CPHRM Basic CPHRM 2 ā Questions and Answers
Question 1: Which federal law requires healthcare organizations to implement administrative, physical, and technical safeguards to protect electronic protected health information (ePHI)?
- EMTALA
- HIPAA Security Rule (Correct answer)
- Stark Law
- False Claims Act
Correct answer: HIPAA Security Rule
The HIPAA Security Rule mandates specific safeguardsāadministrative, physical, and technicalāto protect ePHI.
Question 2: A hospital's risk manager receives a report that a nurse administered the wrong medication dose. What is the FIRST step in the risk management process?
- File an incident report
- Notify the patient's family
- Identify and analyze the event (Correct answer)
- Implement corrective action
Correct answer: Identify and analyze the event
Risk management begins with identifying and analyzing the event to understand what occurred before taking further action.
Question 3: In healthcare risk management, 'frequency' of a risk refers to:
- The severity of patient harm if the risk occurs
- How often a particular loss event is expected to occur (Correct answer)
- The cost of implementing risk controls
- The number of staff involved in a risky procedure
Correct answer: How often a particular loss event is expected to occur
Frequency measures how often a loss event is likely to occur, which is a key factor in risk prioritization.
Question 4: Which committee typically has primary oversight responsibility for an organization's enterprise risk management program?
- Pharmacy and Therapeutics Committee
- Board of Directors or Trustees (Correct answer)
- Medical Executive Committee
- Quality Improvement Committee
Correct answer: Board of Directors or Trustees
The Board of Directors or Trustees holds ultimate governance responsibility for enterprise risk management.
Question 5: A root cause analysis (RCA) is best described as:
- A financial audit of risk management costs
- A process to identify staff responsible for an error
- A structured method to identify underlying system factors contributing to an adverse event (Correct answer)
- A regulatory inspection of clinical procedures
Correct answer: A structured method to identify underlying system factors contributing to an adverse event
RCA is a systematic process that identifies the fundamental system-level causes of adverse events rather than focusing on individual blame.
Question 6: Which of the following BEST describes 'loss prevention' as a risk financing strategy?
- Transferring risk to an insurance company
- Reducing the likelihood that a loss event will occur (Correct answer)
- Accepting financial losses without mitigation
- Spreading risk across multiple facilities
Correct answer: Reducing the likelihood that a loss event will occur
Loss prevention focuses on reducing the probability that a harmful event will occur in the first place.
Question 7: Under the doctrine of respondeat superior, a hospital can be held liable for:
- Actions of independent contractors working on the premises
- Negligent acts of employees committed within the scope of employment (Correct answer)
- Medical errors made by physicians with staff privileges only
- Criminal acts committed by employees off-duty
Correct answer: Negligent acts of employees committed within the scope of employment
Respondeat superior holds employers vicariously liable for employees' negligent acts performed within the scope of their employment.
CPHRM Basic CPHRM 2
Which federal law requires healthcare organizations to implement administrative, physical, and technical safeguards to protect electronic protected health information (ePHI)?