CPHRM Risk Analysis 4 — Questions and Answers
Question 1: In healthcare risk analysis, 'inherent risk' is BEST defined as:
- Risk that cannot be eliminated regardless of controls
- Risk that is embedded in the organization's culture
- Risk accepted as part of normal clinical practice
- The level of risk that exists before any controls are applied (Correct answer)
Correct answer: The level of risk that exists before any controls are applied
Inherent risk is the raw or baseline risk of an activity or process before any mitigation or control measures are considered.
Question 2: A risk manager is analyzing claims data to identify patterns of recurring loss. Which type of analysis is being performed?
- Prospective risk analysis
- Retrospective risk analysis (Correct answer)
- Concurrent risk analysis
- Predictive modeling
Correct answer: Retrospective risk analysis
Retrospective risk analysis examines historical data (claims, incidents, near-misses) to identify patterns and trends of past losses.
Question 3: The Haddon Matrix is used in healthcare risk analysis primarily to:
- Analyze injury-producing events across pre-event, event, and post-event phases (Correct answer)
- Calculate the financial impact of a risk event
- Score failure modes by severity and probability
- Map patient flow through clinical processes
Correct answer: Analyze injury-producing events across pre-event, event, and post-event phases
The Haddon Matrix organizes countermeasures across three time phases (pre-event, event, post-event) and three factors (host, agent, environment) to guide injury prevention strategies.
Question 4: Which scenario BEST illustrates the concept of 'risk aggregation' in a hospital setting?
- Combining all malpractice policies under one insurer
- Recognizing that multiple low-level risks in one department collectively create a high-risk environment (Correct answer)
- Grouping patients by risk level for triage purposes
- Consolidating incident reports into a single database
Correct answer: Recognizing that multiple low-level risks in one department collectively create a high-risk environment
Risk aggregation recognizes that individually minor risks can accumulate to create a substantially elevated overall risk level when considered together.
Question 5: During a risk analysis, a team determines that a control measure reduces the likelihood of a hazard but does not eliminate it. This remaining risk is BEST addressed by:
- Accepting the residual risk without further action if it falls below the risk tolerance threshold (Correct answer)
- Removing the control and escalating to senior leadership
- Reclassifying the hazard as a non-risk
- Transferring full liability to the treating physician
Correct answer: Accepting the residual risk without further action if it falls below the risk tolerance threshold
When residual risk falls within the organization's defined risk tolerance, it is appropriate to formally accept it and document the decision.
Question 6: Which of the following is the PRIMARY goal of a prospective risk analysis (e.g., FMEA) compared to a retrospective analysis (e.g., RCA)?
- To assign accountability for past failures
- To identify and mitigate potential failures BEFORE they cause harm (Correct answer)
- To comply with post-event regulatory reporting requirements
- To document historical losses for actuarial review
Correct answer: To identify and mitigate potential failures BEFORE they cause harm
Prospective analysis (FMEA) proactively anticipates and addresses failure modes before an adverse event occurs, rather than responding after the fact.
Question 7: A risk manager applies a 'bow-tie' model to a medication error risk. The LEFT side of the bow-tie represents:
- Consequences and recovery controls
- Corrective actions taken after an incident
- Threats and preventive barriers leading to the hazardous event (Correct answer)
- Regulatory penalties associated with the risk
Correct answer: Threats and preventive barriers leading to the hazardous event
The left side of a bow-tie diagram maps threats (causes) and preventive controls that reduce the likelihood of the central hazardous event.
In healthcare risk analysis, 'inherent risk' is BEST defined as: