FREE CPHQ Study Guide 2026: All 7 Domains

This free CPHQ study guide walks through every content domain the Certified Professional in Healthcare Quality exam tests, organized to the current Healthcare Quality Certification Commission (HQCC) detailed content outline used by NAHQ.^[2]

It’s interactive, not a wall of text: every module has built-in checkpoint quizzes, flashcards, and practice questions, so you learn by doing — not just reading.

The CPHQ tests seven official domains. We teach them in four study modules, grouping closely related domains, and we lead with the heaviest-weighted content.

Read a module, test yourself at each checkpoint, then drill gaps with our free practice test and flashcards. This guide is a high-yield overview that maps the official content — not a full healthcare-quality textbook.

CPHQ Exam Snapshot

The CPHQ covers seven domains. Two of them — Performance & Process Improvement and Health Data Analytics — together make up over 40% of the exam, so the analytic core is where to invest first.^[2] Study by weight:

Module 1 · Quality Leadership & Integration

One official domain, 15% of the exam (19 scored questions). This domain is about how quality is built into an organization’s strategy, structure, and culture — and how a quality professional leads change. It sets the frame for everything else in the guide.

1.1 Quality Structure, Strategy & Culture

Start with the definition. Healthcare quality is the degree to which health services increase the likelihood of desired outcomes and match current professional knowledge. The most-cited framework for what “good” looks like is the IOM six aims (STEEEP): care that is safe, timely, effective, efficient, equitable, and patient-centered.

Quality is not a side project — it is integrated into governance and operations. The governing body (board) holds ultimate accountability for the quality and safety of care; it sets the agenda and allocates resources. The work is guided by a written quality management plan and aligned to the organization’s strategic plan so improvement supports the mission rather than competing with it.^[4]

Culture is the deepest lever. A culture of safety exists when staff feel safe to report errors and near misses, which only happens under a just culture — one that responds to events by fixing systems, not punishing people for honest mistakes.

1.2 Leadership, Change & Stakeholders

The quality professional is usually a facilitator and change agent, not the owner of every fix — coaching teams, teaching methods, and removing barriers. Leading improvement means leading change management. Lewin’s classic model has three stages: unfreeze (build readiness and the case for change), change (implement the new way with support), and refreeze (embed and sustain it so it sticks).

Every initiative has stakeholders — patients, frontline staff, providers, payers, regulators, and the community. Identifying and engaging them early, and making the business case for quality (reduced harm, lower cost, better reimbursement), is what turns a good idea into a funded, adopted change.

Module 2 · Process Improvement & Data Analytics

Two official domains, over 40% of the exam combined: Performance & Process Improvement (22%) and Health Data Analytics (21%). This is the analytic heart of the CPHQ — master the methods and the charts and you have the largest single chunk of the test.

2.1 Performance & Process Improvement

The backbone method is the PDSA cycle (Plan-Do-Study-Act), the engine of IHI’s Model for Improvement. You plan a small change and predict its effect, do the test, study the actual results against the prediction, then act — adopt, adapt, or abandon — and run the next cycle. Small, rapid cycles let teams learn fast and limit the risk of a failed big rollout.^[5]

Two named methodologies dominate the rest of the domain. Lean maximizes value and eliminates waste (remember the eight wastes: defects, overproduction, waiting, non-utilized talent, transportation, inventory, motion, excess processing).

Six Sigma reduces variation and defects using the DMAIC sequence. Combined, they are Lean Six Sigma. Know the distinction: Lean attacks waste, Six Sigma attacks variation.

When something goes wrong, the tool is root cause analysis (RCA): a structured, retrospective look at the system causes of an event, using the 5 Whys and a Fishbone diagram. Its proactive twin is FMEA — done before harm on a high-risk process to find failure modes and prioritize prevention. The single most-tested distinction here: RCA is reactive (after an event); FMEA is proactive (before an event).^[7]

2.2 Health Data Analytics

You cannot improve what you cannot measure. Start with the Donabedian model, which sorts measures into process (was the right care step done?), outcome (what was the result for the patient?), and structure (the resources and capacity). A balancing measure then checks that fixing one thing didn’t break another.

The most-tested analytics topic is variation. A run chart plots data over time against a median to spot trends and shifts.

A control chart adds a center line (the mean) and upper and lower control limits, usually at ±3 standard deviations (±3σ). It tells common-cause variation (normal, random, inside the limits) apart from special-cause variation (a specific, assignable cause — a point beyond the limits or a non-random pattern).^[6]

The reason this matters: you fix the two kinds of variation differently. Common-cause variation calls for redesigning the process; special-cause variation calls for investigating the specific cause. Treating common-cause as special (tampering) usually makes a stable process worse.

Round out the domain with the data basics: know your data types — nominal (categories, no order), ordinal (ordered, unequal gaps), and continuous (numeric scale). Understand Benchmarking (comparing to internal, competitive, or best-in-class references), Risk adjustment (so outcomes are compared fairly across different patient mixes), and the difference between reliability (consistent results) and validity (measuring the right thing).

Module 3 · Patient Safety & Population Health

Two official domains, 23% of the exam combined: Patient Safety (14%) and Population Health & Care Transitions (9%). This module is about preventing harm to the individual patient and improving the health of whole populations across the continuum.

3.1 Patient Safety

Patient safety is the prevention of errors and harm during care. Know the event vocabulary cold: an adverse event is an injury caused by care; a near miss is an error that almost reached the patient (a free lesson); a sentinel event is a serious safety event causing death, permanent harm, or severe temporary harm and triggers an RCA; and a never event is a clearly preventable, serious event from the NQF list (e.g., wrong-site surgery).^[7]

Modern safety is a systems discipline. Reason’s Swiss cheese model shows harm reaching the patient when gaps in multiple defenses line up.

Human factors design fits systems to people, and a forcing function makes an error nearly impossible. That leads to the most exam-relevant idea in the domain — the strength of error-prevention strategies: design and forcing functions are strong; education and policy alone are weak.

Two named frameworks recur. A high reliability organization operates in high-risk conditions yet has very few adverse events, through five principles: preoccupation with failure, reluctance to simplify, sensitivity to operations, commitment to resilience, and deference to expertise. And The Joint Commission’s National Patient Safety Goals set concrete, annually updated requirements — using two patient identifiers, improving communication, medication safety, infection prevention, and the Universal Protocol (verification, site marking, time-out) to prevent wrong-site surgery.^[8]

3.2 Population Health & Care Transitions

Population health is the health outcomes of a defined group, including how those outcomes are distributed. Managing it means looking beyond the clinic: the social determinants of health (economic stability, education, healthcare access, environment, and social context) drive a large share of outcomes, so programs screen for unmet needs and connect patients to community resources to advance health equity.

The highest-risk operational moments are care transitions — hospital to home, ICU to floor, one provider to another. Poor transitions cause errors and avoidable readmissions, so quality programs lean on standardized handoffs (SBAR), medication reconciliation at every transition, clear discharge instructions with teach-back, and risk stratification to target the highest-need patients.^[9]

Module 4 · Review, Accountability & Regulation

Two official domains, 19% of the exam combined: Quality Review & Accountability (13%) and Regulatory & Accreditation (6%). This module is breadth-heavy — review processes, plus the named bodies, rules, and programs that hold organizations accountable.

4.1 Quality Review & Accountability

Utilization management (UM) evaluates the medical necessity, appropriateness, and efficiency of care against evidence-based criteria (e.g., InterQual or MCG) at three points: prospective review before care (prior authorization), concurrent review during a stay, and retrospective review after care. Concurrent review is the day-to-day tool that supports timely discharge and avoids denials.

Holding practitioners accountable starts at the door. Credentialing verifies a practitioner’s education, training, licensure, and experience (through primary source verification), and Privileging then authorizes specific procedures based on competence.

Performance is monitored afterward through ongoing (OPPE) and focused (FPPE) evaluation, and through Peer review. Surround all of this with Risk management — identifying, evaluating, and reducing the risk of harm and loss.

4.2 Regulatory & Accreditation

Know the difference between voluntary standards and mandatory regulations. Accreditation is a voluntary external review against standards.

The biggest accreditor is The Joint Commission, whose accreditation can confer Deemed status — recognition that its standards meet Medicare’s Conditions of Participation, so a separate CMS survey isn’t needed. CMS sets those CoPs (a regulation), and surveyors often use tracer methodology, following one patient’s journey to test compliance.

Key federal rules to recognize by name: HIPAA protects health information (share only the minimum necessary), EMTALA requires emergency screening and stabilization regardless of ability to pay, and OSHA governs workplace safety. The exam tests recognition of what each body or rule does — not deep legal detail.

4.3 Named Bodies & Programs

Finally, recognize the alphabet soup. NCQA accredits health plans and owns HEDIS, the standardized measures used to compare plans.

CMS runs value-based programs that tie payment to quality and outcomes — the Hospital Readmissions Reduction Program, value-based purchasing, and accountable care organizations.^[11] The Joint Commission and DNV accredit hospitals; AHRQ produces patient-safety tools and evidence.

How to Use This CPHQ Study Guide

This guide is built to be worked, not just read. The most efficient path to a pass:

• Study by weight. Performance & Process Improvement (22%) and Health Data Analytics (21%) are over 40% of the exam — start with QI methods and charts, then Leadership, Patient Safety, Review, Population Health, and Regulatory.
• Check off as you go. Use the Study Guide Contents to mark each section done; it raises your exam-readiness score.
• Take every checkpoint. The end-of-module quizzes show you exactly which domains need another pass.
• Drill the weak domain. Send your weak area into the flashcards and a practice test until the score climbs.
• Learn the why. This is a breadth exam — understanding the reasoning behind methods, measures, and rules beats rote memorization.

CPHQ Glossary

The high-yield CPHQ terms in one place — hover any dotted term in the guide, or flip the whole deck here as a self-grading flashcard set.

5 Whys

An RCA technique that repeatedly asks 'why' to move from a symptom to its underlying root cause.

Accreditation

Voluntary review by an external body confirming an organization meets defined quality and safety standards.

Adverse event

An injury caused by medical management (rather than the underlying disease) that harms the patient.

Balancing measure

A measure that checks whether improving one part of a system causes problems elsewhere.

Benchmarking

Comparing performance to a reference point — internal, competitive, or best-in-class — to find improvement opportunities.

Care transitions

The movement of a patient between settings, levels of care, or providers — high-risk points for errors and readmissions.

Change management

A structured approach to moving individuals and an organization from a current state to a desired future state (e.g., Lewin's unfreeze-change-refreeze).

Common-cause variation

Natural, random variation inherent to a stable process; points stay within control limits.

Conditions of Participation

Federal health and safety requirements providers must meet to participate in Medicare and Medicaid.

Control chart

A run chart with a center line and upper/lower control limits (commonly ±3σ) that distinguishes common-cause from special-cause variation.

Credentialing

Verifying a practitioner's qualifications — education, training, licensure, experience — before allowing them to provide care.

Culture of safety

A shared commitment in which staff feel safe to report errors and near misses without fear of blame, enabling learning and prevention.

Deemed status

Recognition that an accreditor's standards meet Medicare's Conditions of Participation, so a separate CMS survey is not required.

DMAIC

The Six Sigma sequence — Define, Measure, Analyze, Improve, Control.

Donabedian model

A framework classifying quality measures as structure (resources), process (what is done), and outcome (the result of care).

Fishbone diagram

A cause-and-effect (Ishikawa) tool that organizes possible causes of a problem into categories to find root causes.

Flowchart

A diagram showing the sequence of steps in a process as it actually occurs.

FMEA

Failure Mode and Effects Analysis — a proactive, prospective method to identify how a process could fail and prioritize prevention before harm occurs.

Forcing function

A design that makes an error impossible or very hard (e.g., incompatible connectors); a strong error-prevention strategy.

Health literacy

The degree to which a person can obtain, process, and understand basic health information needed to make decisions.

Healthcare quality

The degree to which health services for individuals and populations increase the likelihood of desired health outcomes and are consistent with current professional knowledge.

HEDIS

The Healthcare Effectiveness Data and Information Set — NCQA's standardized measures used to compare health-plan quality.

High reliability organization

An organization in a high-risk field that has very few adverse events through a relentless focus on safety and five HRO principles.

HIPAA

The Health Insurance Portability and Accountability Act, protecting health information through its Privacy and Security Rules.

Human factors

Designing systems, tasks, and devices to fit human capabilities and limitations, reducing the chance of error.

IOM six aims (STEEEP)

The Institute of Medicine's six aims for quality: care that is Safe, Timely, Effective, Efficient, Equitable, and Patient-centered.

Just culture

An approach balancing accountability and learning that distinguishes human error, at-risk behavior, and reckless behavior instead of blaming individuals for system failures.

Lean

An improvement philosophy that maximizes value and eliminates waste (non-value-added steps) and improves flow.

Medication reconciliation

Comparing a patient's medication orders to all medications they take at each transition to prevent omissions, duplications, and interactions.

Model for Improvement

IHI's framework: three questions (aim, measures, changes) plus PDSA cycles to test changes.

National Patient Safety Goals

Joint Commission goals, updated annually, that target specific high-risk safety problems such as patient identification and medication safety.

NCQA

The National Committee for Quality Assurance, which accredits health plans and develops HEDIS.

Near miss

An event or error that could have caused harm but did not, by chance or timely intervention; a key learning opportunity.

Never event

A serious, largely preventable, clearly identifiable adverse event (e.g., wrong-site surgery, retained foreign object); from the NQF Serious Reportable Events list.

Outcome measure

A measure of the result of care on a patient's health status (e.g., mortality, readmission, infection rate).

Pareto chart

A bar chart ordering causes from most to least frequent (with a cumulative line) to find the vital few.

Patient safety

The prevention of errors and harm to patients during the provision of health care.

PDSA cycle

Plan-Do-Study-Act — an iterative, small-scale method to test and refine a change before spreading it. The engine of the Model for Improvement.

Peer review

Evaluation of a practitioner's clinical performance by professional peers to assess and improve quality; typically confidential.

Population health

The health outcomes of a group of individuals, including the distribution of those outcomes within the group.

Privileging

Authorizing a credentialed practitioner to perform specific procedures based on demonstrated competence.

Process measure

A measure of whether a recommended care step was performed (e.g., timely antibiotics).

Quality management plan

A written document describing how an organization measures, assesses, and improves quality and safety — including structure, scope, accountability, and reporting.

Reliability

The consistency of a measure — the degree to which it gives the same result on repeated measurement.

Risk adjustment

Statistically accounting for patient-mix differences so outcomes can be fairly compared across providers.

Risk management

Identifying, evaluating, and reducing risks of loss or harm to patients, staff, and the organization.

Risk stratification

Classifying a population by health risk so resources and interventions can be targeted to the highest-need patients.

Root cause analysis

A structured, retrospective process to identify the underlying system causes of an adverse event or near miss, focusing on systems rather than individuals.

Run chart

A line graph of data over time with a median, used to detect trends, shifts, and non-random patterns.

SBAR

A standardized handoff format: Situation, Background, Assessment, Recommendation.

Sentinel event

A patient-safety event (not primarily related to the natural course of illness) reaching a patient and resulting in death, permanent harm, or severe temporary harm.

Six Sigma

A data-driven method that reduces variation and defects, targeting no more than 3.4 defects per million opportunities.

Social determinants of health

Non-medical conditions (economic stability, education, healthcare access, environment, social context) that strongly shape health outcomes.

Special-cause variation

Variation from a specific, assignable cause outside the normal process (a point beyond control limits or a non-random pattern).

Stakeholder

Any person or group with an interest in, or affected by, a process or its outcomes — patients, staff, providers, payers, regulators, the community.

Strategic plan

A long-range roadmap defining an organization's mission, vision, goals, and priorities; the quality plan must align with it.

Swiss cheese model

Reason's model in which harm occurs when gaps in multiple layers of defense line up, letting a hazard reach the patient.

The Joint Commission

A major U.S. accrediting body that surveys and accredits health-care organizations against quality and safety standards.

Universal Protocol

Joint Commission requirements to prevent wrong-site/procedure/person surgery: verification, site marking, and a time-out.

Utilization management

Evaluation of the medical necessity, appropriateness, and efficiency of health services via prospective, concurrent, and retrospective review.

Validity

The degree to which a measure actually captures what it is intended to measure.

Value-based care

A payment approach rewarding providers for quality and outcomes rather than the volume of services.

CPHQ Study Guide FAQ

References

1. 1.Healthcare Quality Certification Commission (NAHQ). “2025 CPHQ Domestic Candidate Handbook.” nahq.org. ↑
2. 2.Healthcare Quality Certification Commission (NAHQ). “CPHQ Detailed Content Outline.” nahq.org. ↑
3. 3.Healthcare Quality Certification Commission (NAHQ). “Understanding a Scaled Score.” nahq.org. ↑
4. 4.National Association for Healthcare Quality. “CPHQ — Certified Professional in Healthcare Quality.” nahq.org. ↑
5. 5.Institute for Healthcare Improvement. “How to Improve: Model for Improvement.” ihi.org. ↑
6. 6.Institute for Healthcare Improvement. “Quality Improvement Essentials Toolkit (Run & Control Charts).” ihi.org. ↑
7. 7.The Joint Commission. “Sentinel Event Policy and Procedures.” jointcommission.org. ↑
8. 8.The Joint Commission. “National Patient Safety Goals.” jointcommission.org. ↑
9. 9.Agency for Healthcare Research and Quality. “PSNet Patient Safety Primers.” psnet.ahrq.gov. ↑
10. 10.National Committee for Quality Assurance. “HEDIS Measures and Technical Resources.” ncqa.org. ↑
11. 11.Centers for Medicare & Medicaid Services. “Value-Based Programs.” cms.gov. ↑
12. 101.Agency for Healthcare Research and Quality (AHRQ). “Patient Safety Primer: Culture of Safety.” psnet.ahrq.gov, accessed 19 June 2026. ↑
13. 102.Institute for Healthcare Improvement (IHI). “Run Chart Tool / QI Essentials.” ihi.org, accessed 19 June 2026. ↑
14. 103.Agency for Healthcare Research and Quality (AHRQ). “Patient Safety Primer: Never Events.” psnet.ahrq.gov, accessed 19 June 2026. ↑
15. 104.Agency for Healthcare Research and Quality (AHRQ). “Patient Safety Primer: High Reliability.” psnet.ahrq.gov, accessed 19 June 2026. ↑
16. 105.U.S. Department of Health & Human Services. “Healthy People 2030: Social Determinants of Health.” health.gov, accessed 19 June 2026. ↑
17. 106.Agency for Healthcare Research and Quality (AHRQ). “Care Transitions and Coordination.” ahrq.gov, accessed 19 June 2026. ↑
18. 107.Agency for Healthcare Research and Quality (AHRQ). “Patient Safety Primer: Medication Reconciliation.” psnet.ahrq.gov, accessed 19 June 2026. ↑
19. 108.Centers for Medicare & Medicaid Services (CMS). “Medicare Regulations and Guidance.” cms.gov, accessed 19 June 2026. ↑
20. 109.The Joint Commission. “Accreditation and Certification (Credentialing & Privileging).” jointcommission.org, accessed 19 June 2026. ↑

Career Employer

Career Employer is the ultimate resource to help you get started working the job of your dreams. We cover topics from general career information, career searching, exam preparation with free study materials, career interviewing, and becoming successful in your career of choice.

Follow Us:

All Posts