During onboarding and before access to any HCQIS system or application each user must complete proper training requirements on an annual basis and must provide evidence of completion to his/her respective Security Point of Contact (SPOC) who will track all required training within the organization. Note: In most cases, an annual attestation is also provided to the CMS COR as a deliverable. Contact your COR for specific contract deliverables and dates.
Security Awareness TrainingThe HCQIS system utilizes the DoD Cyber Exchange (h ttps://public.cyber.mil/cyber-training/), a publicly accessible training library with course offerings to allow Contractors to meet the CMS SAT requirements. These trainings include the C yber Awareness Challenge and Identifying and Safeguarding Personable Identifiable Information (PII) Privacy Training. Records Management
The Department of Health and Human Services (HHS) Records Management training is a mandatory training requirement and is outlined in the HHS Policy for Records Management and the Office of Management and Budget (OMB) and National Archives and Records Administration (NARA) Directive M-19-21, Transition to Electronic Records. The purpose of this training is to provide an overview of employee responsibilities for records management, help employees tell the difference between records and non-records, and assist employees in learning how to manage the federal records lifecycle. Note: HHS Human Capital manages Records Management training and requirements for CMS. Therefore, separate or updated instructions may be sent by HHS which include updates to training links, requirements or content and should be used as underlining guidance outside of these instructions. Please check with your COR on for any changes to these requirements.
Below are the links to the websites where the three required trainings are hosted. DoD provides the links for the security trainings and are subject to change at any time. If a link is broken, you may also do a web search for the name of the training and use the appropriate search result since they are publicly available. |