FREE CCA Study Guide 2026: All 6 Domains

This free CCA study guide covers what the AHIMA Certified Coding Associate exam tests — entry-level medical coding across both hospital (inpatient) and physician/outpatient settings — organized to AHIMA’s six competency areas.^[1]

It’s interactive, not a wall of text: every module has built-in checkpoint quizzes, flashcards, and practice questions, so you learn by doing — not just reading.

The CCA tests six competency areas, which we teach as six study modules in the same order — leading with the heaviest-weighted one, Clinical Classification Systems (about a third of the exam). Read a module, test yourself at each checkpoint, then drill gaps with our free practice test and flashcards. This guide is a high-yield overview that maps the official content — not a substitute for the ICD-10-CM, ICD-10-PCS, CPT, and HCPCS code books you’ll learn to navigate.

Deciding between AHIMA credentials? The CCA is the entry-level coding exam. The mastery-level inpatient credential is the CCS — see our CCS study guide. For physician-office (professional-fee) coding under AAPC, see our CPC study guide.

CCA Exam Snapshot

The CCA spreads its scored questions across six competency areas.^[1] The biggest single block is Clinical Classification Systems — the actual coding — so study by weight and start there:

Many CCA questions are coding scenarios — short clinical statements or record excerpts that ask you to assign or sequence the correct codes, or to apply a guideline. Because the CCA is entry-level, it tests broad foundational competence across both inpatient and outpatient coding rather than the deep inpatient mastery of the CCS.^[1]

Module 1 · Clinical Classification Systems

The single largest block — about a third of the exam. This is the actual coding: the four code sets and the conventions that govern them.

Because the CCA spans both worlds, you must know diagnosis coding (ICD-10-CM), inpatient procedure coding (ICD-10-PCS), and outpatient/physician coding (CPT and HCPCS). Master the code sets here and the rest of the exam gets easier.

1.1 ICD-10-CM Conventions & Guidelines

ICD-10-CM codes are 3–7 characters with a decimal after the third, and you apply the ICD-10-CM Official Guidelines for Coding and Reporting — developed by the four cooperating parties (CMS, NCHS, AHA, and AHIMA) — together with the book conventions.^[2] The most-tested conventions are the Excludes1 vs Excludes2 notes, the etiology/manifestation rule (“code first” / “use additional code”), the seventh character on injury codes (A initial, D subsequent, S sequela, with X as a placeholder), andcombination codes.

Sequencing matters: the principal diagnosis (inpatient) or first-listed diagnosis (outpatient) is chosen per the guidelines, and a manifestation code (a title with “in diseases classified elsewhere”) can never be sequenced first. A key inpatient/outpatient difference: in the outpatientsetting you never code a “probable” or “rule out” diagnosis as confirmed — you code the signs and symptoms — whereas inpatient coding may report an uncertain diagnosis documented at discharge as if confirmed.

1.2 ICD-10-PCS (Inpatient Procedures)

ICD-10-PCS reports procedures for hospital inpatients and is maintained by CMS. Every code is exactly seven characters, and each position has its own independent meaning — you build the code from the PCS Tables rather than looking it up whole.^[3] The third character, theroot operation, is the most heavily tested: it captures the objective of the procedure.

The classic root-operation distinction is Excision (cutting out a portion of a body part) versus Resection (cutting out all of a body part). Because PCS body parts have defined boundaries, removing an entire defined structure — such as a whole lobe of the lung — is a Resection, while taking only part of it is an Excision. The approach character (open, percutaneous, endoscopic) records how the surgeon reached the site.

1.3 CPT & Evaluation and Management

CPT (the AMA code set, HCPCS Level I) reports physician and outpatient procedures and services with five-digit codes. The most testable area is Evaluation and Management (E/M) — the non-procedural visits.

Since 2021, office/outpatient visits (99202–99215) are leveled by medical decision making (MDM) or total time on the encounter date; history and exam are documented but no longer set the level.^[4]

MDM grades problems, data, and risk — you need two of the three. A new patienthasn’t been seen by the provider or same-specialty group within three years; otherwise the patient is established.

1.4 HCPCS Level II

HCPCS Level II is the alphanumeric code set CMS maintains for what CPT doesn’t cover: drugs (J codes), durable medical equipment (E codes), supplies (A codes), and more. Each code is one letter followed by four digits.^[5] On a claim you often pair a CPT procedure with a HCPCS code for the drug or supply used — for example, an injection administration code plus a J code for the drug.

Module 2 · Reimbursement Methodologies

About a quarter of the exam. Coding exists to support reimbursement, so the CCA tests how the codes you assign turn into payment. The core idea is the prospective payment system (PPS): the payer sets a fixed amount in advance by the case or service, not by actual charges — which is why accurate, complete coding directly drives revenue.

2.1 Inpatient — MS-DRG & IPPS

Under Medicare’s inpatient prospective payment system (IPPS), each inpatient stay is grouped into anMS-DRG — a clinically and resource-similar payment group.^[6] MS-DRG assignment is driven by the principal and secondary diagnoses, procedures, sex, and discharge status.

A documentedcomplication or comorbidity (CC), or major CC (MCC) can move the case to a higher-weighted group. Each MS-DRG carries a relative weight, and the hospital’s payment is that weight multiplied by its base rate. Averaged across all cases, those weights give thecase-mix index (CMI).

2.2 Outpatient, the CDM & Edits

On the outpatient side, Medicare’s outpatient prospective payment system (OPPS) pays per service usingAmbulatory Payment Classifications (APCs) — groups of clinically similar services with similar costs.^[7] A comprehensive APC bundles a primary service with its add-ons into one payment, and an OPPS status indicator tells you how a service is paid (for example, packaged into another service rather than paid separately).

Much of outpatient charging flows through thecharge description master (CDM) — the facility’s master list of billable items, each tied to a charge code and a CPT/HCPCS code — which must be kept current to avoid denials. Finally,NCCI edits (procedure-to-procedure edits and MUEs) guard against improper payment.

Module 3 · Health Records & Data Content

~14% of the exam. You can’t code what isn’t documented, so the CCA tests the structure and quality of the health record — what a complete record contains, the standardized data sets that make records comparable, and the master index that ties a patient’s records together.

3.1 The MPI & Record Content

The master patient index (MPI) is the permanent database linking a unique identifier to each patient and all of their encounters — the backbone of the health information system. Searching it by name and date of birth before registering a patient prevents duplicate records, which fragment care and create billing and patient-safety risk. Every record entry needs a date and proper authentication (the author signs their own entries), and corrections to signed electronic entries are made as an addendum or amendment that links to the original — never by obscuring the original content.

3.2 UHDDS & Data Sets

The UHDDS (Uniform Hospital Discharge Data Set) is the standard set of data elements reported for hospital inpatients — including the principal diagnosis (its definition comes from the UHDDS), other diagnoses, significant procedures, and expected source of payment. Because every hospital reports the same defined elements the same way, the data can be compared across facilities.

A parallel set, the UACDS (Uniform Ambulatory Care Data Set), standardizes outpatient visits. Distinguish raw data (unprocessed facts) from information (data organized to be meaningful) — and apply the AHIMA data-quality characteristics (accuracy, completeness, consistency, timeliness).

Module 4 · Compliance

~14% of the exam, and the ethical core of coding. Because codes drive payment from government programs, coding is heavily regulated. The CCA tests the difference between fraud and abuse, the specific improper practices (upcoding, unbundling), the federal laws behind them, and how a compliant coding program runs.

4.1 Fraud, Abuse & the False Claims Act

Fraud is knowing, intentional deception to obtain an unauthorized benefit; abuse is practice inconsistent with sound fiscal or medical practice that causes unnecessary cost, without the same proven intent — intent is the dividing line. The two classic improper practices areUpcoding (coding a more severe/expensive service than documented) and Unbundling (splitting a bundled service for more pay).

The False Claims Act imposes liability for knowingly submitting false claims to Medicare — and “knowingly” includes deliberate ignorance and reckless disregard.^[9] Its qui tamprovision lets a whistleblower sue on the government’s behalf.

4.2 OIG, Queries & Ethical Coding

The HHS Office of Inspector General (OIG) publishes compliance program guidance — whose core elements include a designated compliance officer, ongoing training, auditing/monitoring, and a confidential reporting hotline — and an annual Work Plan that flags the areas it intends to audit, which coding departments use to prioritize internal reviews.^[9]

Two more federal laws appear: the Anti-Kickback Statute (no remuneration to induce referrals) and the Stark Law (limits physician self-referral where a financial relationship exists). When documentation is conflicting, incomplete, or ambiguous, the coder issues a non-leading physician query — never assuming a diagnosis — consistent with the AHIMA Standards of Ethical Coding.

Module 5 · Information Technologies

~8% of the exam. Modern coding happens inside an electronic health record with software assistance, so the CCA tests how those tools work — and, just as importantly, the coder’s responsibility to verify what the software suggests.

Computer-assisted coding (CAC) scans clinical documentation — typically with natural language processing — and suggests candidate codes; the coder must validate each one against the record, because NLP suggestions can be wrong, so a confirmation workflow beats auto-finalizing.

Two more tools divide the work: an encoder helps select and validate codes (a logic-based encoder prompts with sequencing edits and guideline questions), while a grouper takes the coded data and assigns the case to a payment group such as an MS-DRG. Inside the EHR, structured data, keyword search, audit trails (who accessed or changed a record, and when), and role-based access control all support accurate, secure coding.

Module 6 · Confidentiality & Privacy

~8% of the exam. Coders handle the most sensitive information there is, so the CCA tests the HIPAAPrivacy and Security Rules — what they protect, the patient’s rights, and how to release information correctly.

6.1 The HIPAA Privacy Rule & PHI

PHI is individually identifiable health information held or transmitted by a covered entity in any form — electronic, paper, or oral. The HIPAA Privacy Rule governs its use and disclosure, and itsminimum necessary standard limits each use, disclosure, or request to the least information needed (it does not apply to treatment disclosures or those made under the patient’s authorization).^[10] Reasonable safeguards make some exposures permitted incidental disclosures, and psychotherapy notes kept separate generally need a specific authorization to disclose.

6.2 Patient Rights & Release of Information

Patients hold rights over their PHI: to access a copy (the covered entity generally must provide it within 30 days, with one possible 30-day extension, for a reasonable cost-based fee), to request an amendment, to request confidential communications, and to receive an accounting of disclosures (which excludes routine treatment, payment, and operations disclosures).

A signed authorization can be revoked in writing. Before releasing records, always verify the requester’s identity and authority; a subpoena signed only by an attorney requires satisfactory assurances (patient notice or a protective order) before you disclose.^[10]

How to Use This CCA Study Guide

This guide is built to be worked, not just read. The most efficient path to a pass:

• Study by weight. Clinical Classification Systems is about a third of the exam — start there and master the code sets, then move to Reimbursement, which builds on the codes you assign.
• Mind the inpatient/outpatient split. The CCA is entry-level and tests both — uncertain-diagnosis rules, ICD-10-PCS vs CPT, and MS-DRG vs APC all flip by setting. Know which side each rule belongs to.
• Code from scenarios, not flashfacts. Many questions are short clinical statements — practice applying a guideline, not just recognizing a term.
• Check off as you go. Use the Study Guide Contents to mark each section done; it raises your exam-readiness score.
• Take every checkpoint. The end-of-module quizzes show exactly which competency areas need another pass — then drill them in the flashcards and a practice test.

CCA Glossary

The high-yield CCA terms in one place — hover any dotted term in the guide, or flip the whole deck here as a self-grading flashcard set.

APC

Ambulatory Payment Classification — the outpatient prospective payment grouping under OPPS, paying per service or procedure.

Approach

The fifth character of an ICD-10-PCS code — the technique used to reach the procedure site (open, percutaneous, endoscopic, etc.).

Case-mix index

CMI — the average of a facility's MS-DRG relative weights; a higher CMI reflects a more complex, resource-intensive patient mix.

CC / MCC

Complication or comorbidity (CC) and major complication or comorbidity (MCC) — secondary diagnoses that can raise an MS-DRG to a higher-weighted, higher-paying group.

CCA

Certified Coding Associate — AHIMA's entry-level coding credential, demonstrating foundational competency across both inpatient and outpatient coding.

Charge description master

The CDM (chargemaster) — a facility's master list of billable items and services with their charge codes, descriptions, amounts, and CPT/HCPCS codes.

Combination code

A single ICD-10-CM code that classifies two diagnoses, or a diagnosis with an associated manifestation or complication.

Computer-assisted coding

CAC — software that scans documentation (often via natural language processing) and suggests codes for a coder to validate.

CPT

Current Procedural Terminology — the AMA code set (HCPCS Level I) used to report physician and outpatient procedures and services.

Encoder

Software that helps a coder select and validate diagnosis and procedure codes, often with logic-based sequencing prompts.

Excision

An ICD-10-PCS root operation: cutting out or off, without replacement, a portion of a body part.

Excludes1

An ICD-10-CM note meaning 'not coded here' — the two conditions are mutually exclusive and cannot be reported together.

Excludes2

An ICD-10-CM note meaning 'not included here' — the conditions are separate, so both may be coded when each is documented.

False Claims Act

A federal law imposing liability for knowingly submitting false or fraudulent claims to a government program such as Medicare.

First-listed diagnosis

The outpatient counterpart to the principal diagnosis — the main reason, established at that encounter, for the visit or service.

Grouper

Software that assigns coded data to a payment group, such as an MS-DRG, used to determine reimbursement.

HCPCS Level II

An alphanumeric code set maintained by CMS for drugs, supplies, durable medical equipment, ambulance, and other items not described by CPT.

HIPAA

The Health Insurance Portability and Accountability Act — its Privacy and Security Rules protect individuals' protected health information.

ICD-10-CM

The International Classification of Diseases, 10th Revision, Clinical Modification — the U.S. code set for reporting diagnoses in all care settings; maintained by NCHS.

ICD-10-PCS

The Procedure Coding System — the seven-character code set for inpatient hospital procedures, maintained by CMS.

Master patient index

The MPI — the permanent database linking a unique identifier to each patient and all of their encounters; the backbone of the health information system.

Minimum necessary

The HIPAA Privacy Rule standard limiting the use, disclosure, and request of PHI to the least amount needed for the purpose.

MS-DRG

Medicare Severity Diagnosis-Related Group — the inpatient payment classification that groups stays by clinical and resource similarity, refined by CC/MCC severity.

NCCI edits

National Correct Coding Initiative edits — CMS checks (procedure-to-procedure edits and MUEs) that prevent unbundling and cap reportable units.

PHI

Protected health information — individually identifiable health information held or transmitted by a covered entity in any form.

Physician query

A compliant, non-leading request to a provider to clarify conflicting, incomplete, or ambiguous documentation before assigning a code.

Present on admission

POA — an indicator showing whether a diagnosis was present at the time of inpatient admission; it affects MS-DRG payment.

Principal diagnosis

The condition established after study to be chiefly responsible for occasioning the patient's admission, per the UHDDS — the inpatient sequencing anchor.

Prospective payment system

A PPS pays a predetermined, fixed amount tied to the case or service rather than the provider's actual charges.

Relative weight

The number assigned to an MS-DRG (or APC) representing the relative resource intensity of its cases compared with the average case.

Resection

An ICD-10-PCS root operation: cutting out or off, without replacement, all of a body part.

Root operation

The third character of an ICD-10-PCS code — the objective of the procedure (e.g., Excision, Resection, Bypass); the most-tested PCS character.

UHDDS

Uniform Hospital Discharge Data Set — the standard data elements (including the principal diagnosis definition) reported for hospital inpatients.

Unbundling

Reporting components of a service separately when a single comprehensive code applies — an NCCI-targeted fraud-and-abuse risk.

Upcoding

Assigning a higher-level or more expensive code than the documentation supports — a compliance violation and potential fraud.

CCA Study Guide FAQ

References

1. 1.AHIMA. “Certified Coding Associate (CCA) Certification.” ahima.org. ↑
2. 2.CDC / National Center for Health Statistics. “ICD-10-CM Official Guidelines for Coding and Reporting.” cdc.gov. ↑
3. 3.Centers for Medicare & Medicaid Services. “ICD-10-PCS Official Guidelines for Coding and Reporting.” cms.gov. ↑
4. 4.American Medical Association. “CPT (Current Procedural Terminology).” ama-assn.org. ↑
5. 5.Centers for Medicare & Medicaid Services. “Healthcare Common Procedure Coding System (HCPCS) Level II.” cms.gov. ↑
6. 6.Centers for Medicare & Medicaid Services. “Acute Inpatient Prospective Payment System (IPPS).” cms.gov. ↑
7. 7.Centers for Medicare & Medicaid Services. “Hospital Outpatient Prospective Payment System (OPPS).” cms.gov. ↑
8. 8.Centers for Medicare & Medicaid Services. “National Correct Coding Initiative (NCCI) Edits.” cms.gov. ↑
9. 9.HHS Office of Inspector General. “Compliance Guidance — Fraud and Abuse.” oig.hhs.gov. ↑
10. 10.HHS Office for Civil Rights. “HIPAA Privacy Rule — For Professionals.” hhs.gov. ↑

Career Employer

Career Employer is the ultimate resource to help you get started working the job of your dreams. We cover topics from general career information, career searching, exam preparation with free study materials, career interviewing, and becoming successful in your career of choice.

Follow Us:

All Posts