The CPPS task list names root cause analysis, apparent cause analysis and proactive risk tools like FMEA as separate skills. The exam expects you to know what each one is, and more importantly, when to use it. It also asks you to judge whether proposed fixes are strong enough to work.
Picking the right tool
| Tool | When | Looks | Typical trigger |
|---|---|---|---|
| Root cause analysis (RCA) | After an event | Backward | Serious harm, sentinel events, high-risk near misses |
| Apparent cause analysis (ACA) | After an event | Backward, briefly | Lower-severity events and near misses |
| Failure mode and effects analysis (FMEA) | Before anything goes wrong | Forward | New or changed high-risk processes, equipment or workflows |
The deciding factor is usually severity and timing. Organizations use a risk-based prioritization, often a severity and probability score, to decide which events get a full RCA. Not every event deserves one, and trying to do RCAs on everything burns out teams and slows down the ones that matter.
Root cause analysis
An RCA is a structured, team-based investigation that asks what happened, why it happened, and what will stop it from happening again. The focus is systems and processes, not individual blame.
What a strong RCA includes
- Prompt start and an interdisciplinary team, including people who know the work but weren't directly involved
- Interviews and, when possible, a walk-through of the actual location and process
- A timeline and a flowchart of what happened compared with what was supposed to happen
- Cause analysis using tools like the "5 whys" and cause-and-effect (fishbone) diagrams
- Corrective actions that match the causes found, each with an owner, a deadline, and a measure to check it worked
- Leadership review and sharing of lessons learned
The National Patient Safety Foundation's 2015 report RCA²: Improving Root Cause Analyses and Actions to Prevent Harm pushed the field to focus less on completing the analysis and more on actions that actually reduce risk. That idea shows up throughout the exam.
For sentinel events, The Joint Commission expects accredited organizations to complete a comprehensive systematic analysis and action plan, commonly within 45 business days. Know that external requirements like this exist and that event severity drives escalation.
Apparent cause analysis
An ACA is a shorter review for events that don't meet the RCA threshold. It's often done by one or two people, such as a unit manager, and looks for the obvious cause close to the event. It's quicker and cheaper, which lets organizations learn from far more events.
Many review materials skip ACA entirely, but it's listed as its own task on the CPPS outline. If a question describes a minor event and asks for a proportionate response, a full RCA is usually not the answer.
FMEA
FMEA looks at a process before it fails. A team maps each step, lists the ways each step could fail (failure modes), and considers the effect of each failure.
- Choose a high-risk process and assemble a team.
- Map the process step by step.
- Brainstorm failure modes for each step.
- Score each one. A classic approach multiplies severity × occurrence × detectability into a risk priority number. Healthcare versions such as HFMEA use a severity and probability score with a decision tree.
- Redesign the highest-risk steps and test the changes.
Other proactive methods include safety walk-arounds, which the outline mentions by name.
Event analysis questions are common in two domains. Practice them with 50 free questions.
Try 50 free questionsThe action hierarchy
Finding causes is only half the job. The CPPS outline asks you to identify the strongest interventions and judge whether solutions actually match the root causes. The action hierarchy used by the VA National Center for Patient Safety and adopted in RCA² is the standard framework:
| Strength | Examples |
|---|---|
| Stronger Don't depend on people remembering | Physical or architectural changes, forcing functions (a connector that can't fit the wrong port), simplifying the process, standardizing equipment, visible leadership involvement |
| Intermediate | Checklists and cognitive aids, standardized communication tools, redundancy, better staffing or reduced workload, software enhancements, removing distractions, simulation training |
| Weaker Depend on memory and vigilance | Double checks, warnings and labels, new policies or procedures, education and training |
Weaker actions aren't useless. They're often part of a plan. But a plan made only of retraining and a policy memo is a red flag, and the exam knows it.
Practice questions
Practice question 1
A hospital plans to introduce a new smart infusion pump across all units next quarter. Which analysis is most appropriate now?
- Root cause analysis
- Apparent cause analysis
- Failure mode and effects analysis
- Chart audit of past infusion errors
Show answer
Answer: C. The change hasn't happened yet and involves a high-risk process. FMEA is designed to find failure points before they cause harm.
Practice question 2
An RCA finds that a patient received a tenfold overdose because two concentrations of the same drug were stocked in the same automated dispensing cabinet drawer. Which corrective action is strongest?
- Educate nurses on concentration differences
- Add a warning label to the drawer
- Remove the high concentration from floor stock entirely
- Require an independent double check for this drug
Show answer
Answer: C. Removing the hazard eliminates the possibility of the error. The other options rely on people noticing and remembering, which ranks lower on the action hierarchy.
Practice question 3
A patient on a medical unit has a minor skin tear from a blood pressure cuff. There's no lasting harm. What is the most proportionate review?
- Full RCA with an interdisciplinary team
- Apparent cause analysis by the unit manager
- Report to The Joint Commission as a sentinel event
- No review because there was no lasting harm
Show answer
Answer: B. A low-severity event deserves a quick, proportionate review. A full RCA would overuse resources, and ignoring the event misses a learning opportunity.
Frequently asked questions
RCA looks backward to explain an event that already happened. FMEA looks forward to find ways a process could fail before any harm occurs.
A shorter, proportionate review for lower-severity events, often done by one or two people, that identifies the most obvious cause near the event.
Actions that don't rely on human memory or vigilance: forcing functions, physical design changes, simplification and standardization. Training, policies and warnings are the weakest.
A 2015 National Patient Safety Foundation report that reframed root cause analysis around taking effective action to prevent harm, not just completing the analysis.
Sources
- CBPPS, CPPS Examination Content Outline (published September 2024), linked from IHI’s CPPS examination page.
- National Patient Safety Foundation. RCA²: Improving Root Cause Analyses and Actions to Prevent Harm (2015).
- VA National Center for Patient Safety, action hierarchy.
- The Joint Commission, Sentinel Event Policy.
Exam details change between handbook editions. Always confirm fees, eligibility and policies with CBPPS/IHI before you apply. CPPS Qbank is an independent study resource and is not affiliated with or endorsed by IHI or CBPPS.