CCQM study materials
CCQM study resources

CCQM: Patient Safety and Risk Management

CCQM · Work through your exam, one topic at a time.

All guide sections

Patient Safety and Risk Management

This domain tests safety science rather than blame: how errors arise in systems, how to analyze and prevent them, and how to build a reporting and just culture. Expect questions on error types, just culture, RCA2, FMEA, hierarchy of effectiveness, disclosure, and risk treatment options.

Core rules and concepts

  • Safety as a system property: the Swiss cheese model shows harm occurring when holes in multiple defenses align. Most errors are system-induced, not the product of bad people.
  • Error types: skill-based slips and lapses, rule-based mistakes, knowledge-based mistakes, and violations. The response differs by behavior, not by outcome severity.
  • Just culture: human error is consoled; at-risk behavior is coached and managed; reckless behavior is disciplined. Outcome severity alone must not determine the response.
  • Event taxonomy: adverse event, near miss, sentinel event, never event. Reporting systems must be non-punitive and close the loop with feedback.
  • RCA2: focus on system causes, require actions with owners and deadlines, and measure whether actions worked. Avoid person-focused conclusions such as retraining or reminding.
  • FMEA: prospective, scores severity, occurrence, and detection; the risk priority number guides action but should never be used as a cutoff to ignore low-scoring but catastrophic failure modes.
  • Hierarchy of effectiveness: strongest are forcing functions and constraints, then automation, standardization and checklists; weakest are education, warnings, and policy alone.
  • Disclosure and apology are expected after harm, alongside event reporting and claims coordination.

Worked example

A wrong-site nerve block occurs. Weak response: re-educate the anesthesiologist. Strong response: require site marking by the proceduralist with patient involvement, a structured time-out with verbal confirmation, and a hard stop in the scheduling system when marking is absent. Each action is assigned an owner, a date, and a measure such as percentage of cases with documented marking and time-out. Reasoning: forcing functions and standardization outperform education because they make the error difficult rather than merely discouraged; the measures verify the control works.

Traps that cost marks

  • Writing an RCA that concludes one individual was at fault.
  • Action plans with no owner, deadline, or post-implementation measurement.
  • Confusing FMEA (prospective) with RCA (retrospective).
  • Treating more incident reports as automatically better safety, when it may only reflect reporting culture.
  • Choosing education as the primary control for a high-severity risk.