Allied Health & Imaging · Independent exam preparation

Certified Ophthalmic Executive: Practice Management Guide Study Guide

Practise financial analysis, patient-flow improvement, staffing decisions, data protection, and compliance judgments across the six COE practice-management domains.

By CertMedbry · Updated 31 October 2026

60 concepts explainedWorked examples & common pitfallsOfficial blueprint references

Learn to distinguish profit from cash, test service-line feasibility, diagnose workflow delays, evaluate staff fairly, protect patient information, and recognize ophthalmic symptoms requiring urgent clinical assessment. These 60 selected concepts connect management principles with practical decisions in an ophthalmic organization. Use the official COE Test Specifications as the full scope: this guide provides focused instruction across every domain, rather than exhaustive coverage of every listed task.

Try 20 free practice questions

What is the exam format?

Check the question types, timing and outline before planning your revision.

Who governs COE, and who handles testing?

The National Board for the Certification of Ophthalmic Executives administers the credential within ASOA. ASOA identifies IJCAHPO as its testing agent; Pearson VUE identifies JCAHPO as the testing coordinator. Pearson VUE testing centers provide examination delivery. These roles concern the same COE credential.

Certified Ophthalmic Executive Certificate Program · COE Certification Eligibility and Exam Information · Certified Ophthalmic Executive (COE) Testing

Which blueprint does this guide follow?

The ASOA-linked COE Test Specifications are dated May 2019. They assign General Ophthalmic Knowledge 10%, Financial Management 22%, Operations 22%, Information Technology Management 12%, Human Resources 18%, and Risk Management & Regulatory Compliance 16%. The document gives a publication month, without a separate effective date. It is the specification identified through ASOA's current eligibility page; a newer specification was not established.

COE Test Specifications — May 2019 · COE Certification Eligibility and Exam Information

How many examination questions are scored or unscored, and how long is the examination?

The cited official materials do not establish the total question count, the scored-versus-pretest split, or the examination duration. Consult the examination instructions accompanying authorization for those details. The 20 questions in this guide are independent learning exercises and do not represent the examination's length.

COE Certification Eligibility and Exam Information · Certified Ophthalmic Executive (COE) Testing

What delivery method, item styles, and adaptivity are verified?

ASOA confirms delivery at Pearson VUE testing centers after examination authorization. The cited materials do not establish an adaptive algorithm or a complete inventory of item styles. This guide uses four-option, single-best-answer drills; that educational format should not be treated as a verified description of every official examination item.

COE Certification Eligibility and Exam Information · Certified Ophthalmic Executive (COE) Testing

Who is eligible, and is there another credential pathway in this guide?

ASOA describes applicants as directly involved in managing an ophthalmic organization providing patient care. Its standard criteria require at least two years of health care experience plus one or more years of ophthalmic management experience, with the cumulative three years occurring within the preceding five calendar years and experience across all six domains. ASOA membership is not required. NBCOE also considers special consideration requests individually; this is an eligibility review for COE, not a separate examination or apprentice credential.

COE Certification Eligibility and Exam Information

How should candidates use the guide and practice scores?

The guide allocates 6, 13, 13, 7, 11, and 10 concepts to the six domains in official outline order. Questions and flashcards each allocate 2, 4, 5, 2, 4, and 3 items respectively. These rounded distributions approximate the blueprint. Drill results identify topics for further study; they do not predict certification success or establish an official passing score.

COE Test Specifications — May 2019

COE is an ophthalmic practice-management credential administered by NBCOE within ASOA. This independent guide addresses that management pathway, with U.S. regulatory contexts identified where relevant. It does not confer clinical licensure or authority to diagnose, prescribe, or perform procedures.

Outline used: COE Test Specifications, dated May 2019, successfully opened through the current ASOA certification eligibility page on 2026-10-13. The document states its publication month but no separate effective date. It remains the outline linked by ASOA; no newer official specification was identified. The workbook label matches the verified credential name, and the assigned slug is preserved.

60 key concepts: understand, apply and avoid the traps

Work through the questions by exam domain. Explain the answer in your own words, try the example, then check the common pitfall.

General Ophthalmic Knowledge10%

1.How does the retina turn light into useful vision?

The cornea and lens help focus incoming light onto the retina, the light-sensitive tissue at the back of the eye. Retinal cells convert light into electrical signals that travel through the optic nerve to the brain, where visual information is interpreted. This sequence distinguishes an optical focusing problem from a problem involving retinal signal generation or transmission. An administrator needs this distinction to understand service pathways and communicate accurately, while leaving diagnosis to qualified clinicians.

Apply it

A staff handout describes the retina as the eye's focusing lens. Revise it to explain that the lens focuses light and the retina converts that light into signals, then have the clinical team approve the wording.

Common pitfall: Do not describe every visual complaint as a lens problem. Clear optical structures cannot guarantee normal vision when retinal tissue or the visual pathway is impaired.

How the Eyes Work — National Eye Institute

2.Which symptoms suggest a retinal emergency?

A sudden increase in floaters, flashes of light, or a curtain-like shadow across vision can indicate retinal detachment. Detachment separates the retina from its normal position and threatens vision; prompt assessment is necessary even when pain is absent. Administrative triage should recognize the symptom pattern, use the practice's urgent escalation pathway, and connect the patient with immediate clinical assessment. Staff should record the patient's description and timing without attempting to diagnose the cause themselves.

Apply it

A caller reports new flashes and a dark curtain since breakfast but asks for next month's routine appointment. Activate the urgent clinical triage pathway immediately and document the symptoms, onset, and handoff to the receiving clinician.

Common pitfall: Absence of pain does not make sudden visual symptoms routine. Reassurance based only on comfort can delay assessment of a potentially vision-threatening condition.

Retinal Detachment — National Eye Institute

3.What distinguishes cataract from retinal disease?

A cataract is clouding of the eye's lens, which can cause blurred vision, glare, faded colors, and difficulty with everyday activities. The affected structure is the lens rather than the retina. Cataract surgery removes the cloudy lens and usually replaces it with an artificial intraocular lens. Recognizing the structure and procedure helps managers understand counseling, scheduling, and supplies. Sudden flashes or a curtain-like shadow require a different triage response from a routine cataract discussion.

Apply it

A scheduling coordinator calls cataract surgery a retinal replacement. Correct the service description to removal of the cloudy natural lens with placement of an intraocular lens, and review the patient-facing terminology with the surgical team.

Common pitfall: Do not assume all blurred vision is cataract or that cataract surgery repairs retinal disease. Symptoms require clinical evaluation before a treatment pathway is selected.

Cataracts — National Eye Institute · Retinal Detachment — National Eye Institute

4.How do visual acuity testing and a dilated examination differ?

Visual acuity testing measures how clearly a person sees details under specified testing conditions. A dilated eye examination enlarges the pupil so the clinician can examine internal eye structures more fully. These activities provide different information: a reading on an eye chart does not establish the condition of the retina or exclude every eye disease. For management decisions, the distinction matters when building visit templates, estimating examination time, and explaining why additional evaluation may be necessary.

Apply it

A proposed visit template removes dilation whenever the patient reads the chart well. Ask the clinical lead to define examination requirements by clinical indication, then build scheduling assumptions around the approved pathway rather than acuity alone.

Common pitfall: A good chart result is not a complete eye-health assessment. Avoid allowing an administrative efficiency rule to substitute for the clinician's examination decision.

Cataracts — National Eye Institute · Retinal Detachment — National Eye Institute

5.Why do dilating drops affect visit planning?

Dilating drops enlarge the pupil to improve the clinician's view inside the eye. Dilation can temporarily blur vision and increase sensitivity to light, so its effects extend beyond the examination itself. Managers should support clinically approved preparation instructions, adequate workflow time, and appropriate transportation counseling. The operational decision concerns preparation and access, while selection of the medication, assessment of contraindications, and management of adverse effects belong to qualified clinical personnel under established protocols.

Apply it

Patients arriving for planned dilation say they were unaware their vision might blur afterward. Revise the reminder process with clinician-approved instructions about expected effects and arranging a ride, then check whether patients receive and understand the information.

Common pitfall: Do not promise that every patient can drive immediately afterward or give individualized drug advice. Standard instructions must preserve access to clinical assessment when questions arise.

Cataracts — National Eye Institute · Retinal Detachment — National Eye Institute

6.When does cataract care move from optical support to surgery?

Early cataract-related difficulties may be helped by updated glasses, brighter lighting, or other practical adjustments. Surgery is the treatment that removes a cataract, and the decision considers how vision affects daily activities alongside the clinician's assessment. An administrator should distinguish supportive optical services from the surgical pathway and ensure appropriate counseling and follow-up capacity. The presence of a cataract alone does not establish that every patient needs immediate surgery or the same service package.

Apply it

An optical employee tells every patient with cataract that glasses are useless. Replace that script with an approved explanation that visual aids may help some difficulties, while the clinician evaluates functional limitations and whether surgery is appropriate.

Common pitfall: Avoid using the diagnosis alone as a sales or scheduling trigger. Functional impact and clinical evaluation matter more than a uniform administrative rule.

Cataracts — National Eye Institute

Financial Management22%

7.Which financial statement answers each management question?

The balance sheet presents assets, liabilities, and owners' equity at a point in time. The income statement presents revenue, expenses, and resulting profit or loss over a period. The cash flow statement explains changes in cash through operating, investing, and financing activities. Managers should choose the statement that matches the question, then connect the statements rather than treating them as interchangeable. A profitable period can still coincide with a cash shortage or substantial outstanding obligations.

Apply it

Owners ask whether the practice earned a profit last quarter and whether it can fund next week's payroll. Review the quarterly income statement for profitability and current cash information with near-term obligations for the payroll decision.

Common pitfall: A bank balance does not measure period profit, and an income statement does not by itself show available cash or all balance-sheet obligations.

Beginners' Guide to Financial Statement

8.Why can accrual profit increase while cash falls?

Accrual accounting recognizes revenue when earned and expenses when incurred, rather than waiting for the related cash movement. Consequently, services can increase reported revenue while the associated receivables remain unpaid. Cash also changes through activities such as equipment purchases and debt repayment that do not match current-period operating expense dollar for dollar. The discriminating question is whether a reported amount represents performance, an asset or obligation, or an actual cash movement during the period.

Apply it

The practice records $80,000 of earned service revenue but collects $50,000 during the month. Explain that the remaining $30,000 increases receivables under the stated assumptions; reported revenue and cash collections therefore answer different questions.

Common pitfall: Do not conclude that rising profit guarantees improving liquidity. Collection delays and other cash uses can offset growth in reported earnings during the same period.

Beginners' Guide to Financial Statement

9.How does working capital reveal short-term financial pressure?

Working capital equals current assets minus current liabilities. It provides a starting view of resources available relative to obligations expected in the near term, but the composition of those assets matters. Cash is immediately usable; receivables depend on collection, and some recorded balances may be difficult to realize promptly. A manager should interpret working capital alongside cash forecasts, receivable quality, and payment timing. A positive total does not eliminate the possibility of a payroll or vendor-payment shortfall.

Apply it

Current assets total $240,000 and current liabilities total $190,000, giving $50,000 working capital. Because most assets are overdue receivables, prepare a collection-sensitive cash forecast before authorizing an additional purchase due next week.

Common pitfall: Treating all current assets as equivalent to cash hides collection risk. Working capital is a liquidity indicator, not a guarantee that specific payments can be made.

Beginners' Guide to Financial Statement

10.How should operating margin be interpreted?

Operating margin expresses operating income as a percentage of revenue. Using consistent definitions, divide operating income by revenue and multiply by 100. It shows how much operating income remains from each revenue dollar after operating expenses. Interpretation requires comparable periods and accounting classifications: financing costs, unusual transactions, or inconsistent physician-compensation treatment can distort comparisons. A manager should examine both the percentage and underlying dollar changes before deciding whether performance improved or costs require intervention.

Apply it

Revenue rises from $500,000 to $600,000 while operating income remains $60,000. Margin falls from 12% to 10%. Investigate the added expense supporting growth rather than reporting the revenue increase alone as improved operating performance.

Common pitfall: Higher revenue does not necessarily mean better operating efficiency. Comparisons become misleading when different practices or periods classify major expenses inconsistently within operating results.

Beginners' Guide to Financial Statement

11.How do volume and unit cost explain a budget variance?

A budget variance is the difference between an actual result and its planned amount. Interpretation requires identifying the driver rather than labeling every overspend as poor performance. Variable supply expense can rise because more visits occurred, because cost per visit increased, or because both changed. Comparing actual spending with the cost expected at actual activity helps separate volume effects from unit-cost effects. Fixed expenses require a different comparison because they do not necessarily change with each additional visit.

Apply it

Supplies were budgeted at $10 for each of 1,000 visits. Actual activity was 1,200 visits costing $12,600. At actual volume, expected cost was $12,000, leaving $600 to investigate beyond the volume-related increase.

Common pitfall: Comparing actual expense only with the original total budget can misclassify productive growth as waste. Confirm the cost's behavior before interpreting the variance.

COE Test Specifications — May 2019 · Plan your business — Small Business Administration

12.What makes an accounts-receivable report actionable?

Accounts receivable represents amounts owed to the practice. An actionable review separates balances by age, payer or responsible party, and identifiable collection barrier rather than relying on one total. Older balances may reflect denials, missing information, unresolved patient responsibility, or other workflow failures. Management should assign follow-up ownership and investigate recurring causes while preserving an audit trail. The key distinction is between revenue recorded and cash reasonably expected, supported by the status of the underlying claims.

Apply it

Total receivables remain stable, but balances over 90 days rise for one payer. Assign a focused review of those claims, identify the recurring documentation or processing issue, and track both resolution and recurrence in subsequent reports.

Common pitfall: A stable total can conceal worsening collectability. Repeatedly resubmitting claims without identifying the barrier may create activity while leaving the underlying collection problem unresolved.

COE Test Specifications — May 2019 · Beginners' Guide to Financial Statement

13.How should a practice plan accounts-payable cash needs?

Accounts payable records obligations to vendors and other creditors. Payment planning connects verified invoices, contractual due dates, available cash, and the operational consequences of delay. A weekly cash forecast should distinguish amounts already owed from proposed purchases and should incorporate expected collections conservatively. Managers can negotiate terms or schedule discretionary spending when a shortfall appears, while maintaining authorization and reconciliation controls. Delaying every payment equally can damage essential services without addressing the source of the cash constraint.

Apply it

A forecast shows payroll and a critical equipment-service invoice exceed expected cash by $12,000. Verify the obligations, review collection timing, and negotiate permissible payment arrangements before committing cash to a discretionary office renovation.

Common pitfall: An expense's appearance on a report does not establish its payment deadline. Conversely, an unpaid invoice may remain a real obligation even before cash leaves.

COE Test Specifications — May 2019 · Beginners' Guide to Financial Statement

14.How is break-even volume calculated?

For a simplified single-service model, break-even volume equals fixed costs divided by contribution margin per service. Contribution margin is net revenue per service minus variable cost per service. Fixed costs remain constant within the stated activity range, while variable costs change with service volume. The model requires explicit assumptions about collections, capacity, and cost behavior. If contribution margin is zero or negative, increasing volume cannot cover positive fixed costs under those assumptions; the economics must change.

Apply it

An added service has monthly fixed costs of $18,000, net revenue of $150 per completed visit, and variable cost of $60. Contribution is $90, so 200 completed visits cover the stated fixed costs.

Common pitfall: Dividing fixed costs by gross charges overstates economic feasibility when collections are lower. Use net revenue and include every relevant variable cost consistently.

Plan your business — Small Business Administration

15.Why should feasibility analysis test more than one forecast?

A feasibility analysis connects expected demand, achievable capacity, revenues, costs, and timing. A base-case estimate alone can hide dependence on optimistic assumptions. Sensitivity analysis changes important inputs, such as collected revenue or completed volume, to show how the result responds. Separate the economic question of whether a service can earn an adequate return from the cash question of whether the practice can fund startup and ramp-up. A profitable mature service may still require substantial initial financing.

Apply it

A proposed diagnostic service breaks even at 240 visits monthly, but the referral estimate ranges from 150 to 300. Model both ends, include the ramp-up period, and compare required volume with available staffing and equipment capacity.

Common pitfall: A spreadsheet's precise output does not make uncertain assumptions reliable. Avoid approving expansion solely because one favorable demand estimate produces a positive annual result.

Plan your business — Small Business Administration · Beginners' Guide to Financial Statement

16.How should payer contracts be compared?

A payer contract affects more than its headline reimbursement figure. Compare payment terms using the practice's expected service mix, then examine coverage conditions, authorization requirements, payment timing, termination provisions, and administrative workload. A high allowance for a rarely performed service can coexist with poor overall economics. The useful comparison estimates expected collections and operational demands for the actual patient population. Clinical documentation and coverage requirements remain relevant even when a contract's fee schedule appears financially attractive.

Apply it

One payer offers higher rates for an uncommon procedure but lower rates for the practice's frequent visits. Weight each allowance by expected service volume, then compare authorization workload and payment provisions before recommending participation.

Common pitfall: Do not compare contracts using one attractive code or gross charges. An apparently better fee schedule may perform worse for the practice's actual service mix.

COE Test Specifications — May 2019

17.What belongs in a vendor's total-cost comparison?

Vendor evaluation should compare the full cost and service obligation over a common period. Include acquisition or subscription charges, implementation, required consumables, maintenance, interfaces, training, support, and exit or renewal terms where applicable. Use the same operational assumptions for each proposal so that differences reflect the offers rather than inconsistent estimates. Contract review should also identify responsibilities, service levels, and remedies. The lowest initial price can be offset by recurring costs or operational limitations that reduce value.

Apply it

Two imaging systems differ by $8,000 in purchase price. Build a five-year comparison including required supplies, maintenance, interface charges, training, and expected downtime before treating the cheaper acquisition as the less costly choice.

Common pitfall: A purchase price is not total ownership cost. Unexamined renewal, consumable, or interface terms can reverse the ranking of otherwise comparable proposals.

COE Test Specifications — May 2019 · Plan your business — Small Business Administration

18.Why separate authorization, custody, and recording?

Segregation of duties reduces the opportunity for one person to initiate an improper transaction and conceal it. Authorization, asset custody, transaction recording, and independent review should be separated where practical. Small practices may need compensating controls, such as owner review of bank activity and supporting records, when staffing prevents complete separation. The objective is a control design matched to the risk, not simply adding signatures. GAO's framework provides general control principles rather than private-practice legal requirements.

Apply it

One employee creates vendors, approves invoices, releases payments, and reconciles the bank account. Reassign payment approval and independent reconciliation review, with supporting documentation available to the reviewer, to reduce the employee's ability to conceal an unauthorized payment.

Common pitfall: Trust and long service do not replace controls. A second signature adds little protection if the signer cannot inspect the transaction's purpose and supporting evidence.

Standards for Internal Control in the Federal Government — May 2025

19.How do preventive and detective financial controls differ?

Preventive controls aim to stop an error or improper action before it occurs, such as requiring approval before a payment is released. Detective controls identify problems after processing, such as reconciling bank activity with recorded transactions. Effective systems often combine both because neither provides complete assurance alone. A reconciliation must investigate differences, document resolution, and receive appropriate review. Merely producing a report does not establish that a control operated or that identified discrepancies were addressed.

Apply it

A practice requires approval before refunds and independently compares issued refunds with approved requests each month. Classify approval as preventive and the comparison as detective, then specify who investigates mismatches and documents the final resolution.

Common pitfall: Calling a report a control is insufficient when nobody reviews it. Control effectiveness depends on the action, evidence, timeliness, and response to exceptions.

Standards for Internal Control in the Federal Government — May 2025

Operations22%

20.How does a strategic goal become an operational commitment?

A strategic plan connects the practice's mission and desired future with explicit priorities, resources, and measurable objectives. A useful objective identifies the intended population or service, the result to improve, the amount of improvement, and the time frame. Operational commitments then assign an accountable owner and resources. The discriminating test is whether leaders can tell what success looks like and who will act. An attractive statement without measurement or ownership cannot reliably guide competing daily decisions.

Apply it

Leaders want better access for established patients. Convert that aim into a defined reduction in appointment delay over a stated period, assign an owner, and specify how urgent access and staff workload will be monitored.

Common pitfall: A mission statement alone is not an implementation plan. Avoid approving multiple priorities without deciding which resources, measures, and accountable owners each priority requires.

COE Test Specifications — May 2019 · Model for Improvement

21.Which factors belong in each part of a SWOT analysis?

SWOT distinguishes internal strengths and weaknesses from external opportunities and threats. An experienced clinical team is an internal strength; a local shortage of a service may create an external opportunity. Classification matters because management can directly change some internal conditions while needing to respond to outside forces. A useful analysis proceeds to decisions: leverage strengths, address weaknesses, assess opportunities, and mitigate threats. Listing factors without evaluating their importance or linking them to action produces little strategic value.

Apply it

The practice has unused space, limited technician coverage, and a growing nearby population. Classify space as a potential strength, staffing as a weakness, and population growth as an opportunity before assessing whether expansion is operationally feasible.

Common pitfall: Do not classify a desired future improvement as an existing strength. SWOT should describe the current situation and external environment before management selects a strategy.

COE Test Specifications — May 2019

22.How do milestones and dependencies make projects manageable?

A project translates a defined goal into deliverables, responsible people, dependencies, and completion criteria. A milestone marks a meaningful result, such as successful interface testing, rather than vague activity such as working on technology. Dependencies identify work that must precede other work. Tracking them helps managers distinguish a local delay from a problem that threatens the entire launch. Decisions should respond to evidence of readiness, including staff capability and safe workflows, rather than a calendar date alone.

Apply it

A new optical service is scheduled to open before equipment installation and staff training are complete. Map those dependencies, assign owners and acceptance criteria, and revise the launch decision around demonstrated readiness rather than advertising commitments.

Common pitfall: A task marked complete may still lack an accepted deliverable. Do not confuse effort, elapsed time, or a scheduled opening date with operational readiness.

COE Test Specifications — May 2019 · Model for Improvement

23.How does a swim-lane map expose handoff failures?

A workflow map shows the sequence of actual work, including decisions, loops, delays, and handoffs. Swim lanes place activities under the roles responsible for performing them, making unclear ownership and duplicated work visible. Map the current process with the people doing it before designing a future process. A handoff deserves attention when information, responsibility, or acceptance is unclear. Mapping is diagnostic: it reveals where a change may help, but evidence is still needed to test the proposed improvement.

Apply it

Surgical scheduling repeatedly stalls after consent. Map the process across clinician, scheduler, authorization staff, and patient lanes. Identify who sends the readiness information, who confirms receipt, and where incomplete cases return for correction before testing a revised handoff.

Common pitfall: Mapping the written policy instead of actual work can hide workarounds. Include frontline staff and real cases so the diagram reflects the process being improved.

How to Map Workflows in Health Care Settings

24.How should staffing address a workflow bottleneck?

A bottleneck is the step whose effective capacity limits the flow of the overall process. Adding resources elsewhere may increase queues without increasing completed visits. Compare demand and capacity at relevant times, including task duration, skill requirements, equipment availability, and variation in arrivals. Staffing decisions should target the limiting work and preserve clinical quality. The correct unit is often workload by time and role, rather than a single practice-wide employee-to-physician ratio that ignores the service mix.

Apply it

Patients wait for imaging while examination rooms remain open. Measure imaging demand and available trained-operator time by hour before adding front-desk staff; then test whether shifting qualified coverage to the congested period improves completed visits.

Common pitfall: More staff at the easiest hiring point may not improve throughput. Determine where flow is constrained before treating total headcount as the solution.

How to Map Workflows in Health Care Settings · COE Test Specifications — May 2019

25.Why do operational reports need stable denominators?

Operational measures become interpretable when their numerator, denominator, time period, and inclusion rules are explicit. Ten scheduling errors among 100 appointments indicate a different rate from ten among 1,000. Comparisons also require similar case mix, available hours, and data definitions. Managers should pair totals with relevant rates and investigate changes rather than assuming the number alone explains performance. A measure's usefulness depends on whether it answers a decision question consistently across locations and reporting periods.

Apply it

One location reports 18 missed appointments and another reports 30. Obtain total scheduled appointments and use the same missed-appointment definition before ranking performance; a larger count may reflect a larger appointment base rather than a worse rate.

Common pitfall: Raw counts can reward low activity or penalize growth. Changing inclusion rules between months can also create an apparent improvement without a real process change.

Model for Improvement: Establishing Measures · COE Test Specifications — May 2019

26.Which measures show results, implementation, and unintended effects?

Outcome measures show whether the intended result improved. Process measures show whether the planned activities occurred. Balancing measures detect consequences elsewhere in the system. For an access project, appointment delay may be an outcome, use of a new scheduling process a process measure, and staff overtime a balancing measure. These roles depend on the project's aim. A complete measurement family helps distinguish an ineffective change from incomplete implementation and prevents a narrow success from concealing harm elsewhere.

Apply it

A practice tests evening appointments to reduce access delays. Track days to appointment, the proportion of evening slots actually offered under the plan, and overtime hours so leaders can evaluate the result, implementation, and staffing consequences.

Common pitfall: Improved compliance with a new process does not prove the desired outcome improved. Conversely, an outcome change alone does not reveal whether implementation was reliable.

Model for Improvement: Establishing Measures

27.How does a PDSA test support a better rollout decision?

Plan-Do-Study-Act uses a small, explicit test to learn whether a proposed change works in the local setting. Plan the change, prediction, responsibilities, and observations; carry it out; compare results with the prediction; then adapt, adopt, or abandon the approach. Starting small limits disruption and reveals workflow conditions before expansion. Repeated cycles build knowledge across different staff, times, and patient groups. A promising first test supports further learning rather than automatic practice-wide implementation.

Apply it

Test a revised reminder script with one scheduler during one clinic session. Predict fewer preparation questions, record call duration and patient responses, and use the findings to revise the script before testing it with additional staff.

Common pitfall: Announcing a permanent rollout and reviewing complaints afterward is not a small learning test. Define predictions and observations before implementation so the results are interpretable.

Plan-Do-Study-Act Worksheet, Directions, and Examples · Model for Improvement

28.How can training demonstrate that a policy works in practice?

A policy states expectations, while a procedure explains how work is performed. Training should connect both to the employee's actual tasks and include a way to demonstrate correct execution. Attendance or a signed acknowledgment establishes exposure, not reliable performance. Observed practice, realistic cases, and subsequent process measurement help identify whether instructions are unclear, resources are missing, or skills need reinforcement. Patient feedback can reveal communication gaps that staff may overlook when designing instructions from their own perspective.

Apply it

Staff have signed a new check-in policy, yet patients still receive inconsistent instructions. Observe sample encounters, ask patients about unclear steps, and use short practice scenarios to confirm employees can apply the procedure before repeating the acknowledgment process.

Common pitfall: Repeating the same presentation may not fix a process barrier. Determine whether the problem is knowledge, workflow design, resources, or unclear responsibility before selecting retraining.

COE Test Specifications — May 2019 · Get Patient Feedback: Tool 17

29.How should a replenishment trigger reflect lead time?

Inventory replenishment should account for expected use while an order is being filled, plus an explicitly chosen buffer for uncertainty. In a simplified model, the trigger equals average daily use multiplied by replenishment lead time, plus safety stock. The calculation requires consistent units and a clear definition of the stock position being monitored. Managers should also consider expiration, storage constraints, and variable demand. A low purchase price provides little value if supplies expire or shortages interrupt care.

Apply it

A supply is used at 12 units per day, delivery takes five days, and policy requires a 20-unit buffer. With no outstanding orders or backorders, reorder when usable stock reaches 80 units under this simplified trigger.

Common pitfall: Ordering only when shelves look nearly empty ignores lead time. Conversely, excessive buffering can tie up cash and increase expiration without proportionate protection against shortages.

COE Test Specifications — May 2019

30.Why do equipment-service terms matter to clinic capacity?

Equipment and facilities management links maintenance, service contracts, and contingency arrangements to safe service continuity. A contract's response time, repair responsibilities, exclusions, replacement provisions, and support availability influence how long a failure can disrupt care. Managers should identify services that depend on each critical asset and establish an approved alternative workflow. Maintenance records also support accountability and planning. The appropriate decision evaluates operational exposure and total cost, rather than assuming that owning equipment or purchasing a warranty guarantees availability.

Apply it

A critical imaging device has next-day telephone support but no defined onsite response. Before renewing, compare actual service needs with the contract and establish how affected patients will be managed during a prolonged outage.

Common pitfall: A service contract's title does not establish its coverage. Read exclusions and response commitments before assuming the practice has protection against clinically significant downtime.

COE Test Specifications — May 2019

31.When does an ancillary service fit the practice strategy?

An ancillary service should meet a defined patient or organizational need, align with the strategic plan, and be supportable operationally and financially. Evaluate demand, workflow, staffing competencies, facilities, equipment, oversight, and applicable regulatory requirements together. A positive revenue forecast is insufficient if the service displaces essential capacity or depends on unavailable expertise. Patient and referral feedback can test assumptions about unmet need. The decision should specify what successful integration looks like and how performance will be reviewed.

Apply it

Leaders propose expanding optical services because nearby demand appears strong. Validate demand through representative feedback, assess space and qualified staffing, and model the effect on existing patient flow before approving the expansion and its performance measures.

Common pitfall: An attractive market opportunity does not establish internal readiness. Avoid evaluating a service as a standalone revenue stream when it competes for shared staff, space, or equipment.

COE Test Specifications — May 2019 · Get Patient Feedback: Tool 17

32.How should marketing return be measured?

Marketing evaluation connects a defined audience and campaign objective with traceable results. Leads, scheduled appointments, completed visits, and financial contribution measure different stages and should not be substituted for one another. Define the return calculation before comparing campaigns, including attribution period and which costs are included. For a contribution-based calculation, subtract campaign cost from attributable contribution before dividing by campaign cost. Patient acquisition volume alone cannot show whether a campaign generated sufficient value or reached the intended population.

Apply it

A campaign costs $4,000 and produces $10,000 in attributable contribution before campaign expense. Under the stated definition, return is ($10,000 minus $4,000) divided by $4,000, or 150%; verify attribution before using that result for expansion.

Common pitfall: Clicks and gross billed charges are not interchangeable with completed visits or financial return. Inconsistent attribution rules can make campaign comparisons appear more precise than they are.

Manage your business — Small Business Administration · COE Test Specifications — May 2019

Information Technology Management12%

33.How do clinical and practice-management systems serve different needs?

An electronic health record supports clinical documentation and related care information, while a practice-management system commonly supports scheduling, registration, billing, and administrative workflows. Image-management systems organize diagnostic images and their association with patients and encounters. Implementations can combine these functions, so evaluation should follow actual capabilities rather than product labels. Managers need to identify the authoritative source for each data element and the handoffs between systems. Overlapping functions without clear ownership can create conflicting records and reconciliation work.

Apply it

A replacement system handles clinical notes but lacks a required billing workflow. Build a function-by-function requirements map covering scheduling, documentation, claims, and images before assuming that purchasing an EHR replaces every administrative application.

Common pitfall: A vendor's broad product name does not prove that all needed functions are included. Verify workflows, interfaces, and responsibilities using the practice's actual requirements.

COE Test Specifications — May 2019

34.How should an ophthalmic equipment interface be validated?

An interface transfers information between systems, but successful transmission alone does not establish correct clinical association or completeness. Validation should check patient and encounter matching, expected data content, transfer status, and handling of failures or duplicates. Establish who reviews exceptions and reconciles source activity with destination records. Protecting integrity means preventing or detecting improper alteration and misassociation as well as preserving availability. A working connection therefore requires both technical testing and a defined operational response to mismatched or missing information.

Apply it

An imaging device reports successful exports, yet several studies are absent from the intended encounters. Compare source studies with destination records, verify identifiers, and test exception routing before declaring the interface ready for routine clinical use.

Common pitfall: A successful connection test can miss wrong-patient association or incomplete data. Do not equate a green transmission indicator with end-to-end workflow validation and clinical usability.

COE Test Specifications — May 2019 · Summary of the HIPAA Security Rule

35.What changes when systems move from onsite servers to the cloud?

Cloud and onsite architectures allocate infrastructure and operational responsibilities differently, but neither eliminates the practice's need to assess security and continuity. Compare connectivity dependence, support responsibilities, access controls, backup arrangements, recovery capability, and contractual commitments. A cloud-hosted application can still become unavailable to staff when local internet access fails. An onsite server can still depend on external services. The discriminating question is which party performs each safeguard and how the practice verifies that its operational needs are met.

Apply it

A cloud proposal promises server maintenance but says little about internet outages or data restoration. Document responsibility for connectivity, backup, recovery, and access administration, then evaluate whether the combined arrangement supports the practice's required workflows.

Common pitfall: Hosting location is not a security guarantee. Outsourcing infrastructure does not automatically transfer every responsibility for patient information, user access, contingency planning, or service continuity.

COE Test Specifications — May 2019 · Summary of the HIPAA Security Rule

36.How do confidentiality, integrity, and availability differ?

Confidentiality protects information from unauthorized access or disclosure. Integrity protects it from improper alteration or destruction. Availability means authorized users can access and use information when needed. The HIPAA Security Rule addresses all three for electronic protected health information in covered settings. One event may threaten several objectives, but distinguishing them helps select safeguards. Restricting access may improve confidentiality while creating an availability problem if legitimate clinical users cannot obtain needed information during patient care.

Apply it

An interface places a correct image in the wrong patient's chart while the system remains online. Treat the misassociation primarily as an integrity problem, investigate any disclosure implications, and correct the workflow rather than measuring uptime alone.

Common pitfall: Security is broader than secrecy. A system can prevent outside access yet still fail patients through corrupted information or unavailable records during essential work.

Summary of the HIPAA Security Rule

37.How does a security risk analysis guide safeguards?

For a HIPAA-covered practice, risk analysis identifies electronic protected health information, relevant threats and vulnerabilities, existing safeguards, and the likelihood and impact of potential harm. Risk management then selects and implements reasonable measures to reduce identified risks. Buying a security product is not equivalent to understanding the practice's exposure. The analysis should encompass how information is created, received, maintained, and transmitted, including relevant devices and services. Changes in systems or operations can require reassessment of earlier conclusions.

Apply it

A practice adds remote access and a new imaging service. Update the information-flow inventory, assess vulnerabilities introduced by the changes, and document prioritized safeguards with owners and follow-up rather than relying on last year's unchanged checklist.

Common pitfall: A completed questionnaire does not establish that risks were evaluated or mitigated. Link identified vulnerabilities to specific decisions, implementation evidence, and reassessment of remaining exposure.

Summary of the HIPAA Security Rule

38.Why must system access follow the employee lifecycle?

Access should reflect authorized job responsibilities throughout hiring, role changes, leave arrangements, and separation. Unique user identification supports accountability, while appropriate authorization and access review reduce unnecessary exposure. Shared accounts make it harder to determine who performed an action and complicate removal of individual access. A lifecycle process should identify who approves access, who implements changes, and how completion is verified. Ending an employment relationship requires coordinated attention to applications, remote connections, devices, and other access paths.

Apply it

A billing employee transfers to reception but retains broad billing permissions. Review the new role's requirements, remove unnecessary privileges, and record approval and completion; do not wait for eventual separation to reassess the account.

Common pitfall: Disabling one application may leave remote or vendor-linked access active. Conversely, routinely sharing passwords weakens accountability even when every current user is a trusted employee.

Summary of the HIPAA Security Rule · Manage your business — Small Business Administration

39.How do backups differ from a tested recovery plan?

A backup preserves a copy of data; recovery planning establishes how essential information and operations will be restored after disruption. HIPAA contingency planning includes data backup, disaster recovery, and emergency-mode operations, with applicable implementation requirements considered. Managers should define priorities, responsibilities, acceptable disruption assumptions, and procedures for validating restored information. Testing reveals whether copies are usable and whether dependent systems can function together. A successful backup status message does not prove that the practice can resume safe operations.

Apply it

Daily backups complete successfully, but no one has restored the image archive and EHR together. Conduct an authorized recovery exercise, verify record completeness and system dependencies, and revise the emergency workflow using the observed restoration results.

Common pitfall: Do not equate possession of backup files with operational resilience. Recovery can fail because of missing dependencies, inaccessible credentials, unusable copies, or unassigned responsibilities.

Summary of the HIPAA Security Rule

Human Resources18%

40.How do essential job functions improve hiring and accommodation decisions?

A useful job description identifies the position's purpose, essential functions, responsibilities, and required competencies. Essential functions are fundamental duties rather than every incidental task historically performed by an employee. Clear functions support job-related selection and, in a covered U.S. workplace, assessment of whether an individual can perform the role with reasonable accommodation. Avoid substituting a preferred method for the actual function. The employer should understand the required result before deciding that only one way of performing it is acceptable.

Apply it

A receptionist role requires accurate patient registration, but its description specifies one particular workstation setup. Separate the essential registration function from the customary setup before evaluating an applicant's qualifications or a request for an effective alternative arrangement.

Common pitfall: A task's presence in an old description does not automatically make it essential. Examine the job's actual purpose and operational requirements rather than relying on labels.

Enforcement Guidance on Reasonable Accommodation and Undue Hardship under the ADA · COE Test Specifications — May 2019

41.Why do structured interviews improve candidate comparisons?

Structured interviews assess job-related competencies using predetermined questions and consistent evaluation standards. Candidates receive comparable opportunities to demonstrate relevant behavior, and interviewers use defined scoring criteria rather than an overall impression. Behavioral questions ask about past actions; situational questions ask how a candidate would handle a realistic job problem. Structure does not require ignoring useful clarification, but it limits arbitrary differences in assessment. OPM's method is an educational management reference, not a universal private-employer hiring mandate.

Apply it

For a scheduling role, ask every candidate how they would manage competing routine and urgent requests, then score responses against the same approved criteria for escalation, communication, and documentation rather than general conversational confidence.

Common pitfall: Asking identical questions without common scoring standards leaves substantial subjectivity. A friendly conversation or shared interests should not replace evidence of the competencies required for the role.

Structured Interviews

42.How should onboarding establish reliable performance?

Onboarding should connect role expectations with supervised practice, feedback, and evidence that the employee can perform assigned work. Begin with clear standards and resources, then assess performance in tasks relevant to the position. Employees need to know when to act independently and when to escalate. Early feedback helps distinguish a knowledge gap from unclear instructions or inadequate support. Completion of orientation paperwork establishes administrative progress, while demonstrated performance provides stronger evidence of readiness for independent duties.

Apply it

A new scheduler completes orientation but misroutes urgent symptom calls. Review the escalation standard, provide supervised scenarios and feedback, and verify correct routing before expanding independent responsibility for that task under the practice's training process.

Common pitfall: Do not treat time served or attendance as proof of competence. New employees may need task-specific support even when general orientation requirements have been completed.

Performance Management Cycle · COE Test Specifications — May 2019

43.How does effective coaching turn an error into a performance plan?

Effective coaching describes the observed behavior, explains its effect, clarifies the expected standard, and invites information about barriers. The manager and employee then identify actions, needed support, and a review point. Feedback should be timely and specific enough for the employee to change behavior. A label such as careless does not identify a correctable action. Continuing monitoring helps determine whether the issue was resolved, requires additional development, or calls for another response under applicable personnel policies.

Apply it

An employee repeatedly leaves required registration fields blank. Discuss specific examples, ask about workflow barriers, demonstrate the expected process, and agree on a short follow-up review using a defined sample of completed registrations.

Common pitfall: A vague instruction to improve attitude provides little direction. Coaching should address observable performance and verify whether the employee has the knowledge and resources to meet expectations.

Performance Management Cycle

44.What makes corrective action fair and useful?

Corrective action should connect a documented performance or conduct issue with a clear expectation and an appropriate response under established policy and applicable law. Review relevant facts, prior communication, employee explanations, and consistency with comparable situations. Documentation should distinguish observation from inference and record the expected change and follow-up. Fairness does not mean every situation receives an identical response; relevant differences matter. Managers should also recognize when an accommodation issue or other protected circumstance requires a different assessment.

Apply it

Two employees miss the same deadline, but one lacked required system access. Establish the facts before deciding on corrective action, fix the access barrier, and document the performance expectations and response appropriate to each employee's circumstances.

Common pitfall: Identical penalties can be unfair when material facts differ. Conversely, undocumented exceptions based on favoritism weaken confidence in personnel policies and make later decisions harder to explain.

Performance Management Cycle · Enforcement Guidance on Reasonable Accommodation and Undue Hardship under the ADA · COE Test Specifications — May 2019

45.How should performance evaluations use evidence across the review period?

A sound evaluation compares performance with previously communicated standards using relevant evidence from the review period. Ongoing monitoring and feedback reduce surprises and allow development before the final rating. Evidence should reflect both results and important performance dimensions such as accuracy or teamwork when those are part of the role. One recent event should not automatically outweigh the rest of the period. Clear standards and documented examples make the evaluation more useful for development and subsequent management decisions.

Apply it

A normally accurate employee made one visible error just before annual reviews. Examine the full period's quality data and documented feedback against the established standard, address the recent error specifically, and avoid allowing it to determine every rating.

Common pitfall: Recent or memorable events can dominate judgment. Do not change standards after observing results or substitute a general impression for evidence relevant to the stated expectations.

Performance Management Cycle

46.How should total compensation be compared?

Total compensation includes wages or salary together with relevant benefits, incentives, and other employer-supported components. A useful comparison defines the role, required skills, labor market, work schedule, and included benefits consistently. Internal fairness and external competitiveness are related but different questions. A practice may offer competitive cash pay yet struggle to retain staff because schedules or benefits do not meet workforce needs. Management should compare the whole package and assess affordability instead of relying on a single salary figure.

Apply it

A competing employer offers the same hourly wage but different health benefits and work hours. Compare the complete packages for similar roles and schedules, then evaluate employee priorities and practice costs before deciding whether a wage adjustment alone addresses the gap.

Common pitfall: Equal base pay does not establish equivalent compensation. Comparisons become misleading when job scope, hours, benefits, or required qualifications differ substantially between the positions being compared.

COE Test Specifications — May 2019

47.How can incentives reward performance without distorting it?

An incentive communicates which results the organization values, so its measure should align with both productivity and required quality. A volume-only reward can encourage speed at the expense of accuracy, service, or teamwork. Define eligibility, measurement, review periods, and safeguards before implementation, and assess whether employees can reasonably influence the result. Merit recognition should connect to established expectations and evidence. Monitor unintended effects rather than assuming that improved performance on the rewarded number proves overall improvement.

Apply it

A registration bonus rewards transaction count alone, and error rates rise. Redesign the plan to include accuracy expectations, test how the measures interact, and review workload differences before using the revised results for individual rewards.

Common pitfall: A simple metric can create a strong but narrow incentive. Do not reward an easily counted output while ignoring errors or burdens shifted to other employees.

Performance Management Cycle · Model for Improvement: Establishing Measures · COE Test Specifications — May 2019

48.How should a practice diagnose retention problems?

Retention analysis should identify where departures occur and test plausible causes rather than assuming compensation explains every exit. Examine tenure, role, supervisor, schedule, workload, development opportunities, and available employee feedback. Separate preventable organizational issues from reasons the practice cannot readily change. Employee development and ongoing performance conversations can reveal concerns before separation. An intervention should address the pattern supported by evidence and include a way to assess whether it improves retention without creating other operational problems.

Apply it

Most departures occur among new hires on one shift, while other teams remain stable. Compare onboarding, supervision, and workload on that shift and seek employee feedback before committing to a practice-wide pay increase as the primary solution.

Common pitfall: An exit interview is one perspective, not proof of a single cause. Avoid broad interventions that ignore a clear pattern by role, tenure, or supervisor.

COE Test Specifications — May 2019 · Performance Management Cycle

49.How should an employer evaluate a reasonable-accommodation request?

In a U.S. workplace covered by the ADA, reasonable accommodation can enable a qualified individual with a disability to perform essential job functions or access employment opportunities. The employer should engage in an individualized discussion about limitations and effective options, obtaining appropriate information when needed. An employer may choose an effective alternative rather than the employee's preferred option. Undue hardship requires a fact-specific assessment of significant difficulty or expense; inconvenience alone does not establish it.

Apply it

An employee requests an adapted workstation to perform essential registration duties. Discuss the functional limitation and effective options, assess the proposed arrangement and alternatives, and document the individualized decision rather than applying a blanket rule against equipment changes.

Common pitfall: Do not assume a request removes essential functions or automatically proves undue hardship. Evaluate effectiveness and relevant circumstances before accepting or rejecting a proposed accommodation.

Enforcement Guidance on Reasonable Accommodation and Undue Hardship under the ADA

50.How should separation protect continuity and information access?

Employee separation requires coordinated responsibility for work handoff, organizational property, records, and access termination. Personnel decisions should follow applicable law and practice policy, while the operational checklist identifies the effective time and owner of each action. Coordinate with information technology so former employees do not retain unnecessary access, and reassign unresolved patient or business work. The key management distinction is between communicating a personnel decision and completing the dependent actions that protect information and service continuity.

Apply it

A scheduler leaves with unresolved surgical cases and access to a remote application. Assign the cases to an authorized employee, coordinate account termination at the appropriate time, recover practice property, and verify completion through the separation process.

Common pitfall: An exit meeting does not complete separation controls. Unassigned work and overlooked remote access can persist after payroll or the main application account has been updated.

Manage your business — Small Business Administration · Summary of the HIPAA Security Rule · COE Test Specifications — May 2019

Risk Management & Regulatory Compliance16%

51.What makes a compliance program operational?

OIG's general guidance describes seven compliance-program elements: written policies and procedures; leadership and oversight; training and education; effective communication; enforcement through incentives and discipline; risk assessment, auditing, and monitoring; and response with corrective action. These elements should function together rather than remain documents in a binder. The guidance is voluntary and nonbinding, although underlying laws remain enforceable. An operational program gives staff a usable reporting route, assigns responsibility, and follows identified problems through investigation and correction.

Apply it

A practice has a compliance manual but no reporting channel or assigned reviewer. Establish accountable oversight, accessible communication, risk-based monitoring, and a response process so concerns produce documented assessment and corrective action rather than informal discussion.

Common pitfall: A written manual alone does not establish an effective program. Also distinguish voluntary OIG guidance from the separate legal obligations that the practice must satisfy.

General Compliance Program Guidance · HHS-OIG General Compliance Program Guidance — November 2023

52.Why does nonretaliation improve compliance reporting?

Employees are more likely to report concerns when they understand the available channels and believe good-faith reporting will not trigger retaliation. Effective communication includes a way to raise issues outside the ordinary supervisory chain when necessary, along with clear expectations for handling concerns. Confidentiality should be protected appropriately, but absolute anonymity cannot always be promised. Managers should evaluate reports on their substance and monitor for adverse treatment connected with reporting, rather than treating a concern as disloyalty.

Apply it

A billing employee fears reporting a supervisor's instruction to change claim information. Provide access to the compliance channel outside that supervisor, explain nonretaliation expectations, and ensure the concern receives appropriate assessment without requiring confrontation first.

Common pitfall: Requiring every concern to pass through the implicated supervisor can suppress reporting. Promising absolute secrecy can also create expectations that a necessary investigation cannot always meet.

HHS-OIG General Compliance Program Guidance — November 2023

53.How should a practice respond to a credible compliance concern?

A credible concern calls for timely, appropriately scoped assessment by qualified people with suitable independence. Preserve relevant information, establish what occurred, assess the extent and cause, and determine corrective steps. Depending on findings and applicable requirements, the response may involve claim correction, repayment, disclosure, training, or process redesign. Do not assume one remedy resolves every obligation. Document decisions and follow-up, then verify whether the corrective action actually prevents recurrence. The response should match the facts rather than a predetermined conclusion.

Apply it

Several claims appear to include unsupported services. Preserve the records and billing data, arrange an appropriate review of the pattern and extent, and determine required corrective actions; do not simply edit future templates and consider the matter closed.

Common pitfall: Stopping a questionable practice does not necessarily resolve past effects. Avoid destroying records, prejudging intent, or assuming retraining alone addresses financial and reporting obligations.

HHS-OIG General Compliance Program Guidance — November 2023

54.How should documentation support coding and billing?

A billed service must accurately reflect what was provided and be supported by appropriate documentation and applicable payment rules. A template, charge entry, or familiar code does not establish that the service occurred or was payable. Managers should support processes that resolve discrepancies through authorized review rather than altering records merely to justify payment. Distinguish clinical documentation, code selection, and coverage: each addresses a different question, and a correctly described service can still be subject to payer coverage conditions.

Apply it

A charge appears for a test that the clinical record does not substantiate. Hold the disputed billing action for authorized clarification and review the workflow that created the charge rather than adding unsupported text to make the record match.

Common pitfall: A checked template box is not independent proof of service. Do not treat a payer's payment as confirmation that documentation, coding, and coverage requirements were satisfied.

HHS-OIG General Compliance Program Guidance — November 2023

55.How do auditing and routine monitoring complement each other?

Monitoring provides ongoing oversight of operations, while auditing uses a defined review approach to assess compliance or control performance. A risk-based program uses both, with clear objectives, criteria, scope, and responsibility. Findings should lead to analysis of cause and extent, corrective action, and verification. A sample establishes information about the reviewed records under its design; it does not automatically prove the condition of every claim. Trend data can identify where a more focused or expanded review is warranted.

Apply it

Monthly monitoring detects rising modifier use by one service line. Define an audit question, review relevant documentation against applicable criteria, and use the findings to decide whether to expand the review, correct errors, or revise the process.

Common pitfall: Reviewing only convenient clean records can miss the identified risk. Conversely, a small targeted sample should not be presented as a statistically representative estimate without justification.

HHS-OIG General Compliance Program Guidance — November 2023

56.When does HIPAA's minimum-necessary standard apply?

For a HIPAA-covered practice, the minimum-necessary standard generally requires reasonable steps to limit protected health information used, disclosed, or requested to what is needed for the purpose. It applies to many payment and operations activities. A key exception is disclosures to, or requests by, a health care provider for treatment. That exception does not remove all other HIPAA obligations. Evaluate the purpose and applicable exception before deciding how much information to share, rather than applying one blanket disclosure rule.

Apply it

A payer requests records supporting one billed test. Identify the payment purpose and provide the information reasonably needed for that review under the applicable process, rather than automatically sending the patient's entire chart with unrelated history.

Common pitfall: Do not apply the provider-treatment exception to every request involving health care. A payer's payment review and a treating provider's clinical request have different minimum-necessary treatment.

Minimum Necessary Requirement

57.How should blood-exposure protection follow the task?

In U.S. workplaces subject to OSHA's bloodborne-pathogens requirements, protection depends on occupational exposure to blood or other potentially infectious materials. Employers assess tasks, use appropriate engineering and work-practice controls, provide suitable protective equipment, and train affected workers. PPE selection should match anticipated contact, including potential splashes to the eyes, nose, or mouth. A job title alone does not determine exposure. The practice must also have procedures for responding when an occupational exposure occurs rather than relying only on prevention.

Apply it

An employee normally assigned to reception is asked to help with a task involving possible blood splashes. Assess the task and provide required training, controls, and appropriate protection before assigning it; office-based job classification does not eliminate exposure risk.

Common pitfall: Gloves do not protect the eyes or face from splashes. Do not base protective measures solely on job title or assume all clinical tasks have identical exposure.

Worker protections against occupational exposure to infectious diseases

58.Why do referral-related financial arrangements require careful review?

The U.S. physician self-referral law (Stark law) generally prohibits a physician's referral for Medicare-payable designated health services to an entity with which the physician or an immediate family member has a financial relationship, unless an applicable exception is fully satisfied. Financial relationships include ownership, investment, and compensation arrangements. Its strict-liability framework does not require proof of prohibited intent. The Anti-Kickback Statute instead prohibits knowingly and willfully offering, paying, soliciting, or receiving remuneration to induce or reward referrals or other business reimbursable by a federal health care program.

Apply it

If a physician refers Medicare patients for designated clinical laboratory services to a laboratory owned by the physician's sister, identify the family financial relationship and determine whether an exception applies. Separately, payment for each federally reimbursed patient referred raises anti-kickback concerns because compensation is tied to generating program business.

Common pitfall: Failing an anti-kickback safe harbor does not automatically make an arrangement illegal; evaluate all circumstances, including intent. Safe harbor protection requires every condition. Fair market value alone does not establish compliance, and satisfying a Stark exception does not resolve anti-kickback requirements.

HHS-OIG General Compliance Program Guidance — November 2023

59.How should liability insurance be matched to an exposure?

Insurance selection begins with the risk being transferred, not the policy's marketing name. The COE outline distinguishes medical malpractice, workers' compensation, and general business exposures, including property and cyber risks. Review the actual policy for insured parties, covered activities, exclusions, limits, deductibles, and relevant reporting requirements. Coverage categories can overlap or leave gaps depending on wording. Insurance supports financial risk management but does not replace prevention, compliance, or incident response, and it should not be assumed to cover every regulatory consequence.

Apply it

A practice assumes its property policy covers all costs of a patient-data incident. Identify the likely loss categories and compare them with actual policy terms and exclusions, then address gaps with the broker before treating the exposure as insured.

Common pitfall: A familiar policy title does not establish coverage for a particular event. Avoid assuming one business policy covers professional negligence, employee injury, property loss, and cyber incidents alike.

COE Test Specifications — May 2019

60.How does quality assurance turn an incident into safer care?

Quality assurance should connect incident information with assessment of contributing conditions, corrective action, and follow-up measurement. Immediate response addresses the affected situation; system improvement asks why existing processes allowed it and whether similar events could recur. Review handoffs, workload, training, equipment, and controls without assuming that an individual's error explains the whole event. Outcome, process, and balancing measures help evaluate the response. An intervention is stronger when it addresses the demonstrated mechanism and is tested rather than merely announced.

Apply it

A wrong-chart near miss occurs during imaging transfer. Address the immediate records issue, examine identifiers and handoffs, test a revised verification step, and monitor both misassociation events and workflow delays before expanding the change.

Common pitfall: Retraining everyone after every incident can miss design failures. An incident count falling briefly also does not prove a corrective action is reliable or free of unintended effects.

Model for Improvement · Model for Improvement: Establishing Measures · COE Test Specifications — May 2019

What to focus on during revision

The following are CertMedbry study suggestions. Use the official outline to check the full scope of your examination.

  • Use the complete official outline to identify uncovered tasks, especially ophthalmic equipment and pharmacology, business structures and valuation, employment classifications, and named regulatory requirements.
  • Give Financial Management and Operations the greatest study time; practise explaining calculations and the decisions their assumptions permit.
  • Connect patient flow, staffing capacity, service-line feasibility, equipment reliability, and financial consequences rather than studying them as isolated lists.
  • Distinguish clinical warning-sign recognition from clinical diagnosis, and learn the administrative handoffs that protect urgent access.
  • For U.S. legal scenarios, identify the covered setting, purpose of the activity, applicable rule, exceptions, and facts that change the analysis.
  • Use IT cases to distinguish confidentiality, integrity, and availability, then connect each risk with an implemented and verified safeguard.
  • Practise fair personnel decisions using essential functions, consistent standards, relevant evidence, individualized accommodation, and documented follow-up.

A practical preparation plan

1. Build a task-level study map

Read the official COE specifications and mark each task as familiar, partly familiar, or unfamiliar. Match these selected concepts to the tasks they support, then list the remaining topics requiring additional authoritative study.

2. Work the management calculations

Calculate working capital, operating margin, volume-adjusted expense, contribution margin, break-even volume, inventory triggers, and explicitly defined marketing return. State units and assumptions before interpreting each answer.

3. Trace an ophthalmic visit across domains

Map a visit from first contact through clinical services, images, billing, and follow-up. Identify urgent symptom escalation, handoffs, staffing constraints, information controls, and likely reporting measures.

4. Compare close alternatives

Practise explaining why a plausible action is incomplete: buying backups without testing restoration, repeating training without investigating barriers, comparing payer rates without service mix, or tracking outcomes without balancing measures.

5. Use the drills to diagnose gaps

Answer the 20 questions before reading explanations. For each error, identify the decisive cue and explain why every alternative is less appropriate. Return to the relevant concept and primary reference, then revisit the flashcards after a delay.

6. Recheck the full scope and official instructions

Before examination day, revisit every official domain task and resolve weak areas beyond this guide. Use ASOA and the instructions accompanying examination authorization for current eligibility, scheduling, and examination logistics.

Use your sample score as a starting point

The free set contains 20 original practice questions. It is a small learning sample, not an official examination or a validated pass prediction. Review each explanation and its source before moving to another topic.

Start the free sample

Official sources and updates

Confirm current eligibility, fees, scheduling and policies directly with the examination provider. CertMedbry is independent and is not endorsed by these organisations. How we handle content and corrections.