CRIS Program Mission Statement
The mission of the Certified Release of Information Specialist (CRIS) Certification Program is to protect patients and the public by establishing and maintaining a credible, rigorous standard of competency for professionals engaged in the release of protected health information. The CRIS credential recognizes individuals who have demonstrated the knowledge and judgment necessary to handle medical record requests in a manner that is accurate, compliant, and consistent with applicable federal and state law.
Program Governance
The CRIS Certification Program is governed by the AHIOS CRIS Certification Board (the Board), an independent body with sole authority over all essential certification program decisions. The Board’s responsibilities include establishing and maintaining eligibility requirements, setting and reviewing examination passing standards, overseeing examination content development, reviewing appeals of adverse certification decisions, and adopting all certification policies.
The Certification Board operates independently from AHIOS’s general association functions, including its education and member services activities. This structural separation ensures that the credential remains an objective, merit-based measure of professional competency.
About the CRIS Credential
What is the CRIS? The Certified Release of Information Specialist (CRIS) is a professional credential awarded by the AHIOS Institute, a certification program of the Alliance for Health Information Operations and Standards (AHIOS). The CRIS credential provides independent, examination-based validation that the credential holder possesses the knowledge and applied judgment required to manage the release of protected health information (PHI) in a compliant, accurate, and ethical manner.
The CRIS is awarded to individuals who successfully pass a rigorous 100-question examination covering medical records fundamentals, release of information theory and practice, HIPAA privacy and security requirements, legal and sensitive information handling, and applied situational judgment. Certification decisions are based solely on examination performance and are not contingent on employer affiliation, professional association membership, or any other non-merit factor. The CRIS credential covers the scope of compliant handling, processing, and release of protected health information in accordance with HIPAA, applicable state and federal law, and current professional standards of practice.
Credential Definition: For purposes of the CRIS Certification Program, a credential is a formal recognition awarded to an individual who has met predetermined standards of knowledge and competency and who maintains any applicable renewal requirements. The CRIS credential signifies that the holder has satisfied the eligibility requirements established by AHIOS and has demonstrated mastery of the CRIS content domains through successful completion of the certification examination.
Designation Definition: The designation associated with the CRIS credential is the post-nominal letters CRIS, which may be appended to the credential holder’s name (e.g., Jane Smith, CRIS). Use of the CRIS designation is a privilege granted only to individuals who have earned the credential and maintained it in good standing. The designation may not be used by individuals whose certification has lapsed, been suspended, or been revoked. Use of the designation in a misleading or unauthorized manner is prohibited and may result in legal action by AHIOS.
Exam Content Blueprint
The CRIS examination is organized into eight content domains. The percentage of questions devoted to each domain reflects the relative importance of that domain to competent ROI practice, as determined by a formal job analysis conducted with 270 CRIS certificants and ROI professionals.
- Domain A: HIPAA Fundamentals and Compliance: 14%
- Domain B: Authorizations: 14%
- Domain C: Release of Information Fundamentals: 12%
- Domain D: Sensitive Information: 13%
- Domain E: Access Requests: 13%
- Domain F: Hot Topics — Emerging Regulations and Technology: 11%
- Domain G: Customer Service and Communication: 12%
- Domain H: General Health Information Management: 11%
About the Exam Content Blueprint — Job Analysis
The CRIS content blueprint is grounded in a formal job analysis conducted with 270 CRIS certificants and ROI professionals. Participants rated task statements across all eight content domains on three dimensions: importance to competent practice, frequency of performance, and consequence of error.
All eight domains were confirmed as important and relevant to ROI practice. The domain weights reflected above were derived directly from this study, with minor documented rounding adjustments. A complete copy of the AHIOS CRIS Job Analysis Report is available upon request from the AHIOS Certification Program Office.
Target Population
The CRIS credential is designed for health information and release of information professionals who are directly involved in the management and disclosure of protected health information on behalf of healthcare providers and facilities. The credential is appropriate for individuals who:
- Work in a release of information role within a healthcare facility, health system, or health information outsourcing organization that is a member or client of AHIOS
- Are responsible for processing, reviewing, authorizing, or fulfilling requests for medical records and other protected health information
- Apply knowledge of HIPAA, state privacy law, and healthcare operations to make compliant disclosure decisions in complex, real-world situations
The CRIS is an entry-to-experienced-level credential. It is appropriate for individuals who have recently entered the ROI field with foundational HIM education or credentials, as well as for experienced ROI professionals who wish to formalize and document their competency. The examination is designed to reflect the full range of knowledge and situational judgment required of a proficient release of information specialist operating under current federal and state regulatory requirements.
The CRIS is not designed as a specialty or advanced practice credential. It measures the core competencies required for proficient performance across the breadth of the ROI role, rather than advanced expertise in any single subspecialty area.
Eligibility Requirements
To be eligible to sit for the CRIS examination, candidates must meet one of the following criteria AND must be employed by a member or client of the Alliance for Health Information Operations and Standards (AHIOS):
- Hold a current AHIMA credential (RHIT, RHIA, CHPS, or CCS); OR
- Have a minimum of six (6) months of active experience in a release of information role; OR
- Have completed post-secondary education in health information management (HIM).
Eligibility is verified through the application process by the candidate’s AHIOS member company CRIS Test Representative. Candidates who are denied eligibility may appeal in writing to the CRIS Certification Board within 15 days of the denial notice.
Passing Standards and Retesting Policy
A score of 80% or higher (80 of 100 questions) is required to earn the CRIS credential on a first examination attempt. A score of 90% or higher (90 of 100 questions) is required for any retake attempt. The elevated standard for retakes reflects the fact that candidates retesting have had prior exposure to examination content and additional preparation time.
Candidates who do not achieve a passing score may retake the examination after a mandatory 30-day waiting period from the date of their most recent attempt. There is no limit on the number of retake attempts, provided the 30-day waiting period is observed between each attempt and the candidate remains eligible.
Certification Duration and Renewal
The CRIS credential is valid for two (2) years from the date of issuance. To maintain the credential in good standing, certificants must renew by retaking and passing the CRIS examination before their certification expiration date. A score of 80% or higher is required for a renewal examination. There is no continuing education (CEU) requirement for renewal.
The two-year renewal cycle reflects the pace at which regulatory requirements in the release of information field evolve, including updates to HIPAA rules, state privacy laws, and federal legislation such as the 21st Century Cures Act.
Adverse Decisions and Appeals
An adverse certification decision is any decision that negatively affects a candidate’s or certificant’s standing in the CRIS program, including denial of eligibility, invalidation of an examination score, or suspension or revocation of the CRIS certificate.
Any candidate or certificant who receives an adverse certification decision has the right to request reconsideration. Requests must be submitted in writing to the CRIS Certification Board within 30 calendar days of receiving written notice of the adverse decision. The Certification Board will acknowledge receipt and issue a written decision within 30 calendar days of receiving the complete request. The decision of the CRIS Certification Board constitutes the final determination of AHIOS with respect to certification matters.
Testing Accommodations
AHIOS provides reasonable testing accommodations to candidates with qualifying disabilities in compliance with the Americans with Disabilities Act (ADA) and applicable law. Candidates seeking an accommodation must submit a written request to their AHIOS member company CRIS Test Representative at least 30 calendar days before their intended examination date, along with current documentation from a qualified licensed professional.
The AHIOS Education Committee reviews requests and issues a written decision within 15 calendar days of receiving complete documentation. Accommodation documentation is treated as confidential, and score reports for accommodated candidates do not indicate that an accommodation was provided.
Nondiscrimination and Fairness
AHIOS and the CRIS Certification Program are committed to providing equal access to the CRIS examination and credential to all qualified candidates without regard to race, color, national origin, sex, gender identity, sexual orientation, religion, age, disability, veteran status, or any other characteristic protected by applicable federal, state, or local law.
Certification decisions are based solely on demonstrated knowledge and competency as measured by the CRIS examination. Candidates who believe they have experienced discrimination in connection with the CRIS certification program may submit a written complaint to the CRIS Certification Board. AHIOS prohibits retaliation against any individual who, in good faith, files a complaint or participates in an investigation.
Annual Certification Statistics
In the interest of transparency and public accountability, AHIOS publishes the following CRIS program statistics annually. Statistics reflect activity for the prior calendar year.
- Total candidates who sat for the examination in 2025: 976
- First-attempt pass rate: 73%
- Retake pass rate: 84%
- Total active CRIS certificants (as of December 31, 2025): 3,073
For additional information, contact the AHIOS Certification Program Office at education@ahios.org.
The CRIS Candidate Handbook and Application are available to all eligible candidates through their AHIOS member company CRIS Test Representative. The Candidate Handbook contains the full exam content blueprint, eligibility requirements, examination policies, accommodation procedures, and appeals process. For more information on the CRIS, please contact the AHIOS Certification Program Office at education@ahios.org.