Free ASHRM Certified Professional in Health Care Risk Management CPHRM Exam Questions

According to Health Care Risk Management standards established by ASHRM and the American Hospital Association Certification Center, investigation of a liability claim requires careful evaluation of both clinical and legal components. Determining the applicable standard of care is essential to assess whether the provider's actions met accepted professional practice. This typically involves review of medical records, consultation with clinical experts, and comparison to established guidelines or customary practices within the specialty.

Assessing applicable legal principles is also critical. This includes analysis of duty, breach, causation, and damages, as well as jurisdiction-specific statutes of limitation, comparative negligence standards, and evidentiary considerations. Understanding the legal framework allows the risk manager to evaluate exposure and advise counsel appropriately.

Providing a root cause analysis to the insurance company may compromise privilege protections, depending on jurisdiction and policy structure. RCA documents are often protected under peer review or patient safety statutes and should not be disclosed without legal guidance. Obtaining an incident report from the claimant is not appropriate, as internal incident reports are generated by the organization and are not requested from claimants.

Claims and litigation objectives emphasize structured legal and clinical evaluation. Therefore, determining the standard of care and assessing applicable legal principles are required investigative steps.

Under Health Care Risk Management standards supported by ASHRM and the American Hospital Association Certification Center, two federal laws are most directly implicated in this scenario: the Americans with Disabilities Act ADA and the Emergency Medical Treatment and Labor Act EMTALA, formerly enacted under COBRA.

EMTALA requires hospitals with emergency departments to provide an appropriate medical screening examination, stabilization of emergency medical conditions, and appropriate transfer or admission regardless of ability to pay. Since the emergency physician has evaluated and stabilized the patient and the on-call physician is being consulted for admission, EMTALA obligations remain central to ensuring compliant continuation of care.

The ADA is also directly relevant because it mandates that health care organizations provide reasonable accommodations to individuals with disabilities, including effective communication. For a patient requiring a sign language interpreter, the hospital must provide appropriate auxiliary aids and services to ensure meaningful access to care.

HIPAA relates primarily to privacy and protected health information, while HCQIA addresses peer review immunity and credentialing matters. Therefore, ADA and EMTALA are the most relevant regulatory frameworks in this case.

According to Health Care Risk Management standards supported by ASHRM and the American Hospital Association Certification Center, periodic review of policies and procedures is essential to ensure alignment with current laws, regulatory standards, accreditation requirements, and best practices. Reviewing policies helps ensure consistency between written procedures and actual clinical practice, thereby reducing liability exposure.

Policy review also supports identification of potential risk exposures by detecting outdated language, conflicting guidance, or gaps in processes that could lead to adverse events. Additionally, monitoring compliance with standards---such as federal regulations, state statutes, and accreditation requirements---is a central purpose of policy review, ensuring that organizational practices meet required benchmarks.

Maintaining staff competency, however, is primarily addressed through education, training programs, credentialing, and performance evaluation processes. While policies provide guidance for staff conduct, competency assessment is not the primary objective of policy review itself.

Health Care Operations objectives emphasize governance oversight, regulatory compliance, and risk mitigation through clear, current policies. Therefore, maintaining staff competency is not a direct reason for performing risk management review of policies and procedures, making it the correct exception.

According to Health Care Risk Management standards established by ASHRM and the American Hospital Association Certification Center, deaths resulting from criminal acts fall under medico-legal jurisdiction and are typically subject to coroner or medical examiner review. Even when a patient is a documented organ donor, as indicated on a driver's license under the Uniform Anatomical Gift Act framework, the circumstances of death may require legal investigation.

When a death is associated with trauma from a criminal act, it is generally considered a reportable death. The medical examiner or coroner has statutory authority to determine whether an autopsy is required and to ensure preservation of forensic evidence. Organ procurement activities must not interfere with legal investigation obligations. Therefore, prior to organ retrieval or withdrawal of life support, the appropriate legal authorities must be notified.

While honoring the patient's documented donation wishes is important, compliance with state statutes governing reportable deaths and forensic investigations takes precedence. The family's wishes do not override a valid donor designation, but coordination must occur within the legal framework.

Thus, the most appropriate action for the risk manager is to ensure that authorities are notified to determine autopsy requirements before proceeding.

The ''sharp end'' refers to the point in a system where clinicians directly interact with patients and deliver care---nurses administering medications, physicians performing procedures, therapists mobilizing patients, and so on. Errors at the sharp end are typically active failures that are immediately visible, but they are often shaped by ''blunt end'' factors---staffing levels, training, equipment design, policies, and workflow constraints. Risk management objectives discourage blaming the sharp end alone; instead, they use incident analysis (RCA) to identify latent system conditions that make frontline errors more likely. Improving sharp-end safety includes standardization, teamwork tools (SBAR/TeamSTEPPS), human factors engineering, and reducing hazardous variability in processes. This systems approach helps prevent repeat events and supports a just culture where learning is prioritized while accountability is preserved for reckless conduct.

EMTALA applies when an individual comes to the ED and requires a medical screening exam to determine whether an emergency medical condition (EMC) exists. Conditions like myocardial infarction, ruptured appendix, and unstable labor can constitute EMCs because absence of immediate medical attention could reasonably be expected to place health in serious jeopardy. By contrast, stable chronic kidney failure without acute destabilization may not meet the EMC threshold---though the screening exam must be performed before that determination is made. Risk management objectives emphasize: never ''triage out'' without an appropriate screening exam, document findings and decision-making, and apply consistent policies to avoid discriminatory practice. EMTALA failures often stem from process breakdowns (delays, refusal, inadequate screening, improper transfer), so standardized ED workflows and training are critical.

Core risk treatment strategies include avoidance (stop the activity), reduction/mitigation (controls that reduce likelihood/severity), retention (accept risk within appetite and fund losses via reserves/self-insurance), and transfer (contracts/insurance shifting financial consequences). In healthcare, the highest priority is often mitigation for patient safety risks (standardization, technology, training), with financing mechanisms ensuring the organization can absorb residual loss without destabilizing operations. ERM aligns these strategies to enterprise objectives so leadership invests in the best mix of prevention and financing.

Failing to order or perform an indicated test can represent a diagnostic process failure---an omission that delays recognition of deterioration, leading to harm and escalation of care. Risk management objectives treat diagnostic safety as a systems issue: access to decision support, timely follow-up of abnormal results, clear responsibility for test ordering and review, effective handoffs, and adequate staffing/workload conditions to avoid missed steps. Such errors are often linked to underuse in the IOM quality framework (failure to provide beneficial service) and can drive claims due to preventable worsening. Preventive strategies include standardized pathways, trigger tools for abnormal labs, closed-loop test result management, and teamwork practices that encourage escalation when clinical concern persists despite uncertainty.

According to Health Care Risk Management principles endorsed by ASHRM and the American Hospital Association Certification Center, the effectiveness of an educational program is best measured by demonstrated changes in behavior rather than by subjective or indirect outcomes. Educational initiatives in healthcare risk management aim to improve compliance, enhance patient safety practices, and modify unsafe behaviors.

Analysis of written evaluations primarily reflects participant satisfaction and perceived value of the program, but does not confirm that learning objectives were achieved or that behaviors changed. Reductions in claim frequency or severity are important organizational outcomes; however, these are influenced by multiple variables beyond education alone, including patient volume, case complexity, legal climate, and system-level interventions. Therefore, claims data are indirect and delayed measures.

Observable changes in human behavior, such as improved adherence to safety protocols, increased incident reporting, or consistent compliance with documentation standards, provide direct evidence that learning has translated into practice. Risk management objectives emphasize measurable performance improvement, competency validation, and alignment with patient safety goals.

Thus, observable behavioral change is the most reliable and immediate indicator that an educational program has achieved its intended effect.

Modern communication-and-resolution programs emphasize early, honest communication with patients/families after harm, including a timely explanation of what is known, an authentic expression of empathy and apology, and a commitment to investigate and prevent recurrence. This approach supports core risk management objectives: preserve trust, reduce emotional harm, strengthen transparency, and improve learning. Evidence-based disclosure models link timely communication and apology with improved patient experience and, in some programs, fewer claims and lower litigation costs---especially when paired with strong investigation and corrective action. Importantly, organizations should coordinate disclosure through trained coaches and follow local policy and state apology protections. The purpose is not to ''admit fault prematurely,'' but to communicate responsibly, support patients, and demonstrate accountability and improvement.