Which of the following concerns meets the CMS Hospital Conditions of Participation 42 CFR §482.12 classification as a grievance?
- A. a verbal complaint that cannot be solved by current staff, and the resolution of which is postponed for later
- B. a patient calling regarding a billing issue requesting for adjustment to the charges
- C. information obtained with a patient satisfaction survey
- D. post-hospital verbal communication regarding a care issue that could have been handled by the staff during visit but was not reported
Answer: A
Explanation:
According to Health Care Risk Management standards supported by ASHRM and the American Hospital Association Certification Center, the CMS Hospital Conditions of Participation define a grievance as a formal or informal written or verbal complaint made by a patient or representative regarding care, abuse, neglect, compliance with regulations, or patient rights that is not resolved at the time of the complaint by staff present.
A verbal complaint that cannot be resolved immediately by current staff and whose resolution is postponed qualifies as a grievance under 42 CFR §482.12. Such grievances require formal investigation, documentation, and written response within established timeframes.
Billing issues generally fall outside the grievance definition unless they involve quality of care or patient rights concerns. Information from patient satisfaction surveys is not automatically classified as a grievance unless the patient specifically requests investigation or follow-up. Post-discharge verbal concerns may constitute grievances depending on context, but the key CMS criterion is whether the complaint could not be resolved at the time it was expressed.
Legal and regulatory objectives emphasize proper classification, timely response, documentation, and board oversight of grievance processes. Therefore, a verbal complaint that cannot be resolved immediately and is deferred meets CMS grievance criteria.
NEW QUESTION # 42
An unstable patient in the emergency department needs transfer to another hospital. Which of the following statements is true regarding the refusal of an on-call physician to treat this patient?
- A. The on-call physician is relieved of duty only if unavailable because of caring for another patient, or because of other circumstances outside the physician's control.
- B. The on-call physician may refuse to participate in the care of any patient, for any reason.
- C. The on-call physician is never relieved of duty to accept a patient needing specialized services.
- D. The on-call physician may refuse to participate in the care of a patient, as long as that refusal is not based on insurance status or other financial concerns.
Answer: A
Explanation:
Under Health Care Risk Management standards supported by ASHRM and the American Hospital Association Certification Center, obligations under the Emergency Medical Treatment and Labor Act EMTALA govern on-call physician responsibilities. When a hospital maintains an on-call roster to provide specialty services for emergency department patients, physicians listed on call are required to respond and participate in the evaluation and stabilization of patients with emergency medical conditions.
An on-call physician may only be relieved of duty if legitimately unavailable due to circumstances beyond their control, such as actively caring for another patient or being otherwise unable to respond in accordance with hospital policy. Refusal to treat for convenience or non-clinical reasons may constitute an EMTALA violation and expose both the hospital and physician to regulatory penalties.
A blanket right to refuse care is inconsistent with EMTALA requirements. While financial discrimination is prohibited, refusal for other non-justifiable reasons may still violate federal law. Conversely, stating that a physician is never relieved of duty is inaccurate, as legitimate unavailability may excuse performance under specific circumstances.
Legal and regulatory objectives emphasize compliance with EMTALA, proper on-call coverage policies, and documentation of availability. Therefore, the correct statement is that relief occurs only when the physician is unavailable due to circumstances outside their control.
NEW QUESTION # 43
Which of the following risk management documents in a policy and procedure manual should be approved by an organization's board of directors?
- A. risk management department's annual budget
- B. philosophy regarding medical error management
- C. departmental personnel job descriptions
- D. risk analysis
Answer: B
Explanation:
According to Health Care Risk Management standards outlined by ASHRM and the American Hospital Association Certification Center, the governing board has ultimate responsibility for organizational oversight, quality of care, and patient safety. As part of its fiduciary and governance duties, the board approves high- level policies that establish the organization's philosophy, strategic direction, and commitment to safety and risk management.
A philosophy regarding medical error management reflects the organization's approach to disclosure, reporting, just culture principles, accountability, and system improvement. Because this philosophy sets the tone for organizational culture and impacts patient safety, legal exposure, and regulatory compliance, it requires board-level approval to ensure alignment with governance expectations and accreditation standards.
In contrast, the risk management department's annual budget is typically approved through financial governance processes rather than as a policy document. Risk analyses are operational tools conducted by management and do not require board approval. Departmental personnel job descriptions are administrative documents managed at the executive or human resources level.
Health Care Operations objectives emphasize board engagement in safety culture and oversight of enterprise risk management. Therefore, the philosophy regarding medical error management should be approved by the organization's board of directors.
NEW QUESTION # 44
An organization has recently changed insurance. The risk manager receives a claim from a former patient on July 3, 2004, claiming injury and alleging negligence by the surgery staff on September 5, 2003. Which of the following would apply to this claim?
* a claims-made policy for the period 1/1/03 to 1/1/04 with a retro date of 1/1/02
* an occurrence policy for the period 1/1/03 to 1/1/04
* a claims-made policy for the period 1/1/03 to 1/1/04 with a 1-year tail coverage
* an occurrence policy for the period 1/1/04 to 1/1/05
- A. 3 and 4 only
- B. 1 and 2 only
- C. 1 and 4 only
- D. 2 and 3 only
Answer: D
Explanation:
According to Health Care Risk Management standards supported by ASHRM and the American Hospital Association Certification Center, coverage determination depends on both the policy trigger and relevant dates. The alleged negligence occurred on September 5, 2003. Under an occurrence policy in effect from 1/1
/03 to 1/1/04, coverage applies because the event occurred during that policy period, regardless of when the claim was filed. Therefore, option 2 applies.
For a claims-made policy covering 1/1/03 to 1/1/04, coverage would require that the claim be made and reported during the policy period unless tail coverage is in place. Because the claim was received on July 3,
2004, after expiration of the 1/1/03 to 1/1/04 claims-made policy, coverage would apply only if a 1-year tail was purchased. Thus, option 3 applies.
Option 1 would not apply because the claim was made after the claims-made policy period ended, and no tail is specified. Option 4 would not apply because occurrence coverage from 1/1/04 to 1/1/05 would not cover an event that occurred in 2003.
Risk financing objectives emphasize understanding policy triggers, reporting requirements, and tail coverage.
Therefore, the applicable coverage scenarios are the occurrence policy for 2003 and the claims-made policy with tail coverage.
NEW QUESTION # 45
A sentinel event is a patient safety event that reaches the patient and results in which of the following?
- A. death, temporary harm, or moderate harm
- B. severe temporary harm, moderate harm, or increased length of stay
- C. death, permanent harm, or severe temporary harm
- D. permanent harm, severe temporary harm, or temporary harm
Answer: C
Explanation:
According to Health Care Risk Management standards supported by ASHRM and The Joint Commission's sentinel event policy, a sentinel event is defined as a patient safety event that results in death, permanent harm, or severe temporary harm. Severe temporary harm is harm that is critical, life-threatening, or requires major intervention to sustain life, even if the patient ultimately recovers.
Sentinel events signal the need for immediate investigation and response because of the seriousness of the outcome. The Joint Commission requires completion of a root cause analysis and development of an action plan within specified timeframes following awareness of such an event. The focus is on identifying system vulnerabilities and preventing recurrence.
Temporary or moderate harm alone does not meet the sentinel event threshold unless it rises to the level of severe temporary harm. Increased length of stay, without death or significant harm, does not qualify as a sentinel event under the formal definition.
Clinical and patient safety objectives emphasize accurate event classification, structured investigation, and corrective action. Therefore, a sentinel event is one that results in death, permanent harm, or severe temporary harm.
NEW QUESTION # 46
The reporting requirements of the Safe Medical Devices Act SMDA apply to which of the following?
* nursing homes
* physician offices
* ambulatory surgery
* hospitals
- A. 1, 3, and 4 only
- B. 1, 2, and 4 only
- C. 2, 3, and 4 only
- D. 1, 2, and 3 only
Answer: A
Explanation:
According to Health Care Risk Management standards supported by ASHRM and the American Hospital Association Certification Center, the Safe Medical Devices Act SMDA establishes mandatory reporting requirements for certain healthcare facilities when a medical device has or may have caused or contributed to a patient death or serious injury. These requirements apply to device user facilities, which include hospitals, nursing homes, and ambulatory surgical facilities.
Hospitals are explicitly required to report device-related deaths to both the FDA and the manufacturer, and serious injuries to the manufacturer or the FDA if the manufacturer is unknown. Nursing homes and ambulatory surgery centers are also considered device user facilities under the Act and must comply with similar reporting obligations.
Physician offices, however, are generally not classified as device user facilities under SMDA reporting rules and therefore are not subject to the same mandatory reporting requirements, although voluntary reporting is encouraged.
Legal and regulatory objectives emphasize timely compliance with FDA reporting mandates, maintenance of documentation, and coordination with manufacturers and regulatory authorities to mitigate risk and enhance patient safety. Therefore, the SMDA reporting requirements apply to nursing homes, ambulatory surgery facilities, and hospitals.
NEW QUESTION # 47
Who are most likelynotto report errors in typical incident reporting systems?
- A. Quality officers
- B. Pharmacists
- C. Physicians (compared with nurses/other staff)
- D. Risk managers
Answer: C
Explanation:
Multiple studies showphysicians report fewer incidentsthan nurses and other hospital staff in many voluntary reporting systems, influenced by cultural norms, fear of blame, time constraints, and preference to manage issues "in-house." This matters because underreporting distorts risk signals: leadership may miss trends in diagnostic delays, handoff failures, and near-misses that physicians uniquely observe. Risk management objectives therefore focus on reducing barriers: simplifying reporting, enabling quick mobile submissions, emphasizing psychological safety, and providing credible feedback that reporting leads to improvement (not punishment). Another proven strategy is integrating reporting into professional practice expectations and aligning medical leadership with "just culture" principles. Increasing physician reporting improves system learning, strengthens peer review insight, and supports defensibility by showing hazards were identified and addressed.
NEW QUESTION # 48
......
ASHRM CPHRM Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
Authentic CPHRM Exam Dumps PDF - Oct-2026 Updated: https://www.prepawayexam.com/ASHRM/braindumps.CPHRM.ete.file.html
CPHRM Dumps Special Discount for limited time Try FOR FREE: https://drive.google.com/open?id=1dF500rNTFfhE02kLWhwr6doX_8uwqI7g