How to Master One of the Hardest Parts of the HRCI aPHR Exam: Compliance and Risk Management

Ask aPHR candidates which part of the exam worries them most, and many will say employment law. Compliance and Risk Management is the largest functional area on the Associate Professional in Human Resources (aPHR)® exam, and it asks you to keep more than a dozen federal laws straight. Each one has its own coverage threshold, deadlines, and enforcing agency, and many sound alike.

Questions test the details: whether an employer is covered, how many days’ notice is required, or which agency handles a complaint. The good news is that these details are finite and learnable.

In this guide, we’ll walk you through what the area covers, the laws and numbers worth memorizing, common traps, and two worked sample scenarios.

What Does Compliance and Risk Management Cover on the aPHR?

In the aPHR Exam Content Outline (2021), Compliance and Risk Management carries 25% of the exam, or about 16 of the 65 scored questions. HRCI defines it as complying with laws, regulations, and policies, and educating stakeholders to identify, mitigate, and respond to organizational risk.

The area has six knowledge statements:

  • 01: Laws on talent acquisition, training, and employment rights, with examples such as the EEOC, Department of Labor, Form I-9, Title VII, the ADA, and the Immigration Reform and Control Act.
  • 02: Laws affecting union environments, such as the National Labor Relations Act (NLRA) and the WARN Act.
  • 03: Compensation and benefits laws, such as the FLSA, ERISA, COBRA, USERRA, and the Affordable Care Act (PPACA).
  • 04: Workplace health, safety, security, and privacy laws, such as OSHA, the Drug-Free Workplace Act, the ADA, HIPAA, and the Sarbanes-Oxley Act.
  • 05: Risk assessment and mitigation techniques, including emergency plans, workplace violence prevention, business continuity, and protecting trade secrets and assets.
  • 06: Restructuring initiatives and their business continuity risks, such as mergers, acquisitions, divestitures, offshoring, layoffs, and furloughs.

Which Employment Laws Should You Know for the aPHR?

Build a one-page sheet listing each law, what it does, who it covers, and its key numbers.

Hiring and Employment Rights

  • Title VII of the Civil Rights Act of 1964: Prohibits employment discrimination based on race, color, religion, sex, and national origin. It covers employers with 15 or more employees and is enforced by the Equal Employment Opportunity Commission (EEOC).
  • Americans with Disabilities Act (ADA): Title I covers employers with 15 or more employees. It requires reasonable accommodation for qualified individuals with disabilities unless it would cause undue hardship. The expected process is the interactive process, a good-faith dialogue with the employee.
  • Age Discrimination in Employment Act (ADEA): Protects workers age 40 and older at employers with 20 or more employees. It isn’t named in the outline, but it often appears alongside Title VII and the ADA.
  • Immigration Reform and Control Act (IRCA): Requires employers to verify identity and work authorization on Form I-9. The employee completes Section 1 by the first day of work, and the employer completes Section 2 within three business days of that start date. Keep the form for 3 years after hire or 1 year after employment ends, whichever is later.

Labor Relations and Layoffs

  • National Labor Relations Act (NLRA): Protects employees’ rights to organize, bargain collectively, and engage in “concerted activity” for mutual aid, such as discussing pay with coworkers. It applies to most private employers, whether or not they have a union, and is enforced by the National Labor Relations Board (NLRB).
  • Worker Adjustment and Retraining Notification (WARN) Act: Generally applies to employers with 100 or more employees. It requires 60 calendar days’ written notice before a plant closing affecting 50 or more employees at a single site, or a mass layoff of 500 or more employees (or 50 to 499 employees if they make up at least 33% of the site’s workforce).

Pay and Benefits

  • Fair Labor Standards Act (FLSA): Sets the federal minimum wage ($7.25 per hour), overtime at 1.5 times the regular rate for hours over 40 in a workweek, recordkeeping, and child labor rules. To be exempt from overtime, an employee must generally meet a salary basis test, a salary level test, and a duties test. Job title alone never makes someone exempt.
  • Employee Retirement Income Security Act (ERISA): Sets standards for private-sector retirement and health plans, including fiduciary duties, reporting, and participant disclosures such as the summary plan description.
  • Consolidated Omnibus Budget Reconciliation Act (COBRA): Lets employees and dependents continue group health coverage after a qualifying event at employers with 20 or more employees. Coverage typically lasts 18 months after termination or reduced hours, and up to 36 months for events like divorce or an employee’s death. The individual may be charged up to 102% of the premium.
  • Uniformed Services Employment and Reemployment Rights Act (USERRA): Protects the jobs of employees who serve in the uniformed services, generally for up to five years of cumulative service. It applies to employers of all sizes.
  • Patient Protection and Affordable Care Act (PPACA): Its employer shared responsibility provisions apply to applicable large employers, generally those with 50 or more full-time and full-time-equivalent employees. For this purpose, full-time means an average of 30 or more hours per week.

Safety, Security, and Privacy

  • Occupational Safety and Health Act (OSH Act): Requires employers to provide a workplace free from recognized serious hazards (the General Duty Clause). Employers must report a work-related fatality to OSHA within 8 hours, and an inpatient hospitalization, amputation, or loss of an eye within 24 hours. Many employers with more than 10 employees must keep the OSHA 300 injury and illness log.
  • Health Insurance Portability and Accountability Act (HIPAA): Protects the privacy of health information held by covered entities, including group health plans. For HR, that means keeping plan-related medical information separate from personnel files.
  • Drug-Free Workplace Act of 1988: Requires certain federal contractors and all federal grantees to maintain a drug-free workplace policy and awareness program.
  • Sarbanes-Oxley Act (SOX): Among other provisions, protects employees of publicly traded companies who report fraud from retaliation.

What About the Risk Management Side?

Knowledge statements 05 and 06 are about spotting and reducing risk, not memorizing statutes. Know the purpose of an emergency action plan and evacuation routes, the warning signs and prevention steps in a workplace violence program, and the parts of a business continuity plan (critical functions, backup staffing, communication trees).

Also know how employers protect trade secrets through confidentiality agreements, access controls, and exit procedures. For restructuring, understand how mergers, acquisitions, and layoffs create compliance exposure. Examples include WARN notice obligations, disparate impact in layoff selection, COBRA notices, and final pay timing under state law.

Common Compliance and Risk Management Traps

  • Mixing up employee-count thresholds: Title VII and the ADA start at 15 employees, the ADEA and COBRA at 20, the ACA employer mandate at 50, and WARN at 100. USERRA covers employers of any size.
  • Assuming exempt means salaried: A salaried employee who fails the duties test is still nonexempt and owed overtime.
  • Thinking the NLRA only protects union members: Nonunion employees who discuss wages or working conditions together are also protected.
  • Confusing the agencies: Discrimination charges go to the EEOC, wage-and-hour issues to the Department of Labor’s Wage and Hour Division, unfair labor practices to the NLRB, and safety complaints to OSHA.
  • Treating I-9 deadlines as calendar days: Section 2 is due within three business days of the start date.
  • Overlooking retaliation: An adverse action taken after an employee complains or participates in an investigation is a violation on its own, even if the original complaint isn’t proven.

Sample Scenarios: How to Reason to the Best Answer

Scenario 1: A Planned Closure

Consider a question where a manufacturer with 180 full-time employees plans to close one of its facilities, which employs 65 people, in six weeks. HR is asked what the company must do.

Start with coverage. With 180 full-time employees, the employer meets WARN’s 100-employee threshold. Next, check the trigger: a plant closing affecting 50 or more employees at a single site qualifies. WARN requires 60 calendar days’ written notice, and six weeks is only about 42 days.

The best answer is to give the required WARN notice and push the closing date back to allow at least 60 days (or recognize the exposure to back pay and benefits for the shortfall). Distractors about COBRA or final pay matter later but don’t fix the notice problem.

Scenario 2: The Salaried Coordinator

Now consider a question where an office coordinator is paid a salary above the FLSA threshold, has the title “Office Manager,” and regularly works 48 hours a week. Her job is mostly scheduling, data entry, and ordering supplies, and she doesn’t supervise anyone or exercise independent judgment on significant matters.

The trap is the salary and title. Exemption also requires passing a duties test, and routine clerical work doesn’t meet the executive or administrative exemption.

The best answer is that she is likely misclassified as exempt, should be treated as nonexempt, and is owed overtime for hours over 40. An answer that points to her salary or title alone is the classic wrong choice.

How Compliance Connects to the Other Functional Areas

  • Talent Acquisition: Interview questions, background checks, and I-9 timing all turn on Title VII, the ADA, and IRCA.
  • Learning and Development: Harassment prevention and safety training support compliance and reduce risk.
  • Compensation and Benefits: Exempt classification, overtime, COBRA, and retirement plan rules come straight from the FLSA, COBRA, and ERISA.
  • Employee Relations: Investigations, progressive discipline, and terminations need to be consistent and documented to defend against discrimination and retaliation claims.

A Focused Study Plan for Compliance and Risk Management

  1. Week 1: Build your law sheet from the outline’s named laws. Add the threshold, the key deadline, and the enforcing agency for each.
  2. Week 2: Drill the laws in groups: hiring rights, labor relations, pay and benefits, then safety and privacy. Quiz yourself on thresholds until they’re automatic.
  3. Week 3: Work through scenario questions. For each one, name the law and check coverage before you look at the options.
  4. Ongoing: Revisit the law sheet in short sessions a few times a week.

In Pocket Prep, use Build Your Own Quiz to focus only on Compliance and Risk Management, then take a Missed Questions quiz every few days. The detailed explanations show why the right law applies and why the distractors don’t, which is exactly the skill this area tests.

Start Preparing for the HRCI aPHR Exam With Pocket Prep

Pocket Prep’s HRCI aPHR exam prep includes 500 practice questions, each with a detailed explanation, so you can see exactly how the law applies in every scenario. Start with a Quick 10 on your commute, and use the Weakest Subject quiz to keep Compliance and Risk Management on track. Keep at it, and those thresholds and deadlines will become second nature before exam day.