Healthcare Administration & Management · Independent exam preparation
Certified Medical Manager (CMM) Study Guide
Practise coding edits, cash-flow calculations, staffing decisions, privacy safeguards and quality reporting across PAHCOM's nine practice management domains.
By CertMedbry · Updated 3 November 2026
Resolve coding denials, distinguish profit from available cash, evaluate staff accommodations, protect patient information and interpret quality measures. This guide develops those decisions through 60 selective concepts, worked applications and independent practice questions for PAHCOM's Certified Medical Manager credential. All nine domains receive coverage; PAHCOM's official Nine Domains of Medical Practice Administration outline defines the full examination scope.
Try 20 free practice questionsWhat is the exam format?
Check the question types, timing and outline before planning your revision.
Which credential and practice setting does this guide address?
This guide addresses PAHCOM's Certified Medical Manager (CMM) credential. PAHCOM creates and administers the examination, which evaluates administrative management across nine domains for physician practices and ambulatory service organizations. The issuer emphasizes managers of solo provider and small group physician practices.
How many questions are there, and how much time is allowed?
PAHCOM's examination page, checked November 3, 2026, states 200 multiple-choice questions and a three-hour time limit. The public information does not identify a separate scored-question or pretest-question count.
How is the examination delivered, and is it adaptive?
PAHCOM describes remote proctoring using a webcam and AI. The public information does not establish adaptive delivery, the number of answer options on official items, or additional item styles beyond multiple choice. The questions here are independent four-option learning drills.
Which blueprint and effective date apply?
Coverage follows PAHCOM's current public Nine Domains of Medical Practice Administration outline, checked November 3, 2026. No formal syllabus version or explicitly identified examination effective date is stated. The outline's marker '241017 | Public | m-k' is not established as an effective date. PQRS remains listed but is taught here in its historical relationship to MIPS.
The 9 Domains — PAHCOM · Transitioning from PQRS to MIPS — CMS
Are official domain percentages or a passing score available?
Although the public outline says 'Weighting by domain,' its readable content gives no numerical percentages. Coverage here therefore spans all nine domains without claiming an official proportional allocation. The issuer information also does not establish a passing score; these drills do not predict examination success.
The 9 Domains — PAHCOM · Certified Medical Manager | CMM — PAHCOM
What eligibility requirements does PAHCOM publish?
PAHCOM states a minimum of two years working in healthcare and 12 education credits related to healthcare or management. Management experience is not required. Experience beyond the two-year minimum can offset education requirements at one additional year per credit. Approved candidates must sit within three months of the application date.
Does earning the CMM complete its maintenance requirements?
PAHCOM requires annual recertification through continuing education and continuous CMM VIP membership. Candidates should distinguish initial examination preparation from the continuing requirements for maintaining the credential.
The CMM is a United States healthcare administration credential issued by PAHCOM for managing physician practices and ambulatory service organizations, with particular emphasis on solo and small group practices. These independently authored materials address administrative management. Federal requirements are identified where relevant; payer contracts and state requirements can add obligations.
Outline used: PAHCOM's current public Nine Domains of Medical Practice Administration outline, checked 2026-10-19. No formal syllabus version or explicitly identified effective date is stated. The outline displays the page marker '241017 | Public | m-k'; this is not established as an examination effective date. The assigned examination label matches PAHCOM's credential name. PQRS remains named in the outline and is treated as historical in this guide.
60 key concepts: understand, apply and avoid the traps
Work through the questions by exam domain. Explain the answer in your own words, try the example, then check the common pitfall.
Revenue Managementnot stated
1.How do procedure-to-procedure edits identify incompatible coding?
An NCCI procedure-to-procedure edit pairs two procedure codes that generally should not be reported together for the same beneficiary, provider and service date. The Column One code remains eligible for payment; the Column Two code is denied unless an allowed, clinically appropriate modifier applies. This is a correct-coding mechanism, not a diagnosis-based medical-necessity determination. Review the actual services and coding relationship before treating a denial as a coverage problem.
Apply it
A practice receives a bundling denial for two procedures performed during one encounter. The manager compares the documented services with the active code pair and its modifier indicator before deciding whether correction or an evidence-supported appeal is appropriate.
Common pitfall: Changing the diagnosis does not resolve a procedure-pair coding conflict. A medically necessary service can still be incorrectly reported separately from another procedure.
2.When does a modifier indicator permit separate reporting?
A Correct Coding Modifier Indicator of 1 permits an NCCI-associated modifier only when qualifying circumstances support separate reporting. It does not authorize routine bypassing of an edit. Separate encounters or appropriate separate anatomical sites can provide relevant distinctions, whereas different diagnoses alone do not establish separate services. An indicator of 0 prevents bypass with an NCCI-associated modifier. Select a specific appropriate modifier when it describes the documented circumstance more accurately.
Apply it
An edit has indicator 1, but both documented procedures involve contiguous structures in the same anatomical region during one encounter. The manager requests a coding review rather than directing staff to append modifier 59 automatically.
Common pitfall: Indicator 1 is permission under defined circumstances, not evidence those circumstances occurred. Payment obtained by adding a modifier does not establish accurate coding.
Medicare NCCI FAQ Library — CMS · Proper Use of Modifiers 59, XE, XP, XS & XU, April 2026 — CMS
3.How do unit edits differ from procedure-pair edits?
A Medically Unlikely Edit evaluates units of one procedure code, whereas a procedure-to-procedure edit evaluates a code combination. For an MUE Adjudication Indicator of 1, each claim line is evaluated separately. Indicators 2 and 3 apply across the service date, summing units for the same code, beneficiary and provider. Begin with the code descriptor's unit definition, then identify the applicable file and adjudication indicator before analyzing a denial.
Apply it
A date-of-service MUE allows two units, but a practice submits three one-unit lines for the same code and date. The manager recognizes that separate lines do not prevent aggregation and investigates whether the reported units are correct.
Common pitfall: An MUE value is not a recommended utilization target. Units within the value still require correct coding and medically reasonable and necessary services.
4.Which edit version governs an older service date?
Coding review must match an edit's effective and deletion dates to the date of service. A code pair appearing in a recent file may have become effective after the encounter or may have been deleted before it. NCCI files change at least quarterly, so current software results cannot alone establish historical applicability. The absence of an active edit also does not authorize coding that violates applicable instructions or reporting conventions.
Apply it
A July audit flags a February encounter using an edit effective April 1. The manager excludes that later edit from the February analysis, then separately checks whether the original coding complied with the rules governing February services.
Common pitfall: Using the newest file without checking dates can create a false finding. Conversely, no automated edit does not prove a code combination was permissible.
5.How do remittance codes explain an adjustment?
An electronic remittance advice separates payment information from the reasons and responsibility associated with adjustments. Claim Adjustment Reason Codes explain why an amount differs from the billed charge, while Remittance Advice Remark Codes supply additional explanation. Adjustment group codes help identify responsibility, such as contractual obligation or patient responsibility. Read these elements together before posting a balance, selecting a correction workflow or generating a patient statement from an unpaid amount.
Apply it
A claim shows a contractual-obligation group code and an adjustment reason requiring follow-up. Instead of billing the unpaid amount to the patient, the posting specialist routes it for review using the reason and accompanying remark.
Common pitfall: The arithmetic difference between charges and payment is not automatically collectible from the patient. Responsibility depends on the remittance information and applicable payment obligations.
6.Why can a deposit differ from summed claim payments?
Provider-level balance adjustments can change a payment independently of individual current claim adjudications. Examples include interest and recovery of an earlier overpayment. Reconciliation therefore requires connecting the payment to its remittance, summing claim payments and then accounting for provider-level adjustments. Keep these adjustments separate from patient balances unless a supported claim-specific reason establishes otherwise. This preserves accurate accounts receivable and explains cash differences without altering unrelated encounter charges.
Apply it
A remittance lists $12,000 in claim payments and a $600 recovery of an earlier overpayment. The bank deposit is $11,400. The manager reconciles the recovery separately instead of distributing the shortfall among current patient accounts.
Common pitfall: Forcing a deposit difference into current claim balances hides the actual adjustment. Provider-level recoveries do not automatically create new patient payment obligations.
7.When can a coding denial be transferred to the patient?
A coding denial must be distinguished from an expected medical-necessity denial before assigning patient liability. CMS states that an Advance Beneficiary Notice does not shift liability for units denied because of an MUE. The notice is not a universal financial waiver. Review the denial basis, code-defined units and applicable adjudication indicator; where permitted, supporting records may establish a basis for reconsideration rather than collection from the beneficiary.
Apply it
A Medicare patient signed an ABN before a service, but the claim is denied because reported units exceed an MUE. The manager reviews units and available reconsideration procedures instead of assuming the signature permits patient billing.
Common pitfall: A signed notice does not cure incorrect coding or override every beneficiary protection. The actual denial mechanism determines whether the notice is relevant.
Risk Managementnot stated
8.How should minimum-necessary access follow job duties?
HIPAA's minimum-necessary standard generally requires reasonable efforts to limit PHI use, disclosure and requests to what the purpose requires. For workforce access, identify the roles needing information, the categories needed and the conditions of access. A billing task may require particular clinical details without justifying unrestricted access to every record. Use purpose-based policies and review unusual requests rather than equating employment or technical capability with a legitimate need.
Apply it
A temporary billing worker needs operative documentation to resolve selected claims. The manager grants access to relevant records and functions, with defined conditions, rather than copying the entire patient database to the worker's account.
Common pitfall: Minimum necessary does not mean withholding every clinical detail from billing. It means justifying the information needed for the specific permissible administrative purpose.
9.When does the treatment exception change disclosure analysis?
The minimum-necessary standard does not apply to disclosures to, or requests by, healthcare providers for treatment. This allows information needed for care to move without applying the same minimum-necessary limitation used for many administrative purposes. The exception does not eliminate other HIPAA requirements or authorize unrelated access. Distinguish the recipient, purpose and transaction: a provider's treatment request differs from a vendor's payment-related request or a workforce member's curiosity.
Apply it
A treating specialist requests records for an active consultation. The manager recognizes the treatment exception to minimum necessary, verifies the request and follows applicable disclosure procedures instead of imposing a billing-oriented page limit on the clinical exchange.
Common pitfall: The treatment exception is not a blanket permission for everyone working in healthcare. Its application depends on the disclosure or request and its purpose.
10.How is a potential PHI breach assessed?
An impermissible use or disclosure of unsecured PHI is presumed to be a breach unless an exception applies or a documented assessment demonstrates a low probability of compromise. Evaluate the nature and extent of PHI, the unauthorized recipient, whether information was actually acquired or viewed, and mitigation. A reassuring statement alone is not the assessment. Gather facts, document the conclusion and use that conclusion to determine applicable notification duties.
Apply it
An employee emails a patient list to the wrong external recipient. The privacy lead investigates identifiers, recipient identity, evidence of access and verified mitigation before deciding whether the incident meets breach-notification requirements under the documented assessment.
Common pitfall: No reported harm is not equivalent to a low probability of compromise. The required assessment considers the information and exposure, not only observed consequences.
11.How can an unresolved referral create medical-liability risk?
Medical-liability prevention includes controlling administrative failures that can delay needed evaluation or treatment. Sending a referral does not establish that the receiving practice accepted it, the patient attended or the consultation report returned for clinical review. Assign responsibility for tracking those steps, use the clinician's stated urgency and escalate unresolved steps for clinical direction. Document actual contacts, barriers and actions. These controls support continuity of care; an incomplete referral alone does not establish legal negligence.
Apply it
A clinician requests an urgent specialist evaluation, but the referral remains unscheduled after a fax was sent. The manager confirms receipt, identifies the scheduling barrier, alerts the responsible clinician to the unresolved urgent referral and assigns tracking through attendance and return of the report. The manager then investigates why the tracking process failed.
Common pitfall: A successful fax report proves transmission, not completed care. Recording patient refusal without establishing what the patient understood or why scheduling failed can obscure the unresolved risk.
Make Referrals Easy: Tool 21 — AHRQ · Follow Up with Patients: Tool 6 — AHRQ · General Compliance Program Guidance, November 2023 — HHS-OIG
12.How do safe harbors affect referral-payment analysis?
The federal Anti-Kickback Statute addresses knowing and willful remuneration intended to induce or reward referrals or business involving federally reimbursable items or services. Safe harbors protect arrangements meeting all applicable conditions. Failure to satisfy a safe harbor does not automatically make an arrangement illegal; the facts and intent still matter. Analyze what value changes hands, why it is offered and how it relates to referrals before accepting a reassuring contract label.
Apply it
A supplier offers a practice free administrative services tied to referral volume. The manager identifies the referral-linked benefit and requests a documented compliance analysis of the arrangement's terms and intent before allowing the proposed service relationship to begin.
Common pitfall: Calling a payment a consulting fee does not establish legitimacy. Conversely, an arrangement outside a safe harbor requires analysis rather than an automatic conclusion of illegality.
General Compliance Program Guidance, November 2023 — HHS-OIG
13.Which administrative services can create exclusion risk?
Federal healthcare program payment restrictions arising from exclusion can extend beyond direct patient treatment. Administrative and management work supporting reimbursed services may also create prohibited payment exposure, even when the excluded person does not submit a claim personally. Examine the actual function, its connection to federally payable services and the payment arrangement. A job title, indirect employment relationship or assertion that the worker never touches patients does not resolve the analysis.
Apply it
A practice proposes hiring an excluded individual to manage billing for federally reimbursed services. The manager identifies that the administrative function itself can create exclusion-related payment risk, despite the role having no examination-room duties or direct patient contact.
Common pitfall: Screening only clinicians overlooks nonclinical functions covered by exclusion restrictions. Moving an excluded person's costs into overhead does not necessarily eliminate federal payment exposure.
The Effect of Exclusion From Participation in Federal Health Care Programs — HHS-OIG
14.How should an exclusion-screening program resolve matches?
OIG recommends checking the List of Excluded Individuals/Entities before hiring or contracting and periodically thereafter; monthly screening best minimizes exposure because the list is updated monthly. A possible name match requires verification using available identifying information before treating it as confirmed. Define who screens, which relationships are included, how matches are resolved and how results are documented. Screening detects a status that can change after an initially acceptable engagement.
Apply it
A monthly screen identifies a common name matching a new contractor. The compliance coordinator verifies identifying details before drawing a conclusion, records the resolution and escalates a confirmed match through the practice's exclusion-response process before further covered work occurs.
Common pitfall: A name match alone may misidentify someone, while a clean hiring screen becomes outdated. Verification and recurring screening solve different parts of the risk.
The Effect of Exclusion From Participation in Federal Health Care Programs — HHS-OIG
Human Resourcesnot stated
15.When do ADA employment rules apply, and which preoffer questions are permissible?
ADA Title I generally covers private employers with at least 15 employees for at least 20 calendar weeks in the current or preceding calendar year. State or local disability-employment laws may cover smaller employers. For a covered employer, preoffer disability-related questions and medical examinations are generally prohibited. The employer may describe essential functions and ask whether an applicant can perform them, with or without reasonable accommodation. Questions seeking diagnoses, treatment or medical history cross a different boundary.
Apply it
At a private practice meeting the federal employee-count and calendar-week requirements, an applicant uses a mobility aid. The interviewer describes essential filing and retrieval tasks and asks about the ability to perform them, rather than asking what condition caused the applicant to use the aid.
Common pitfall: A small-practice label does not establish federal coverage or exemption. Check the employee-count and calendar-week criteria, then consider potentially broader state or local requirements.
Coverage of Business/Private Employers | U.S. Equal Employment Opportunity Commission · Pre-Employment Inquiries and Disability — EEOC
16.When are postoffer medical inquiries treated differently?
For an employer covered by ADA Title I, disability-related inquiries or medical examinations may generally be required after a conditional job offer if all entering employees in the same job category undergo them. This differs from the preoffer restriction, but it does not make discriminatory withdrawal decisions permissible. Keep medical information confidential and assess any disability-related exclusion under the applicable standards. State or local laws may impose duties on employers outside federal coverage.
Apply it
An ADA Title I-covered practice requires the same postoffer health examination for every entering employee in a defined clinical job category. The manager checks consistency and confidentiality, then separately evaluates any proposed offer withdrawal rather than assuming an examination result automatically justifies exclusion.
Common pitfall: Permission to ask after an offer does not authorize selective testing of an applicant who appears disabled. Examination consistency and the eventual employment decision require separate analysis.
Pre-Employment Inquiries and Disability — EEOC · Coverage of Business/Private Employers | U.S. Equal Employment Opportunity Commission
17.How does an accommodation request start an interactive process?
Under ADA Title I's covered-employer framework, an employee can request a work adjustment because of a medical condition without using legal terms or a special form. The employer should clarify the limitation, relevant essential functions and potentially effective accommodations. When the disability or need is not obvious, reasonable supporting documentation may be appropriate. Connect the adjustment to actual work barriers and preserve medical confidentiality. Employers outside federal coverage must still consider applicable state or local requirements.
Apply it
At an ADA Title I-covered practice, a scheduler says a medical condition makes the current screen difficult to read and asks for help. The manager treats this as a potential accommodation request and explores display adjustments and accessible tools with the employee.
Common pitfall: Waiting for the employee to say 'ADA accommodation' delays a recognized request. However, the employer need not accept an ineffective adjustment merely because it was requested.
Enforcement Guidance on Reasonable Accommodation and Undue Hardship under the ADA — EEOC · Coverage of Business/Private Employers | U.S. Equal Employment Opportunity Commission
18.How is undue hardship evaluated for a specific accommodation?
For an ADA Title I-covered employer, undue hardship requires an individualized assessment of significant difficulty or expense in light of the accommodation and the employer's circumstances. General disability assumptions, coworker resentment or a preference for uniform treatment do not establish it. Consider cost, operational effect and relevant organizational resources. If several accommodations would be effective, the employer may choose an effective alternative to the employee's preference. Other applicable laws may impose additional requirements.
Apply it
At an ADA Title I-covered practice, an employee requests an expensive workstation modification. A less costly adjustment would remove the same documented barrier. The manager discusses the effective alternative and evaluates actual resources and operational impact instead of denying assistance because the original proposal is expensive.
Common pitfall: Expense alone does not establish undue hardship without context. Choosing a cheaper option is defensible only when that option effectively addresses the employee's work barrier.
Enforcement Guidance on Reasonable Accommodation and Undue Hardship under the ADA — EEOC · Coverage of Business/Private Employers | U.S. Equal Employment Opportunity Commission
19.When does federal overtime become payable?
For covered, nonexempt employees, the federal FLSA generally requires overtime pay of at least one and one-half times the regular rate for hours worked beyond 40 in a workweek. The workweek, rather than the payroll period, is the basic measurement unit. Do not average a long week with a short week to erase overtime. Apply the rule to covered employees while recognizing that other applicable laws may provide additional protections.
Apply it
A nonexempt employee works 46 hours one week and 34 the next in a two-week pay period. The manager identifies six overtime hours in the first week rather than treating the 80-hour period as entirely straight time.
Common pitfall: A biweekly payroll does not create an 80-hour federal overtime threshold. Scheduling labels and an employee's agreement do not erase overtime otherwise required by law.
Fair Labor Standards Act Advisor: When is overtime pay due? — U.S. Department of Labor
20.How should accommodation and performance standards interact?
For an ADA Title I-covered employer, reasonable accommodation helps a qualified employee perform essential job functions; it generally does not require eliminating those functions or lowering a uniformly applied production standard. Identify whether an adjustment would enable satisfactory performance. Separate the essential outcome from a customary method of achieving it, because changing a method or tool may preserve the standard while removing the barrier. State or local duties may apply beyond federal employer coverage.
Apply it
At an ADA Title I-covered practice, a receptionist with a disability cannot use the current telephone interface efficiently but can meet call-handling standards with compatible assistive equipment. The manager evaluates that equipment rather than removing telephone work or simply insisting on the existing device.
Common pitfall: Treating every familiar work method as essential can block an effective accommodation. Removing an essential function is different from changing how that function is performed.
Enforcement Guidance on Reasonable Accommodation and Undue Hardship under the ADA — EEOC · Coverage of Business/Private Employers | U.S. Equal Employment Opportunity Commission
Financenot stated
21.How do cash and accrual accounting change revenue timing?
Cash accounting generally recognizes revenue when received and expenses when paid. Accrual accounting recognizes revenue when earned and expenses when incurred, regardless of cash movement. A practice can therefore report accrual revenue while still waiting for payer collection. Distinguish the accounting basis before comparing periods or interpreting performance. Accounts receivable bridges earned revenue and later cash collection; it is not itself evidence that the corresponding cash is already available.
Apply it
A practice earns $18,000 from December services and collects the amount in January. The manager recognizes that accrual reporting places earned revenue in December, while cash-basis revenue follows January receipt, explaining the difference between the two reports.
Common pitfall: Comparing reports prepared on different bases can create a false growth or decline. Earned revenue and collected cash answer different management questions about the same services.
Glossary of Business Financial Terms — U.S. Small Business Administration
22.Which financial statement answers a management question?
An income statement reports revenue and expenses over a period, while a balance sheet presents assets, liabilities and equity at a particular date. A cash-flow statement explains changes in cash through the relevant activities. Choose the statement that matches the question: operating results, financial position or cash movement. Profit does not guarantee liquidity because receivables, debt payments and asset purchases can separate reported earnings from available cash balances.
Apply it
The owners ask why a profitable quarter ended with less cash. The manager reviews cash flows and changes in receivables, debt and equipment purchases instead of assuming the income statement alone can explain the bank balance.
Common pitfall: A balance sheet is a dated position, not a period's operating result. Mixing these time perspectives can make valid figures appear contradictory to one another.
Glossary of Business Financial Terms — U.S. Small Business Administration
23.How does working capital reveal short-term financial pressure?
Working capital equals current assets minus current liabilities. It describes the resources available after obligations due in the short term are considered, rather than measuring profitability. A positive amount may still conceal collection problems if much of the current assets consists of slow receivables. Evaluate both the arithmetic and the quality and timing of the underlying assets. Decisions about payroll and supplier payments require attention to when resources become usable.
Apply it
A practice has $140,000 in current assets and $95,000 in current liabilities, producing $45,000 in working capital. Because $90,000 of assets is overdue receivables, the manager also forecasts collections before committing to a major near-term expenditure.
Common pitfall: Positive working capital does not mean the full amount is cash. A liquidity measure can look reassuring while collection timing still threatens payroll or supplier payments.
Glossary of Business Financial Terms — U.S. Small Business Administration
24.How should receivable days be calculated consistently?
Receivable days express outstanding accounts receivable relative to average daily revenue on a consistent basis. Divide the relevant receivable balance by average daily revenue calculated over the selected period. Use comparable gross or net amounts and consistent periods when interpreting trends. A rising value can signal slower collection, but changes in service mix, billing volume or measurement basis can also affect the result. Investigate the underlying accounts before selecting an intervention.
Apply it
Net receivables are $240,000 and comparable net revenue is $720,000 over 90 days. Average daily revenue is $8,000, so receivable days equal 30. The manager compares this with prior periods calculated using the same definitions.
Common pitfall: Mixing gross receivables with net revenue distorts the measure. A change in calculation method can resemble a collection problem even when actual payment behavior is unchanged.
Glossary of Business Financial Terms — U.S. Small Business Administration
25.Why is depreciation different from a current cash payment?
Depreciation allocates a tangible asset's cost over its useful life as an expense. The periodic expense does not itself represent cash leaving the practice during that period. The equipment purchase or related financing produces separate cash and liability effects. Distinguish expense recognition from payment timing when interpreting operating results or preparing a cash forecast. This prevents adding a second cash outflow merely because depreciation appears on the income statement.
Apply it
Equipment was purchased earlier, and the current month's income statement includes $1,000 in depreciation. The manager includes actual current loan payments in the cash forecast, if applicable, but does not treat depreciation itself as another $1,000 payment.
Common pitfall: Removing depreciation from a cash forecast does not remove the asset's purchase cost or financing obligations. Each affects cash according to its actual payment timing.
Glossary of Business Financial Terms — U.S. Small Business Administration
26.How does contribution margin determine break-even volume?
In a simple single-service model, contribution per service equals revenue per service minus variable cost per service. Break-even volume equals fixed costs divided by that contribution, with fractional results rounded up when whole services are required. Match all inputs to the same period and distinguish variable costs from fixed costs. A positive contribution helps cover fixed costs; zero or negative contribution cannot cover positive fixed costs through greater volume alone.
Apply it
A service produces $120 in revenue and $45 in variable costs, with $9,000 monthly fixed costs. Its $75 contribution requires 120 services to break even, assuming the stated price, cost behavior and single-service model remain valid.
Common pitfall: Dividing fixed costs by revenue ignores variable costs and understates required volume. The simple result also depends on stable assumptions about price, capacity and cost behavior.
27.How is overtime incorporated into a payroll calculation?
For a covered, nonexempt employee with a simple hourly regular rate, calculate straight-time compensation for the first 40 hours and at least one and one-half times that rate for additional workweek hours. The example assumes no other compensation changes the regular rate. Separate hours worked from the pay-period total, then reconcile the earnings calculation with time records. Payroll accuracy depends on both the correct rate and the correct workweek hours.
Apply it
An employee earns $24 per hour and works 45 hours in one workweek, with no other regular-rate compensation. Gross earnings are $960 for 40 hours plus $180 for five overtime hours, totaling $1,140 before deductions.
Common pitfall: Paying only half the hourly rate for overtime hours understates total earnings unless straight-time compensation for those hours has already been included in the calculation.
Fair Labor Standards Act Advisor: When is overtime pay due? — U.S. Department of Labor
Contract Managementnot stated
28.When does a service vendor need a business associate agreement?
A vendor that creates, receives, maintains or transmits PHI on behalf of a covered entity to perform a covered function can be a business associate. The relationship depends on the service and information handled, rather than the vendor's preferred label. A required agreement establishes permitted uses and disclosures and protection duties. Distinguish such vendors from another provider receiving information for treatment, because those relationships do not automatically create business-associate status.
Apply it
A company will maintain identifiable patient records in a hosted system for the practice. The manager evaluates its business-associate role and required contractual protections before service begins instead of relying solely on the company's general confidentiality statement.
Common pitfall: A standard nondisclosure clause does not necessarily contain the required business-associate provisions. Conversely, receiving PHI does not make every treatment provider a business associate.
29.Which duties should a PHI service contract make explicit?
A business associate agreement should define permitted and required PHI uses, appropriate safeguards and reporting of impermissible uses or disclosures, including breaches as applicable. It should address assistance with covered-entity obligations and access needed for oversight. Translate these duties into workable contacts and procedures rather than relying on a vague promise to obey HIPAA. The agreement establishes responsibilities, but operational monitoring remains necessary to determine whether the vendor actually performs them.
Apply it
A billing vendor's contract promises confidentiality but gives no process for reporting an improper disclosure. The manager adds the required reporting duties and identifies operational contacts so an incident reaches the practice's response team promptly and with usable information.
Common pitfall: A broad compliance warranty can sound comprehensive while leaving essential duties undefined. A signed agreement also does not prove that safeguards and reporting processes operate effectively.
30.How should subcontractors inherit PHI protections?
A business associate must ensure that subcontractors creating, receiving, maintaining or transmitting PHI on its behalf agree to the applicable restrictions and conditions. Outsourcing part of a service does not end the protection chain. Review whether the contract requires this downstream protection and how the primary vendor manages subcontracted functions. The practical issue is whether each organization handling PHI has enforceable responsibilities consistent with its role in the service.
Apply it
A transcription vendor plans to use a separate company for storage of identifiable recordings. The manager checks that the vendor's agreement requires appropriate downstream protections and examines how the subcontracted storage function will meet those responsibilities throughout the engagement.
Common pitfall: Approving the primary vendor does not establish that its subcontractors are protected. An informal assurance that everyone values privacy is weaker than required downstream obligations.
31.What happens to PHI when a vendor contract ends?
Business associate agreements should authorize termination for a material violation and address PHI at termination. Return or destruction is generally required where feasible, including copies. If return or destruction is infeasible, protections must continue and further use or disclosure must be limited to the reasons making return or destruction infeasible. Plan usable record transfer and residual-data protection before termination, because ending billing or service access does not itself resolve retained PHI.
Apply it
A practice leaves its records vendor, which can export active records but must retain a protected archival copy for a stated infeasibility reason. The manager arranges transfer and documents continuing restrictions on that retained copy rather than accepting unrestricted retention.
Common pitfall: A final invoice does not close the information-protection relationship. Deleting an account also does not establish that every copy was returned, destroyed or appropriately restricted.
32.How should patient financial agreements support understanding?
A useful patient financial discussion explains expected costs, insurance-related uncertainty and available help in understandable language. Invite questions privately and distinguish an estimate from a final coverage or payment determination. Financial agreements should support an informed conversation rather than function as unexplained paperwork. Identifying affordability barriers early can allow financial counseling and practical follow-up before cost concerns disrupt completion of the planned services or the patient's engagement with care.
Apply it
A patient hesitates to schedule a recommended service because the expected bill is unclear. Staff explain the estimate and its limitations, offer private financial counseling and document the patient's questions rather than requesting a signature without discussion.
Common pitfall: A signed financial form does not demonstrate understanding or guarantee coverage. Presenting an uncertain estimate as a final price can mislead the patient about likely obligations.
33.Which responsibilities belong in a referral agreement?
Referral agreements can clarify what information accompanies a referral, which organization schedules the visit, how urgency is communicated and how consultation results return. Coverage checks, network participation and required prior approval should be addressed before the patient relies on an appointment. Define responsibilities across the referring and receiving practices so each can recognize an incomplete handoff. An available appointment establishes capacity, not coverage or successful transfer of clinical information.
Apply it
A specialty office offers a quick appointment, but prior approval is required. The referring practice checks the approval and network status while using its referral agreement to assign scheduling, record transfer and return-report responsibilities between the two offices.
Common pitfall: Assuming the receiving office handles every administrative step creates gaps. A referral order and an appointment date do not establish authorization, information exchange or completed care.
Business Managementnot stated
34.How does an exposure control plan reflect actual work?
OSHA's bloodborne-pathogen standard requires an exposure control plan for covered occupational exposure, including an exposure determination and methods for compliance. The plan must be accessible and reviewed at least annually and when relevant work changes occur. Its value depends on matching real tasks, equipment and employee exposure rather than copying a generic template. Review safer technology and obtain input from relevant nonmanagerial employees involved in direct patient care when required.
Apply it
A practice adds a procedure involving occupational blood exposure. The manager updates task-specific exposure analysis and controls, reviews equipment and employee input, and ensures affected staff can access the revised plan before the new workflow becomes routine.
Common pitfall: An annual signature does not prove that the plan reflects current tasks. New procedures or equipment can require attention before the next scheduled annual review.
35.Why do engineering controls precede reliance on protective equipment?
Engineering and work-practice controls reduce occupational exposure at its source, while personal protective equipment addresses remaining exposure. Examples include safer sharps devices and procedures that avoid unnecessary handling of contaminated needles. OSHA requires appropriate controls rather than relying exclusively on employee caution or gloves. Evaluate whether a proposed change actually removes or reduces the hazard and whether staff can use it consistently within the procedure's real physical layout and sequence.
Apply it
Staff report frequent handling of contaminated needles before disposal. The manager reviews safer devices and redesigns the disposal workflow, then confirms appropriate protective equipment, instead of responding only with a reminder to be more careful during busy clinics.
Common pitfall: Gloves are not a substitute for safer sharps controls. Training staff to tolerate an avoidable hazard leaves the exposure mechanism in place despite improved awareness.
36.Where should sharps containers be placed and maintained?
Contaminated sharps must be discarded promptly into appropriate containers that are closable, puncture resistant and leak resistant on the sides and bottom, with required identification. Containers should remain upright, be accessible and be located as close as feasible to where sharps are used. Replace them routinely and before overfilling. The discriminating facility question is whether disposal can occur safely at the point of use without carrying exposed sharps through the workplace.
Apply it
A procedure room's container is mounted across a crowded corridor and is nearly full. The manager arranges timely replacement and a compliant location near the use area so staff no longer carry contaminated sharps through shared traffic.
Common pitfall: An available container is not adequate if placement creates unsafe handling. Pushing contents down or waiting for protruding sharps is incompatible with preventing overfilling.
37.When must examination gloves be replaced?
Disposable examination gloves provide a barrier but must be replaced when contaminated, torn, punctured or otherwise unable to function effectively. OSHA prohibits washing or decontaminating disposable gloves for reuse. Their presence does not eliminate the need for required hand hygiene and other exposure controls. Distinguish disposable examination gloves from reusable utility gloves, which have different reuse boundaries. Facility purchasing and workflow should support replacement rather than create incentives to stretch disposable supplies.
Apply it
During a supply shortage, a supervisor proposes disinfecting disposable examination gloves between patients. The manager rejects reuse, obtains suitable replacement supplies and reviews workflow so staff can change compromised or contaminated gloves without delaying the exposure-control process.
Common pitfall: A glove that looks intact is not necessarily suitable for continued use. Disinfection does not convert a disposable examination glove into an approved reusable barrier.
38.How should housekeeping address blood contamination?
A written cleaning schedule and decontamination method should reflect the location, surface, contamination and tasks performed. OSHA requires appropriate cleaning and decontamination after contact with blood or other potentially infectious material, including prompt attention to visible contamination. Match protective equipment and methods to the exposure risk. Contaminated broken glass must be collected by mechanical means rather than directly by hand, because ordinary cleaning convenience does not remove the sharps hazard.
Apply it
A blood specimen breaks on a counter during clinic. Staff secure the area, use appropriate protective measures and mechanical tools for glass, and apply the established decontamination process instead of waiting for routine evening housekeeping to address the spill.
Common pitfall: Routine cleaning frequency does not justify leaving visible blood contamination untreated. Picking up contaminated glass by hand remains hazardous even when the employee is wearing gloves.
39.What happens when a laboratory modifies a waived test's instructions?
CLIA-waived testing must follow the manufacturer's instructions, including the authorized specimen and method. Modifying those instructions produces a test that is no longer waived and is treated as high complexity under CLIA. A Certificate of Waiver does not authorize that modified testing. Before performing it, the laboratory must obtain appropriate certification and satisfy applicable high-complexity requirements, including personnel, quality-system and performance-specification requirements. Alternatively, retain the unmodified waived method and follow its instructions.
Apply it
A practice holding only a Certificate of Waiver proposes substituting a specimen type outside the manufacturer's instructions. The manager stops the proposed substitution. The practice must use the specified waived method or obtain appropriate certification and meet the applicable high-complexity requirements before performing the modified test.
Common pitfall: Plausible results or a director's approval do not preserve waived status after modification. The manufacturer's waived designation does not extend automatically to a locally altered specimen or procedure.
For Laboratory Directors — CMS · qso-25-10-clia-revised-2025-06-23.pdf
40.Which laboratory responsibilities remain with the director?
The laboratory director retains responsibility for overall laboratory operation and compliance even when specific duties are delegated. Oversight includes appropriate personnel, reliable processes and meeting the requirements applicable to the laboratory's testing complexity and certificate. Credential management should therefore connect the authorized testing menu with qualified responsible personnel. A delegation chart is useful only when it identifies competent individuals and an effective oversight process rather than implying that accountability has disappeared.
Apply it
A practice adds laboratory testing and assigns daily operations to an experienced employee. The manager verifies the applicable certificate, testing requirements and director oversight arrangements instead of treating the employee's experience as sufficient authorization for the expanded service.
Common pitfall: Delegation transfers performance of a task, not the director's overall responsibility. A certificate also should not be assumed to cover every proposed testing method or complexity.
Technology & Data Managementnot stated
41.What information belongs within a security risk analysis?
A HIPAA security risk analysis examines potential risks and vulnerabilities affecting the confidentiality, integrity and availability of all ePHI the organization creates, receives, maintains or transmits. Scope includes systems and locations beyond the main EHR, such as portable devices, interfaces, backups and vendor-hosted information. Inventory data flows before evaluating controls. A narrow review of one application can miss the actual route by which records are exposed, altered or rendered unavailable.
Apply it
A practice assesses its EHR but overlooks scanned records on a shared drive and backups held by a vendor. The manager expands the information inventory and analysis to include those locations and their associated access and availability risks.
Common pitfall: A secure EHR does not establish that every ePHI location is secure. Risk analysis follows the information across the organization rather than stopping at application boundaries.
42.How do threats and vulnerabilities produce a risk priority?
A threat is a potential cause of an adverse event, while a vulnerability is a weakness that the threat could exploit. Risk analysis considers both the likelihood of occurrence and the potential impact, taking existing safeguards into account. This supports priorities based on expected consequences rather than the visibility of a device or the latest headline. Document the reasoning and update the analysis when systems, operations or relevant threats change.
Apply it
A shared account creates a vulnerability, and unauthorized access is a relevant threat. The manager evaluates how likely misuse is and what records or operations could be affected, then prioritizes individualized access and monitoring based on that assessment.
Common pitfall: A long list of weaknesses is not a completed risk analysis. Without likelihood, impact and existing-control context, the list cannot explain defensible remediation priorities.
43.How do authentication and authorization protect EHR access?
Authentication verifies that a person or entity seeking access is who it claims to be; authorization determines the information and functions that identity may use. Both matter because a correctly identified user can still have excessive privileges. Unique user identification supports accountability, while role-appropriate access restricts unnecessary activity. Review access when duties change or employment ends so permissions continue to match the legitimate operational need rather than accumulating over time.
Apply it
A former billing employee moves to scheduling but retains payment-adjustment privileges. The manager revises authorization for the new role while preserving unique authentication, recognizing that a valid login alone does not justify every available system function.
Common pitfall: Shared passwords weaken accountability even when access seems convenient. Authentication and authorization solve different problems, so strengthening one does not automatically correct failures in the other.
44.Why must audit controls include review?
Audit controls record and support examination of activity in systems containing or using ePHI. Useful records can connect an identified user with access, changes or other relevant actions. Logging alone does not detect a problem unless the organization has a way to review activity and respond to findings. Design monitoring around meaningful risks, investigate unusual patterns and preserve appropriate evidence so a suspected access violation can be evaluated rather than guessed.
Apply it
An employee appears to have opened records unrelated to assigned work. The manager reviews user-specific audit activity and relevant job duties, documents the investigation and responds to substantiated findings instead of relying only on the employee's recollection.
Common pitfall: Collecting logs without examining them creates stored data rather than effective oversight. A record access entry also requires context before it establishes that access was improper.
45.How does integrity differ from confidentiality and availability?
Confidentiality protects information from unauthorized access or disclosure. Integrity protects it from improper alteration or destruction, while availability means authorized users can access and use it when needed. A system can succeed in one objective and fail another: encrypted records may remain confidential yet become inaccessible, and accessible records may contain unauthorized changes. Identify which objective an incident threatens before choosing controls, because encryption alone does not solve every information-security problem.
Apply it
An interface changes patient identifiers incorrectly while preventing outside access. The manager recognizes an integrity failure and investigates data alteration controls rather than assuming strong confidentiality safeguards establish that the transmitted records remain accurate and safe to use.
Common pitfall: Treating security as secrecy alone overlooks corrupted records and unavailable systems. A control should be judged against the specific confidentiality, integrity or availability problem it addresses.
46.How do backup and restoration testing work together?
Backups preserve copies needed to recover information, but their existence does not prove that restoration will succeed. A contingency approach includes protecting backup copies, defining restoration procedures and testing whether usable data and required operations can actually be recovered. Ransomware can affect connected copies, making separation and protection important. Evaluate recovery against operational needs and document problems found during tests so a successful backup message is not mistaken for demonstrated recoverability.
Apply it
A practice receives nightly backup-success notices but has never restored records. During a planned exercise, the manager verifies usable recovery in an isolated environment and discovers a missing interface dependency that would otherwise delay return to normal operations.
Common pitfall: A backup report confirms a process event, not complete recovery capability. Untested copies or copies exposed to the same attack may fail when they are needed.
47.What does emergency-mode operation require during an outage?
Emergency-mode planning addresses continuation of critical business processes while protecting ePHI during a disruption. It complements data backup and disaster recovery by defining how necessary work proceeds before full restoration. Identify essential workflows, responsible staff, protected temporary information handling and the reconciliation needed after recovery. A technical restoration plan alone cannot tell reception, clinical teams and billing staff how to operate safely when the usual system is unavailable.
Apply it
Ransomware makes the EHR unavailable during clinic. Staff activate assigned downtime workflows, protect temporary records and track work requiring later reconciliation while the recovery team restores systems, rather than improvising disconnected paper and personal-device workarounds across departments.
Common pitfall: Restoring a server and sustaining essential operations are related but distinct tasks. Temporary records also need protection and reconciliation; downtime does not suspend information-security responsibilities.
Clinical Performance Reportingnot stated
48.Which measure specifications control a performance result?
A quality measure must be interpreted using its defined population, numerator, denominator, exclusions, measurement period and reporting context. Similar measure titles can conceal different technical specifications or program uses. Identify the correct measure version and implementation before extracting data or comparing results. The specification determines which encounters and patients count; a dashboard label or local clinical intuition cannot substitute for the operational definition used by the reporting program.
Apply it
Two reports display the same screening title but use different measurement periods and eligibility criteria. The manager retrieves the applicable specifications and reconciles the definitions before concluding that one clinician's performance differs from another's on the measure.
Common pitfall: Matching titles do not guarantee matching measures. A correct clinical action can still be counted differently when eligibility, timing or reporting definitions differ between implementations.
49.How do exclusions change a measure denominator?
The denominator represents the population meeting the measure's eligibility rules after applying the specified exclusions and other relevant logic. The numerator identifies qualifying performance within that population. Apply exclusions exactly as defined and supported by documentation; they are not discretionary tools for improving a rate. Distinguish genuine performance gaps from data-classification errors, because adding an ineligible patient or removing an eligible one can distort a measure without changing care.
Apply it
A simplified measure starts with 100 eligible records, has 10 documented exclusions and identifies 72 numerator successes among the remaining records. The manager calculates 72 divided by 90, or 80%, after confirming the specification uses that structure.
Common pitfall: Removing difficult cases without a specified exclusion inflates performance. Conversely, retaining documented excluded cases can understate results and direct improvement work toward a false problem.
50.How can measured performance produce an incentive payment?
Pay-for-performance links a defined performance result or score to payment under specified program rules. Consider an explicitly hypothetical contract: among attributed patients meeting its annual eligibility criteria, documented service completion is the numerator after specified exclusions. If performance is at least 80% and all submission requirements are met, the practice earns a bonus of 2% of eligible base payments; otherwise, no bonus is paid. These illustrative thresholds and percentages are not CMS program rules.
Apply it
The hypothetical contract begins with 100 eligible patients, excludes 10 documented cases and counts 72 completions among the remaining 90. Performance is 72 divided by 90, or 80%, meeting the inclusive threshold. With $100,000 in eligible base payments and all submission conditions satisfied, the bonus is $2,000. At 71 completions, performance would be about 78.9% and no bonus would be earned.
Common pitfall: A better percentage does not automatically produce a larger payment. Under this hypothetical threshold rule, both 80% and 90% earn the same 2% bonus on the same payment base. Actual programs may use composite scores, benchmarks, weights and other payment conditions.
Transitioning from PQRS to MIPS — CMS · cms_inventory_user_guide.pdf
51.Why must measure applicability and payment rules be checked separately?
A measure inventory identifies program associations, specifications and status; it does not independently establish a practice's current reporting obligation or payment adjustment. First confirm the applicable program, period and measure version. Then identify how reported results become a score and how that score affects the eligible payment base. In a composite system, improvement in one measure may be offset by other components. A valid higher percentage alone therefore cannot establish a larger payment.
Apply it
An EHR still displays a previously reported measure, and its percentage has improved. Before forecasting extra revenue, the manager confirms current program use, applicable scoring rules, other score components and the payment base. The manager does not multiply the raw improvement percentage by total practice revenue.
Common pitfall: Software availability does not prove current program applicability. Likewise, a performance percentage, a composite score and a payment-adjustment percentage are different quantities and cannot be substituted for one another.
cms_inventory_user_guide.pdf · Transitioning from PQRS to MIPS — CMS
52.How should PQRS be understood within the current outline?
PAHCOM's outline still names the Physician Quality Reporting System, but CMS documents its transition into the MIPS framework. Learn PQRS as a historical program rather than treating it as an unchanged current reporting route. When evaluating an old policy or report, identify its performance period and program before applying instructions. The transferable skill is recognizing program succession so legacy terminology does not determine today's workflow or reporting configuration.
Apply it
An office manual instructs staff to prepare a current submission using an old PQRS workflow. The manager identifies the legacy program reference and checks the practice's applicable current reporting pathway before assigning work or configuring the submission process.
Common pitfall: A topic's continued appearance in an examination outline does not establish that its former reporting process remains active. Historical knowledge and current operational instructions serve different purposes.
The 9 Domains — PAHCOM · Transitioning from PQRS to MIPS — CMS
53.Which Promoting Interoperability pathway fits the organization?
Promoting Interoperability terminology appears in more than one reporting context. CMS's Medicare Promoting Interoperability Program addresses eligible hospitals and critical access hospitals, while eligible clinicians may encounter Promoting Interoperability as a MIPS performance category. Identify the participant type and applicable program before using objectives or submission instructions. A physician practice should not assume hospital program rules apply merely because both pathways use the same phrase in their names.
Apply it
A physician-practice manager finds a hospital Promoting Interoperability checklist online. Before adopting it, the manager identifies the practice's clinician reporting context and applicable instructions, avoiding a workflow built around hospital-specific participation requirements that do not establish clinician obligations.
Common pitfall: Shared terminology does not establish identical eligibility, measures or submission rules. Start with the reporting entity and program rather than selecting whichever checklist appears most complete.
Patient Clinical Education & Practice Marketingnot stated
54.Why use health-literacy precautions with every patient?
Health-literacy universal precautions make information and services easier to understand for everyone rather than trying to identify a small group that needs help. Stress, unfamiliar terminology and complex instructions can affect understanding regardless of education or appearance. Build clear explanations, manageable information and confirmation of understanding into routine workflows. This approach reduces dependence on unreliable assumptions about who can read a form, interpret a result or navigate a referral unaided.
Apply it
A highly educated patient appears comfortable but misunderstands a scheduling instruction during a stressful visit. Staff use the same clear-language and understanding checks offered to every patient instead of assuming professional status makes additional communication support unnecessary.
Common pitfall: Education, confidence and fluent conversation do not prove understanding of healthcare information. Reserving clear communication for visibly struggling patients misses barriers that are not obvious.
Health Literacy Universal Precautions Toolkit, 3rd Edition — AHRQ
55.How does plain language make instructions actionable?
Clear communication prioritizes a small number of important actions, uses familiar words and explains unfamiliar terms concretely. Break complex instructions into manageable parts and connect each action with what the patient should do next. Speaking more slowly does not resolve jargon or an overloaded explanation by itself. A practice manager can improve standard materials by testing whether the intended reader can identify the action, timing and route for obtaining help.
Apply it
A handout says to 'complete diagnostic evaluation promptly' without a next step. Staff revise it to identify whom to contact, how to schedule and the clinician-specified timing, then check whether patients can explain the required action.
Common pitfall: Shorter text is not automatically clearer if it removes essential action details. Replacing jargon while leaving timing and responsibility vague can preserve the original navigation barrier.
56.How does teach-back reveal a communication gap?
Teach-back asks patients to explain important information or demonstrate a task in their own words so the professional can check the explanation's effectiveness. Introduce it without blame, listen for gaps, clarify and check again. It differs from asking whether the patient understands, which invites agreement without demonstrating comprehension. Use the result to improve communication and address misunderstandings rather than judging the patient's intelligence, cooperation or willingness to follow instructions.
Apply it
After explaining a preparation plan, a staff member asks the patient to describe what will happen before the appointment. The response reveals a missed step, so the staff member explains that step differently and checks understanding again.
Common pitfall: Repeating the original wording louder is not a complete response to misunderstanding. Teach-back is an iterative communication check, not a memory test the patient must pass.
57.When should qualified language assistance be arranged?
When a language barrier interferes with communication, arrange appropriate qualified interpreter support rather than assuming conversational bilingual ability ensures accurate healthcare interpretation. Explain information directly to the patient and check understanding through the interpreted exchange. Complex terms, confidentiality and accurate transfer of meaning make an untrained companion or casually bilingual employee an unreliable default. Plan language access in scheduling and patient materials so communication support is available when consequential decisions occur.
Apply it
A patient speaks little English, and an accompanying friend offers to summarize a complex discussion. Staff arrange qualified interpreter support and communicate with the patient directly, using an understanding check rather than relying only on the friend's assurance.
Common pitfall: A familiar companion may omit, alter or misunderstand information despite good intentions. Basic language skills alone do not establish the competence needed for accurate healthcare interpretation.
58.How should follow-up responsibility be made reliable?
Reliable follow-up assigns a responsible person, a timeframe and a tracking method, then verifies completion rather than assuming a message closed the task. Confirm the patient's communication preferences and practical access to the chosen channel. A phone number or portal account does not establish that the patient can or wants to use it for every purpose. Escalation and alternative contact steps should respond to the importance and timing of the outstanding issue.
Apply it
A patient has a mobile phone but requests telephone calls rather than texts. Staff document that preference, assign responsibility for a planned follow-up call and track whether the conversation occurs instead of treating a sent text as completed communication.
Common pitfall: Sending information and confirming communication are different events. Unassigned follow-up or an inaccessible channel can leave a task apparently complete while the patient remains unaware.
59.How does referral tracking close the patient-navigation gap?
A referral process should help the patient understand why the referral matters, what to do next and whom to contact for help. Track whether scheduling, attendance and return of the consultation information occur, using defined responsibilities between practices. Identify barriers such as coverage, transportation or unclear instructions rather than assuming noncompletion reflects refusal. Closed-loop tracking turns an order into a monitored transition and makes unresolved steps visible for appropriate follow-up.
Apply it
A patient has not attended a specialist visit because the scheduling instructions were unclear. The referral coordinator explains the next action, helps address the barrier and tracks the appointment and returning report rather than simply recording that the referral was ordered.
Common pitfall: A referral order documents intent, not completion. Repeatedly issuing the same instructions without identifying the barrier can leave the patient stranded at the same unresolved step.
60.When does patient outreach require marketing authorization?
HIPAA generally requires authorization for uses or disclosures of PHI for marketing, subject to defined exceptions. Evaluate the communication's purpose, the information used or disclosed, who receives it and whether remuneration affects the analysis. Some treatment and healthcare-operations communications fall outside the marketing definition, but a promotional purpose cannot be resolved by labeling a campaign educational. Review the actual arrangement before giving a third party an identifiable patient audience.
Apply it
A commercial company offers payment for an identifiable patient list to promote its product, with no applicable exception. The manager recognizes the marketing-authorization issue and does not substitute a routine treatment consent for the required permission.
Common pitfall: A beneficial product or educational tone does not automatically exempt promotional use of PHI. Permission for treatment is not interchangeable with authorization for a separate marketing disclosure.
What to focus on during revision
The following are CertMedbry study suggestions. Use the official outline to check the full scope of your examination.
- Explain the mechanism behind a denial: procedure pairing, units, edit dates, adjustment responsibility or provider-level reconciliation.
- Separate federal rules from payer-specific implementation and recognize when patient liability does not follow an unpaid claim.
- Practise role-based privacy decisions, breach assessment, exclusion screening and medical-liability prevention through tracked referrals and timely escalation.
- Establish ADA employer coverage before applying federal hiring and accommodation duties; distinguish offer stages, effective accommodations and workweek-based overtime.
- Calculate working capital, receivable days, contribution margin, break-even volume and simple overtime without confusing profit with cash.
- Connect vendor contracts, subcontractors and termination provisions with continuing PHI responsibilities.
- Match facility controls, waived-testing instructions and director oversight to actual operations; recognize modified waived testing as high complexity.
- Connect eligible populations and performance calculations to incentive thresholds and payment rules; distinguish historical PQRS and the Promoting Interoperability contexts.
- Use clear language, teach-back, qualified interpreters and tracked follow-up to improve patient navigation.
A practical preparation plan
1. Map the complete scope
Read PAHCOM's official nine-domain outline and map each listed topic to your experience. Mark unfamiliar topics for additional study; the 60 concepts here are selective and do not exhaust the official scope.
2. Practise discriminating cues
For each concept, explain which fact changes the decision: service date, modifier indicator, disclosure purpose, employer coverage, offer stage, workweek, contract role, testing method or reporting entity. Then explain why a tempting alternative fails.
3. Work the financial calculations
Recalculate the payroll, working-capital, receivable-days, break-even and hypothetical incentive examples with changed inputs. State the units, period and assumptions before calculating, and interpret the management implication after obtaining the number.
4. Trace an administrative workflow
Follow one claim, accommodation request, vendor incident, outage or referral from initiation through resolution. Identify the responsible person, required evidence, decision point and confirmation that the issue actually closed.
5. Use the drills diagnostically
Answer all 20 questions independently, then review every alternative in each explanation. Categorize errors by mechanism, calculation, program identity or unsupported assumption, and revisit the corresponding concepts and primary references.
6. Rehearse concise decisions
Use the flashcards for active recall and explain each decision aloud in a few sentences. State the controlling rule, identify the decisive fact and explain why a tempting alternative fails. Revisit any rule you cannot apply confidently to a changed scenario.
Use your sample score as a starting point
The free set contains 20 original practice questions. It is a small learning sample, not an official examination or a validated pass prediction. Review each explanation and its source before moving to another topic.
Start the free sampleOfficial sources and updates
- Certified Medical Manager | CMM — PAHCOM
- The 9 Domains — PAHCOM
- Medicare NCCI FAQ Library — CMS
- Health Care Payment and Remittance Advice — CMS
- Minimum Necessary Requirement — HHS
- General Compliance Program Guidance, November 2023 — HHS-OIG
- The Effect of Exclusion From Participation in Federal Health Care Programs — HHS-OIG
- Pre-Employment Inquiries and Disability — EEOC
- Fair Labor Standards Act Advisor: When is overtime pay due? — U.S. Department of Labor
- Break-even Point — U.S. Small Business Administration
- Glossary of Business Financial Terms — U.S. Small Business Administration
- Business Associate Contracts — HHS
- 29 CFR 1910.1030: Bloodborne Pathogens — OSHA
- For Laboratory Directors — CMS
- Fact Sheet: Ransomware and HIPAA — HHS
- Guidance on Risk Analysis — HHS
- Quality Measures Inventory — CMS
- Tool: Teach-Back — AHRQ
- Marketing — HHS
- Breach Notification Rule — HHS
- Enforcement Guidance on Reasonable Accommodation and Undue Hardship under the ADA — EEOC
- Summary of the HIPAA Security Rule — HHS
- Transitioning from PQRS to MIPS — CMS
- Promoting Interoperability Program — CMS
- Health Literacy Universal Precautions Toolkit, 3rd Edition — AHRQ
- Communicate Clearly: Tool 4 — AHRQ
- Follow Up with Patients: Tool 6 — AHRQ
- Make Referrals Easy: Tool 21 — AHRQ
- Talk About Costs: Tool 23 — AHRQ
- Proper Use of Modifiers 59, XE, XP, XS & XU, April 2026 — CMS
- Coverage of Business/Private Employers | U.S. Equal Employment Opportunity Commission
- qso-25-10-clia-revised-2025-06-23.pdf
- cms_inventory_user_guide.pdf
Confirm current eligibility, fees, scheduling and policies directly with the examination provider. CertMedbry is independent and is not endorsed by these organisations. How we handle content and corrections.