IAMI CPMA study plan
IAMI CPMA · Give each week a clear focus.
8 weeks · About 7 hours per week
Coding and Documentation Standards
Map every CPT, ICD-10-CM, and HCPCS Level II code set referenced in the CPMA content outline to the documentation elements each requires, building a one-page reference sheet per code family
Explain the difference between coding for reimbursement, coding for quality reporting, and coding for risk adjustment, and identify where each creates audit exposure
Apply the four criteria of a compliant physician query (clinical indicator, reason for query, multiple-choice options, and provider response) to three written documentation scenarios
Distinguish documentation sufficiency requirements for evaluation and management level selection, including medical decision making versus time-based reporting
Identify the top ten documentation deficiencies cited in payer audits, such as missing signatures, cloned notes, unspecified diagnosis codes, and undocumented history elements
Your checkpoint
A 10-page coding and documentation standards reference guide covering code set requirements, query-writing rules, and the ten most common documentation deficiencies, with one worked example per deficiency
Audit Process and Methodology
Sequence the seven stages of an audit lifecycle from scoping through corrective action monitoring, and state the required output of each stage
Differentiate internal, external, prospective, retrospective, concurrent, and focused audits by purpose, sample source, and typical findings
Draft audit work papers that document objective, scope, methodology, sampling rationale, and evidence trail to a standard that would survive external review
Compare statistical and non-statistical sampling methods and select the appropriate method for three stated audit scenarios
Write a root cause analysis for a hypothetical coding error pattern that separates individual error from systemic process failure
Your checkpoint
A complete mock audit work paper package for a 30-encounter retrospective audit, including scope statement, sampling methodology, findings log, and root cause analysis
Coding and Documentation Standards & Medical Record Review and Data Validation
Perform a full medical record review of ten synthetic encounters, abstracting documented elements and comparing them against coded and billed data
Calculate error rates by category (code assignment, modifier use, documentation sufficiency, medical necessity) using a standard error-rate formula
Apply a data validation protocol to reconcile the encounter form, claim, and medical record for consistency across all three sources
Identify documentation that supports medical necessity for high-risk services such as modifiers 25 and 59, and articulate when the supporting documentation is insufficient
Build a data validation checklist that a reviewer can apply consistently across encounters and reviewers
Your checkpoint
A validated review worksheet for ten encounters showing abstracted documentation, coded data, variance determination, error category, and calculated error rate by category
Regulatory and Compliance Requirements
Summarize the compliance program elements expected of a billing entity, including written policies, a designated compliance officer, training, auditing and monitoring, and enforcement and discipline
Explain how the False Claims Act, Anti-Kickback Statute, and Civil Monetary Penalties Law create distinct liability exposures, and give one audit-relevant example of each
Describe the role of the OIG Work Plan and how published enforcement priorities should shape an organization's audit risk assessment
Identify the reporting obligations and protections under the provider self-disclosure protocol and the Stark Law self-referral rules
Distinguish HIPAA privacy and security requirements that constrain how audit samples and findings may be stored, shared, and destroyed
Your checkpoint
A regulatory exposure matrix mapping at least eight statutes, regulations, or guidance documents to the conduct they govern, the typical penalty range, and the audit control that mitigates the risk
Fraud, Waste, and Abuse Detection and Prevention
Distinguish fraud, waste, and abuse by intent, and classify ten given scenarios into the correct category with a written rationale
Detect the red flags of upcoding, unbundling, phantom billing, duplicate claims, and services not rendered within a set of claim patterns
Explain how data analytics techniques such as peer comparison, frequency distribution, and outlier detection surface potential FWA
Design a monitoring plan that includes proactive auditing, employee reporting mechanisms, and response procedures for detected issues
Describe the investigation process from intake through resolution, including documentation, privilege considerations, and corrective action
Your checkpoint
An FWA detection playbook containing ten scenario classifications with rationale, a red-flag indicator list, and a written monitoring and response plan
Audit Reporting and Communication
Structure an audit report that includes objective, scope, methodology, findings, risk rating, recommendations, and management response, in that order
Write findings statements that separate the condition, criteria, cause, and effect so each finding is actionable and defensible
Translate error rates and confidence intervals into plain-language risk statements for executive and clinical audiences
Deliver a ten-minute verbal audit summary to a mock compliance committee, anticipating pushback on findings
Draft a corrective action plan with owners, timelines, and measurable success criteria that ties back to each finding
Your checkpoint
A complete audit report with at least five findings written in condition-criteria-cause-effect format, plus an executive summary and a corrective action plan with owners and target dates
Ethics, Independence, and Professional Conduct
Apply the principles of auditor independence by identifying conflicts of interest in five scenarios and stating the required action for each
Explain confidentiality obligations around protected health information encountered during audits, including minimum necessary access and secure handling
Distinguish the auditor's obligation to report findings accurately from pressure to soften or suppress unfavorable results
Describe professional competence expectations, including when to escalate a question outside the auditor's expertise
Analyze three ethical dilemmas involving provider pushback, sampling bias, and self-review of one's own prior coding work
Your checkpoint
A written ethics case analysis of three dilemmas, each with the competing obligations identified, the applicable principle, and a defensible course of action
Audit Planning, Sampling, and Risk Assessment & Audit Process and Methodology
Conduct a risk assessment that ranks audit targets by claim volume, dollar exposure, prior error rate, and regulatory attention
Construct a risk-based audit plan for a hypothetical 12-month cycle with sampling approach, sample size rationale, and resource estimate
Calculate sample sizes for a given confidence level and margin of error, and explain the tradeoff between sample size and audit cost
Complete two timed full-length practice exams under exam conditions and score them by domain
Build a remediation plan targeting the two lowest-scoring domains from practice exam results
Your checkpoint
A risk-based annual audit plan document with ranked targets, sampling methodology, sample size calculations, and a remediation plan based on practice exam domain scores
Milestones
Week 2: Can produce a defensible audit work paper from a blank page and explain every sampling decision without notes
Week 4: Scores 75 percent or higher on a self-written 40-question quiz covering domains 1 through 4, with no domain below 60 percent
Week 6: Presents a mock audit report to a colleague or study partner and defends each finding against at least three challenges
Week 7: Completes the ethics case analysis and can state the independence and confidentiality rules from memory
Week 8: Scores 80 percent or higher on both timed practice exams, with no single domain below 70 percent