The Certified Professional in Patient Safety (CPPS) credential is awarded by the Certification Board for Professionals in Patient Safety (CBPPS) through the Institute for Healthcare Improvement (IHI). It certifies proficiency in the core standards of patient safety science and human factors engineering, demonstrated on a 120-question examination across four domains. This guide takes the credential apart — eligibility, outline, sitting, scoring, and the three-year cycle that follows — from the board’s own published material.
This program is part of the expanding PassProfessor catalog — join the notify list and we’ll email you when enrollment opens.
The credential at a glance
| Item | Verified position |
|---|---|
| Program | Certified Professional in Patient Safety (CPPS) |
| Certifying body | Certification Board for Professionals in Patient Safety (CBPPS), through the Institute for Healthcare Improvement (IHI); examination services by PSI Services |
| Examination | 120 multiple-choice questions: 100 scored questions and 20 pretest questions, in 2.5 hours, by computer at PSI test centers or by live remote online proctoring |
| Question types | Recall, application and analysis; only a small percentage of questions are recall — the rest divide between application and analysis |
| Passing standard | Criterion-referenced: the passing score is set by an Angoff process and forms are equated; CBPPS publishes no numeric pass mark in its candidate-facing handbook, so none is printed here |
| Eligibility | Patient safety as an integral component of current or future professional responsibilities, plus either a baccalaureate degree or higher with three years of experience in a health care setting or with a provider of services to the health care industry, or an associate degree or equivalent with five years of such experience (clinical rotations and residency time count) |
| Examination fee (body’s fee) | $549 for US/domestic candidates; international candidates add $100 |
| Credential term | Three years |
| Recertification | 45 continuing education hours following the CPPS content outline across the cycle, or re-examination within one year before expiration |
| Administrator note | PassProfessor is independent and is not affiliated with IHI or CBPPS |
The CPPS rewards candidates who understand what kind of credential it is before they study for it. It is not a clinical specialty examination and it is not a management examination, though clinicians and managers both hold it. It is a methods examination: it tests whether the candidate can see a safety problem the way the patient safety discipline sees it — as a property of a designed system, visible in data, shaped by culture, and fixable in proportion to the strength of the intervention chosen. Every section of this guide returns to that character, because preparation that ignores it studies the wrong examination.
Reading the verified facts
Every fact in the table above was pinned to CBPPS and IHI primary material — the CPPS Candidate Handbook (November 2024) and the CPPS Recertification Handbook (May 2025), which carries the examination content outline — during this program’s research pass. Three reading rules apply throughout the guide. First, where the board’s candidate-facing material does not state a figure, the guide says so instead of importing one: the handbook explains exactly how the passing standard is set and publishes no number for it, so no number appears here. Second, older material is dated material: preparation sources built before the 2023 job analysis describe a five-domain outline with leadership as its own domain and, in some cases, a different examination length. The current outline has four domains and the current examination has 120 questions; a study plan built on the retired outline misallocates a fifth of the work. Third, credentials with similar initials are different credentials: the CPPS is patient safety, awarded by CBPPS at IHI; the BCPPS is a pediatric pharmacy specialty credential awarded by a pharmacy board. Nothing in this guide transfers between them.
Who this credential is for
The board’s eligibility frame is deliberately functional rather than titular. Candidates are those who include patient safety practices as an integral component of current or future professional responsibilities — a definition that reaches the patient safety officer and the quality analyst, the bedside clinician who leads unit safety work, the risk manager, the pharmacist working on medication safety, the executive accountable for harm reduction, and the professional moving toward any of those roles. Settings are equally broad: hospitals, health systems, the home, ambulatory and outpatient settings, academia, the community, and providers of services to the health care industry, in the United States and internationally. The two education-and-experience combinations then do the filtering: a baccalaureate degree or higher with three years of relevant experience, or an associate degree or equivalent with five. Time in clinical rotations and residency programs counts toward the experience. CBPPS randomly audits a limited number of applications each year, so eligibility is an attestation the candidate must be able to document, not a formality.
The route, step by step
Step one — confirm the role test and the combination. Patient safety must be integral to your current or intended responsibilities, and you must meet one of the two education-and-experience combinations. Assemble the documentation before applying; an audited application is answered with records, not recollections. Step two — apply and register through PSI. Registration runs through the PSI portal for the CBPPS program, online or by the handbook’s paper route, with the examination fee — $549 domestic, with $100 added for international candidates — payable at registration. Fees are not refundable or transferable and expire in one year. Step three — schedule the sitting. Choose a PSI test center — the network runs to roughly 300 centers in the United States, with international availability — or live remote online proctoring from your own computer, after the required compatibility check of audio, video, webcam and system. Step four — sit the examination. 120 questions in 2.5 hours, one question at a time, with the ability to move backward and forward, bookmark items and comment on questions; no breaks are permitted. Step five — receive and read the result. Test-center candidates see results on screen at the end of the session and receive an official score report by email; the report’s content-area feedback is study guidance for a retake, not a domain-by-domain pass standard — the pass/fail determination is made on the total score. Step six — hold the credential on its clock. Certification runs three years from the month of certification; the recertification application is due by the end of that month three years on.
The outline in full
The content outline below is the board’s current outline, stated in full with its published scored-item counts. The four domains total 100 scored questions; the 20 pretest questions sit inside the same domains but are unmarked and unscored. Candidates should weight preparation by these counts and by the cognitive character of the paper: only a small percentage of items are recall, and the remainder divide between application and analysis, so every topic below is examined as something to be used, not recited.
Culture — 20 scored questions
The Culture domain has two strands. Culture of Safety examines organisational culture in its named forms — just, non-hierarchical, and psychologically safe — together with organisational infrastructure and requirements, safety climate and the healthy work environment, communication and collaboration, the learning culture, and event response. The examined ideas are discriminating ones: a just culture is not a blame-free culture, because the outline pairs psychological safety with accountability structures; a learning culture is not a reporting culture alone, because reporting without feedback and visible response is examined as a system that decays. Leadership and Outreach examines leadership at three radii — organisational, community and group, and individual and team — the outline’s way of saying the certified professional is expected to move safety work at each of those scales. Candidates under-prepare this domain because its vocabulary feels familiar; the examination tests the distinctions inside the vocabulary, and twenty questions is a fifth of the paper.
Systems Thinking, Human Factors Engineering, and Design — 20 scored questions
Systems Thinking examines systems thinking models such as SEIPS, frameworks including Safety I and Safety II and high reliability organising, system complexity, and systems approaches and principles. The candidate must be able to reason about work-as-done against work-as-imagined, about latent conditions accumulating until they align with an active failure, and about why tightly coupled, complexly interactive systems produce failures no component inspection predicts. Human Factors Engineering examines cognitive bias, system constraints and barriers, human factors and ergonomics, and human capacity — fatigue, workload and interruption treated as design inputs rather than personal failings. Design examines usability and functionality, workflow, resources including supplies and cost-benefit reasoning, and technology, equipment and environment. This is the domain where the examination’s philosophy is most concentrated: the strongest safety interventions redesign the work so the error becomes hard to make, and items reward candidates who reach for design before education, reminders or vigilance.
Safety Risks and Responses — 35 scored questions
Risk Assessment is the domain’s front half: escalations, reporting systems and communication methodologies; severity of incident; process and data analysis; transitions of care; environmental hazards; settings and care locations; work environment and psychological safety; and sociodemographic and population-specific stratification and assessment — the examined habit of cutting safety data by population so harm concentrated in one group is not averaged into invisibility. Risk and Harm Recognition names the harm inventory: diagnosis, the medication management and use process, interventions, surgery, diagnostic and therapeutic procedures, patient deterioration, health care acquired conditions and infections, inequities, physical and non-physical violence and incivility, over- and under-treatment and omissions, and emergency preparedness. Barriers to Safety is examined separately — human and financial resources, supplies and shortages, technological factors such as interoperability, inequities in care across access, language, technology and health literacy, care fragmentation and transitions, and extra-organisational challenges such as pandemics, regulations and policies — because naming what blocks safety work is itself a tested competency. Patient and Workplace Safety Responses closes the domain: protocols and checklists, safety systems including rapid response, proactive and environmental systems and the electronic health record, risk management, peer and team support including safety huddles, debriefings and de-escalation, and communication and resolution programs. At 35 of 100 scored questions, this domain decides more results than any other.
Performance Measurement, Analysis, Improvement and Monitoring — 25 scored questions
Measurement examines process mapping, process, outcome and balance measurement design, data collection and analysis, and data visualisation. The three measure types are the load-bearing distinction: a process measure says whether the intended care happened, an outcome measure says whether the patient was harmed or helped, and a balance measure says what the change disturbed elsewhere — and items test whether the candidate can design all three for a stated improvement aim and read the charts each produces, including the difference between common-cause variation to be understood and special-cause variation to be acted on. Review and Analysis examines analysis tools, the analysis and review process applied to risks, events and hazards, proactive and reactive approaches to review — the prospective analysis of a process before it harms against the retrospective analysis of an event after it has — and barriers to review and analysis. Improvement and Sustainability examines improvement models, design, selection and implementation of interventions, communication and education, evaluation of event and process response, the hierarchy of hazard reduction — the ranking that places forcing functions and design changes above simplification, checklists, education and exhortation — change management, and monitoring change. A candidate fluent in the first three domains but illiterate here can describe a safety problem precisely and still choose the weakest available fix; the examination prices that gap at a quarter of the paper.
How the passing standard is set
CBPPS uses a criterion-referenced methodology. There is no curve and candidates do not compete with one another; performance is compared against the criterion of acceptable practice for a qualified patient safety professional. The passing score is determined by an Angoff process, in which experts estimate the difficulty of each item for the minimally qualified candidate and those judgments are averaged into the minimum passing score. A statistical equating process then keeps forms of equivalent difficulty held to the same standard. Two practical consequences follow. First, there is no published numeric target to study toward — and none is printed in this guide, because the board’s candidate handbook publishes none; preparation aimed at a percentage borrowed from another credential is aimed at an invented number. Second, the content-area scores on the score report are feedback about relative strengths and weaknesses; the examination makes one consistent determination on the total score, not four domain verdicts.
The sitting itself
The examination is delivered by computer, at PSI test centers by appointment — report 30 minutes early, with one valid government-issued photo identification whose name matches the registration — or by live remote online proctoring, where the candidate logs in up to 30 minutes ahead, must start within 15 minutes of the appointment, remains on camera throughout, and may not leave the camera view. No breaks are allowed in either mode. Personal belongings are restricted to a soft locker at a test center; only silent, non-programmable calculators without alphabetic keypads are permitted if needed. A short practice session on the testing software precedes the timed examination and does not consume examination time. Every question should be answered — there is no penalty for guessing — and unanswered or bookmarked questions can be revisited within the 2.5 hours. Misconduct, including any attempt to record or communicate examination content, ends the administration and forfeits the fees; examination questions are copyrighted and their reproduction is prohibited.
A study plan built on how this examination is actually put together
Build the plan in the order the outline weights the work. First, Safety Risks and Responses as the centre of gravity — a third of the scored paper, spanning risk assessment method, the harm inventory, barriers, and response systems; work it as a cycle (assess, recognise, respond) rather than as four lists. Second, measurement and improvement literacy — measure design across process, outcome and balance types, chart reading, proactive against reactive analysis, improvement models and the hierarchy of hazard reduction — until choosing and ranking interventions is automatic. Third, the systems and culture domains together, because they share a logic: SEIPS and Safety I/II reasoning explains why just culture and psychological safety are structural rather than attitudinal, and items move between the two domains’ vocabularies freely. Fourth, timed mixed practice in full 120-question sittings, because 2.5 hours across application- and analysis-level items is a pacing discipline of its own. Throughout, study from the current four-domain outline; material describing five domains belongs to the pre-2023 examination and will mis-teach both content and weight.
The working method: turning the outline into a performance
Four habits convert this outline into a result. Scenario-first study. Every concept is learned through an event: state the harm, the system that produced it, the measure that would have shown it, and the strongest intervention against it. The examination presents work this way; notes organised as definitions must be translated under time pressure, and translation is where marks leak. Hierarchy discipline. For every risk studied, rank the candidate responses from strongest to weakest on the hierarchy of hazard reduction and practise choosing the strongest feasible one; a large share of items is decided by exactly that ranking. Chart fluency. Read run charts and control charts until the response — act, or keep watching — is immediate, and practise pairing every improvement aim with its process, outcome and balance measures as a set. An error log keyed to the outline. Record every missed practice item by domain and strand, and by failure type — concept unknown, systems instinct overridden by a clinical instinct, measure type confused, intervention ranked too weak. After two weeks the log shows which failure type is costing the marks, and the remaining study belongs there.
The errors this examination is built to catch
The CPPS paper is built to catch a recognisable set of errors. Choosing the person over the system is the largest: retraining, reminding, counselling or disciplining the individual involved, when a design change, a forcing function or a workflow repair is on offer. Confusing the measure types — presenting a process measure as evidence of reduced harm, or improving one number while its balance measure deteriorates unexamined. Treating reporting as the intervention — a reporting system is an assessment instrument; items credit the loop that analyses, acts and feeds back, not the report count. Ranking interventions by convenience instead of by the hierarchy of hazard reduction. Studying the retired outline — five-domain material belongs to the pre-2023 examination. Finally, assuming a clinical specialty is the qualification: the eligibility test is role and experience, and the examination’s centre of gravity is method, which strong clinicians fail when they prepare as though it were a clinical paper.
After the sitting: the credential and its clock
Certification runs three years. Recertification Path I requires 45 continuing education hours across the cycle, all following the CPPS content outline — educational programs, self-study, academic coursework, speaking and teaching, publication, item writing and examination development work are among the accepted activity types — submitted with the recertification application and fee by the end of the certification month. Path II is re-examination within one year before expiration. A grace period of up to 30 days follows the expiration date, with additional fees; beyond it, the credential is revoked for failure to recertify and the route back is the examination. There is no inactive or retired status and no waiver of the continuing education requirement. Holders also practise under the CBPPS Code of Conduct, and violations may result in discipline, up to loss of the credential.
Frequently asked questions
Who awards the CPPS credential, and who runs the examination?
The Certification Board for Professionals in Patient Safety (CBPPS), through the Institute for Healthcare Improvement (IHI), awards the credential. PSI Services assists CBPPS in the development, administration, scoring and analysis of the examination, and delivers it at test centers and by live remote online proctoring.
Is the CPPS accredited?
Yes. The CPPS program is fully accredited by the National Commission for Certifying Agencies (NCCA), the accrediting body of the Institute for Credentialing Excellence.
How is the CPPS different from the BCPPS?
Entirely. The CPPS is the Certified Professional in Patient Safety (CBPPS at IHI). The BCPPS is a pediatric pharmacy specialty credential from a pharmacy board. Different bodies, professions and examinations; the similarity is only in the initials.
What are the eligibility requirements in full?
Patient safety must be an integral component of your current or future professional responsibilities, and you must meet one combination: a baccalaureate degree or higher plus three years of experience in a health care setting or with a provider of services to the health care industry, or an associate degree or equivalent plus five years of such experience. Clinical rotations and residency training count toward the experience. CBPPS audits a limited number of applications at random each year.
How many questions are on the examination and how are they weighted?
120 questions in 2.5 hours: 100 scored and 20 pretest, unmarked and dispersed through the form. The scored items divide as Culture 20, Systems Thinking, Human Factors Engineering, and Design 20, Safety Risks and Responses 35, and Performance Measurement, Analysis, Improvement and Monitoring 25.
What score do I need to pass?
The board publishes no numeric pass mark in its candidate handbook. The standard is set by an Angoff criterion-referenced process — the performance expected of a minimally qualified patient safety professional — and forms are equated so the standard is the same across administrations. This guide prints no number because the board states none in candidate-facing material.
What kinds of questions are asked?
Recall, application and analysis — with only a small percentage at recall level. The handbook describes most questions as job-related and experience-based: expect scenarios requiring you to apply safety science to a situation, not to recite definitions.
How much does the examination cost, and what if I need to reschedule?
The fee is $549 for US/domestic candidates and $649 for international candidates, payable to PSI at registration; fees are non-refundable and non-transferable and expire in one year. One reschedule is permitted at no charge if made at least two business days before the appointment; a missed appointment or late arrival forfeits the fee.
What happens if I fail?
You may retake after a 30-day wait, up to three times in a one-year period, reapplying and paying the fee each time. After a third failure in the period, a one-year wait applies before a further attempt. Your score report’s content-area feedback is the board’s intended guide for the retake’s preparation.
How does recertification work?
Every three years, by one of two paths: 45 continuing education hours following the content outline, documented and submitted with the application and fee; or passing the examination again within one year before expiration. Applications are due by the end of the certification month, with up to a 30-day grace period; there is no inactive status and no CE waiver.
Can I take the examination outside the United States?
Yes. International candidates register through the same PSI portal, pay the additional international fee, and sit at international test centers or by live remote proctoring. International candidates do not receive instant score reports; results follow within two business days.
Does CBPPS endorse this preparation program?
No. CBPPS does not endorse resources designed to prepare candidates for the examination, and PassProfessor is an independent provider, not affiliated with IHI or CBPPS. The board’s own candidate materials — the handbook and the content outline — are the authoritative documents, and this guide is built from them.
When does enrollment open for the PassProfessor program?
The program is in the works and enrollment is not yet open. Leave an email address on this page and PassProfessor will write to you when the program is ready — and only about this program. The companion Certified Professional in Patient Safety program page describes what the program will cover.