FAQ Directory: Utilization Management, Credentialing and Provider Network

Filter Results
  • Save

    Save your favorite pages and receive notifications whenever they’re updated.

    You will be prompted to log in to your NCQA account.

  • Email

    Share this page with a friend or colleague by Email.

    We do not share your information with third parties.

  • Print

    Print this page.

3.15.2022 Inaccessibility of practitioners’ licensure information from Maryland Department of Health The Maryland Department of Health (MDH) experienced a network security incident on December 4, 2021, that made its network systems and practitioners’ licensing information inaccessible for primary source verification. The MDH reports that all disrupted licensing board systems were restored as of February 4, 2022. The MDH granted a grace period (with no expiration date) on practitioners’ licenses set to expire between November 2021 and February 2022, and issued temporary licenses to affected practitioners whose licenses will expire June 2022.

How will NCQA evaluate affected practitioners’ files?

For Maryland practitioners credentialed between December 2021 and February 2022, NCQA will not penalize organizations on inability to verify licensure due to the MDH network security incident. NCQA accepts the MDH’s grace period on licensure expirations and accepts temporary licenses issued by the MDH and will consider them current and valid. Organizations should adhere to guidance provided by MDH and document the guidance in the affected practitioners’ credentialing files.

UM_CR 2022

2.15.2022 Annual Monitoring of CR System Controls Monitoring for Delegates Have the allowed methods to audit delegate files in CR 8, Element C, factor 5 changed?

No. Delegate files may be audited using one of the following methods as described in the factor explanation and noted below:

  • 5 percent or 50 of its files, whichever is less, to ensure that information is verified appropriately.
    • At a minimum, the sample includes at least 10 credentialing files and 10 recredentialing files. If fewer than 10 practitioners were credentialed or recredentialed since the last annual audit, the organization audits the universe of files rather than a sample.
  • The NCQA “8/30 methodology” available at https://www.ncqa.org/programs/health-plans/policy-accreditation-and-certification/

Either methodology is allowed, for consistency with other Delegation Oversight requirements for annual file audits.

UM_CR 2022

2.15.2022 Updated: Sampling for UM/CR System Controls Monitoring May organizations that use auditing as a method for monitoring system controls use sampling for UM 12 and CR1, Elements C and D?

Yes. NCQA has decided to allow sampling for organizations that use auditing as the method for monitoring in UM 12, Elements A – D and CR 1, Elements C and D. Organizations must use the “5% or 50 files” audit method: Organizations randomly select 5% or 50 files, whichever is less, from each applicable file type, to review against the requirements: 

  • Credentialing and recredentialing. (5% or 50 files total)  
    • At a minimum, the sample includes at least 10 credentialing files and 10 recredentialing files. If fewer than 10 practitioners were credentialed or recredentialed since the last annual audit, the organization audits the universe of files rather than a sample. 
  • UM denials (5% or 50 files). 
  • UM appeals (5% or 50 files). 

For each applicable file type noted above, the organization must determine the sample size of 5% or 50 files (whichever is less) based on all files in the file universe. The file universe includes all files with or without modifications. The sample that will be audited must include only files with modifications (i.e., modifications that meet and do not meet the organization’s policies and procedures). NCQA does not specify how the organization selects the sample once the sample size is determined using the entire file universe. It may select the sample of modified files from the universe or, if the organization can identify files with modifications, it may randomly select the sample that will be audited from only the modified files.

The organization’s analysis report must include the number or percentage of files that do not meet the organization’s policies and procedures.
Example for UM denials:

  • An organization’s UM denial file universe contains 800 files with and without modifications. Therefore, the minimum required sample for review is 40 files (5% of 800) which is less than 50 files. The organization must randomly select the 40 files for review from the total universe of 800 files or from only files with modifications (if the organization’s system has the capability to identify files with modifications). All 40 files must have a modification and are reviewed against the organization’s policies and procedures to identify noncompliant modifications.

Note: The underlined text is an update to the FAQ posted on January 15, 2022.

UM_CR 2022

2.15.2022 Annual Monitoring of UM System Controls Monitoring for Delegates Have the allowed methods to audit delegate files in UM 13, Element C, factor 5 changed?

No. Delegate files may be audited using one of the following methods as described in the factor explanation and noted below:

  • 5 percent or 50 of its files, whichever is less, to ensure that information is verified appropriately.
  • The NCQA “8/30 methodology” available at https://www.ncqa.org/programs/health-plans/policy-accreditation-and-certification/

Either methodology is allowed, for consistency with other Delegation Oversight requirements for annual file audits.

UM_CR 2022

1.15.2022 UM/CR System Control Delegation Agreement When must the delegation agreement include a description of the delegate’s UM/CR system controls as required in UM 13, Element A and CR 8, Element A?

New delegation agreements implemented on or after January 1, 2022, must include a description of the delegate’s UM/CR system security controls.
 
For delegation agreements in place prior to January 1, 2022, NCQA has extended the time frame for including a description of UM/CR system controls in the delegation agreement. All delegation agreements under the 2024 HPA standards (effective July 1, 2024) must include a description of UM/CR system controls. Prior to July 1, 2024, organizations may alternatively provide a delegation agreement and other mutually agreed upon documentation OR the delegate's system controls policies and procedures in lieu of a delegation agreement with a description of UM/CR System controls.

UM_CR 2022

7.15.2021 Use of Mail Service Organizations for Distribution Requirements Is it considered delegation if an organization uses a mail service organization to meet distribution requirements?

NCQA considers it to be delegation if the organization uses another organization, including a mail service organization, to perform any function not listed in the “Vendor” section of Appendix 3. 
NCQA considers it to be a vendor relationship if the organization uses another organization (e.g., a mail service organization) to perform functions evaluated by the elements or element components listed in the "Vendor" section of Appendix 3.

UM_CR 2021

12.15.2020 Corrective Action Plan Question: What is the corrective action process for organizations that do not meet a must-pass element?

A Corrective Action Plan (CAP) is required when an organization does not meet the minimum threshold for one or more must-pass elements. The CAP must be submitted to NCQA within 30 days after receipt of the final Accreditation status and must meet NCQA approval. The organization undergoes a CAP Survey that focuses on the failed must-pass elements (not at the factor level), i.e., all element factors, will be reviewed in addition to the factor(s) that failed the must-pass requirement.
NCQA schedules the CAP Survey for submission 6 months following the organization’s last full survey; the file review is 4 weeks later. The organization’s Accreditation status is noted “Under Corrective Action” status modifier noted on the report card during the corrective action period.
The fees for the CAP Survey can be found in the Pricing Exhibit on My NCQA. The look-back period is from the date of implementation of the corrective action up to the CAP Survey submission date and may be between 3 and 6 months before the CAP Survey submission.
After successful completion of the CAP Survey, the status modifier is removed from the organization’s status on the report card. The expiration date of the Accreditation status remains the same as the date specified in the decision that precipitated the CAP Survey. If a CAP Survey is unsuccessful, the Review Oversight Committee (ROC) may:

  • Extend the CAP status modifier, or
  • Reduce the organization’s status from Accredited to Provisional or from Provisional to Denied, or
  • Issue a Denied Accreditation status.

UM_CR 2019

10.15.2020 Inclusion of Dental and Vision Denials and Appeals for UM File Review Should denials and appeals for dental and vision requests be included in the UM denial and appeal file review universes?

For all product lines, dental and vision requests covered under the organization's medical benefit are within the scope of medical necessity review and must be included for UM file review for denials (UM 4-7) and appeals (UM 9), as outlined in the file review instructions.
Dental and vision requests not covered under medical benefits are not within the scope of denial and appeal file review.

UM_CR 2020

8.15.2020 CR 7: Organizational Providers NCQA added language to CR 7 in the 2020 Health Plan Accreditation standards to clarify that Element A applies to all organizational providers (e.g., telemedicine providers, urgent care centers). What does NCQA mean by “all organizational providers”?

NCQA added the word “all” to CR 7 in the 2020 HPA standards and guidelines because it expects organizations to have policies for assessing all providers with which they contract. However, under the 2020 standards and in previous years, NCQA only scores policies for providers listed in CR 7, Elements B and C.
Because the definition may not be sufficient to clearly identify which organizations NCQA considers “providers,” here is a list of provider types in addition to those listed in Elements B and C:

  • Telemedicine providers.
  • Urgent care centers.
  • Hospice.
  • Clinical labs.
  • Comprehensive outpatient rehabilitation facilities.
  • Outpatient physical therapy.
  • Speech pathology providers.
  • End-stage renal disease services.
  • Outpatient diabetes self-management training.
  • Portable x-ray suppliers.
  • Rural health clinics.
  • Federally qualified health centers.

UM_CR 2020

7.15.2020 Updated: CR 1, Element C- Outsourcing Storage of Credentialing Data To External Entities How many contracts does NCQA review for Element C, factor 4 if an organization outsources credentialing data to external entities?

If an organization contracts with external entities to store its own credentialing data or contracts with CR delegates that store data, NCQA also reviews contracts from up to four randomly selected external entities, or reviews all external entities if the organization has fewer than four. If factor 4 is not addressed in a contract, the organization may also present the external entity’s policies and procedures for review. NCQA reviews documentation from the organization and from each external entity against the factor. To be scored “yes,” the organization's and each external entity’s documentation must meet the factor.

Note: The underlined text is an update to the FAQ posted on June 15, 2020. Refer also to the FAQ on the same date regarding cloud storage entities.

UM_CR 2020

7.15.2020 Updated: UM 12- Outsourcing Storage of Utilization Management Data To External Entities How many contracts does NCQA review for Elements A and B, factor 6 if an organization outsources UM data to external entities?

If an organization contracts with external entities to store its own UM data or contracts with UM delegates that store data, NCQA also reviews contracts from up to four randomly selected external entities, or reviews all external entities if the organization has fewer than four. If factor 6 is not addressed in a contract, the organization may also present the external entity’s policies and procedures for review. NCQA reviews documentation from the organization and from each external entity against the factor. To be scored “yes,” the organization's and each external entity’s documentation must meet the factor.

Note: The underlined text is an update to the FAQ posted on June 15, 2020. Refer also to the FAQ on the same date regarding cloud storage entities.

UM_CR 2020

6.15.2020 UM 12: Outsourcing Storage of Utilization Management Data To External Entities Are cloud-services data storage providers included among the external entities for which NCQA reviews contracts for Elements A and B, factor 6?

NCQA includes external entities that store, create, modify or use UM data for any function covered by the UM standards on behalf of the organization in the scope of Elements A and B, factor 6, with the exception of organizations whose only UM service provided for  the organization is to provide cloud-based data storage functions and not services that create, modify or use UM data.

UM_CR 2020