Written and maintained by CASRAI Editorial Board
Last updated
The Certified Professional in Health Care Risk Management (CPHRM) is administered by the American Hospital Association Certification Center (AHA-CC), with the American Society for Health Care Risk Management (ASHRM) serving as co-sponsor and PSI Services as the testing vendor. This page is a certification guide, not a career-overview piece — it covers what AHA-CC and ASHRM actually publish about eligibility routes, the five exam content domains, and the recertification cycle, for someone deciding whether to sit the exam or renew, not someone asking what a healthcare risk manager does day to day.
CPHRM sits alongside two credentials CASRAI already covers in detail: CPHQ, the quality-department credential from NAHQ, and CPPS, the patient-safety-science credential from CBPPS/IHI. CPHRM is the risk-financing-and-claims credential of the three — its domains lean toward liability exposure, insurance and legal operations rather than quality measurement or safety-science methodology, which matters for a risk manager choosing which credential actually maps to their job duties.
Eligibility: one education route, plus a fixed experience requirement
AHA-CC requires candidates to meet one of three education-and-experience routes, and a separate risk-management experience threshold that applies regardless of which route is used:
| Education | Healthcare experience required |
|---|---|
| Bachelor’s degree or higher | 5 years |
| Associate degree or equivalent | 7 years |
| High school diploma or equivalent | 9 years |
On top of whichever route applies, AHA-CC requires 3,000 hours, or 50 percent of full-time job duties, within the last three years dedicated to health care risk management in a health care setting or with a provider of services. That clause is easy to misread as optional context around the education table — it isn’t; it’s a fourth, separate gate every applicant has to clear. A risk manager who spent most of the last three years in a general compliance or patient-safety role, with risk management as a minority of their duties, may not meet it yet even with the right degree and tenure.
The five exam content domains
The CPHRM exam is built from five domains, refreshed periodically through ASHRM’s own job analysis survey (AHA-CC states this happens roughly every three to five years, so the domains below are the current structure, not a fixed one):
- Health Care Operations — the operational side of running a risk management program: policy development, credentialing and privileging oversight, environment-of-care risk, and coordination with quality and safety functions.
- Legal and Regulatory — the statutory and regulatory framework a risk manager has to work inside: informed consent, patient rights, licensure and accreditation requirements, and reporting obligations such as those to the National Practitioner Data Bank.
- Risk Financing — insurance program structure, self-insurance and captive arrangements, reserving, and cost-of-risk analysis: the domain that most distinguishes CPHRM from CPHQ or CPPS, neither of which examines insurance mechanics.
- Claims and Litigation — claims investigation and documentation, the discovery process, coordination with defense counsel, and settlement evaluation.
- Clinical/Patient Safety — the domain that overlaps most directly with CASRAI’s patient-safety cluster: event reporting and analysis, sentinel event response, root cause analysis, and alignment with the National Patient Safety Goals.
What AHA-CC does not publish, unlike its neighbors: NAHQ’s CPHQ outline and CBPPS’s CPPS outline both publish exact scored-item counts per domain (documented on this site’s own CPHQ and CPPS pages). AHA-CC’s public CPHRM materials name the five domains above but do not publish a domain-by-domain weighting, item count, or percentage breakdown of the exam — only that content is drawn from the periodic job analysis survey. Anyone quoting a specific split (e.g. “Risk Financing is 22% of the exam”) for CPHRM is going beyond what AHA-CC has made public; treat such a figure as unsourced until AHA-CC itself publishes one.
Exam registration and fees
PSI Services administers the exam on AHA-CC’s behalf. Published fees, current as of this page’s retrieval date:
| ASHRM members | Non-members | |
|---|---|---|
| Exam fee | $275 | $425 |
| Renewal fee | $135 | $225 |
A late renewal carries an additional $50 fee on top of the base renewal amount. AHA-CC does not publish the scored-question count, unscored/pretest-question count, or time limit for the CPHRM exam in its public materials — candidates who need that level of administrative detail should request the current candidate handbook directly from AHA-CC rather than rely on a third-party summary, since testing-vendor logistics change between contract cycles more often than content domains do.
Recertification: a 3-year cycle, two renewal paths
CPHRM certification runs on a three-year cycle. To renew, a certificant chooses one of two paths:
- Continuing education — document 45 qualifying contact hours accrued during the three-year certification period, then submit for renewal.
- Re-examination — sit and pass the CPHRM exam again instead of accumulating CE hours.
AHA-CC accepts renewal applications up to one year before the certification’s expiration date, which gives a certificant a genuine planning window rather than a hard last-minute deadline. Letting the certification lapse past expiration triggers the late renewal fee above; AHA-CC’s public materials describe this as a fee addition, not an automatic path back to good standing, so a certificant who lets a cycle lapse should confirm current reinstatement terms directly with AHA-CC rather than assume the late fee alone restores the credential.
Where CPHRM fits for a patient-safety team
A hospital risk manager, patient-safety officer, and quality director are frequently different people on the same committee, each accountable for a different piece of the same event. CPHRM is built for the first of those three: the person who has to translate a sentinel event or a morbidity and mortality finding into liability exposure, insurance notification, and legal posture, not just a corrective action plan. That’s a genuinely different skill set from the quality-measurement focus CPHQ tests or the human-factors/safety-science focus CPPS tests, even though all three credentials sit on the same incident. A risk manager deciding among the three should map the domain lists — Risk Financing and Claims and Litigation here, versus CPHQ’s measurement categories or CPPS’s system-safety domains — against what their actual job duties are, since the “3,000 hours / 50% of duties” eligibility gate above is specific to risk management work, not general patient-safety or quality work.
For the wider set of credentials and regulatory-operations topics this fits into, see the patient safety pillar.
FAQ
Is CPHRM the same organization as ASHRM?
No. ASHRM (American Society for Health Care Risk Management) co-sponsors the credential and publishes exam-prep material, but the certification itself is administered by the American Hospital Association Certification Center, with PSI Services as the testing vendor. ASHRM membership is not required to sit the exam — it just changes the fee.
How is CPHRM different from CPHQ or CPPS?
All three sit inside the same patient-safety ecosystem but examine different job functions. CPHQ (NAHQ) is built around quality measurement and improvement methodology. CPPS (CBPPS/IHI) is built around patient-safety science and human-factors thinking. CPHRM (AHA-CC/ASHRM) is built around risk financing, claims and litigation, and the legal/regulatory side of an adverse event — the credential for the risk-management function specifically, not quality or safety-science functions more broadly.
Do I need a clinical license to sit the CPHRM exam?
No. Eligibility runs on the education-plus-experience routes and the risk-management-hours requirement described above, not a clinical licensure requirement. A non-clinical risk manager with the right degree, tenure, and share of risk-management duties is eligible.
What happens if I let my CPHRM certification lapse?
AHA-CC’s public materials describe a late renewal fee (an additional $50 on top of the standard renewal fee) rather than detailing full reinstatement terms past that point. Anyone whose certification has already lapsed should confirm the current reinstatement process directly with AHA-CC rather than assume the late fee alone is sufficient.
Sources
- American Hospital Association Certification Center, CPHRM certification page — eligibility routes, experience requirement, exam fees, renewal fees, and recertification cycle, retrieved 29 August 2026.
- ASHRM, CPHRM education page — domain list and exam-prep materials, retrieved 29 August 2026.
- ASHRM, CPHRM exam prep course options — confirms the five domains and that exam content is drawn from ASHRM’s periodic job analysis survey, retrieved 29 August 2026.
Fees, the recertification cycle, and the eligibility thresholds above are reproduced from AHA-CC’s and ASHRM’s public pages as of the retrieval date. AHA-CC does not publicly publish domain-by-domain exam weighting for CPHRM; where this page says that information isn’t published, that reflects what AHA-CC’s own materials state, not an assumption. Verify against AHA-CC’s current candidate handbook before relying on any figure here for exam planning.
