FileCloud allows users to upload, download, and share contract-related files and documents while operating within the HCQIS Cloud.

System Status -

HCQIS Access Roles and Profile (HARP) is a secure identity management portal provided by CMS. A HARP account provides a user ID and password that can be used to sign into many CMS applications.

Managed File Transfer (MFT): Automates and secures data exchange to meet the needs for reporting and sharing data between both internal and external resources using a centralized enterprise-level approach.

System Status -

Data & Analytics: The centralized data repository (CDR) in the HCQIS Cloud and CCSQ Analytics Platform (CAP) tools.

• The CDR offers convenient, secure, and timelier access to CCSQ Quality data and claims data sourced from CMS systems of record.
• The CAP currently offers cloud-enabled, analytics engine that provides quick, accurate, and reliable analytics insights. It provides data wrangling and visualization, basic statistics, and advanced modeling capabilities.

QualityNet Atlassian: A collection of collaboration and planning services. The Atlassian suite includes the following tools

• Jira:  A work management system designed around the way software development and Agile teams do work, which provides the ability for individuals and teams to create, manage, and track tasks. 
• Confluence: A group collaboration and content management tool that provides content spaces with blog and repository functionality.
  

System Status -

QualityNet Mailer: A mailing list management system to communicate with end-users via email. The system offers notification lists (allows dissemination of information via email to list subscribers) and discussion lists (allows list members to participate in email conversations).

System Status -

QualityNet Portal: Provides healthcare quality improvement news, resources and data reporting tools and applications used by healthcare providers and others (https://www.qualitynet.org).

System Status -

HCQIS CCSQ ServiceNow: The software platform which supports IT Service Management (ITSM). It helps you to automate IT Business Management (ITBM). This cloud-based platform is designed based on ITIL guidelines. ServiceNow focuses on service-orientation toward the tasks, activities, and processes.

System Status -

QualityNet Slack: A digital-based collaboration tool enabling real-time communication between individuals and groups within the HCQIS community.

System Status -

Ansible Tower is agentless Open Source automation engine that can be used to automate software provisioning, configuration management, application deployment, and a host of other IT activities. Ansible Tower is a web-based solution that makes Ansible even easier to use for IT teams of all kinds. It is designed to be the hub for all your automation tasks and to make Ansible more useable in an Enterprise setting.

System Status -

Jenkins is an Open Source automation and orchestration engine. Jenkins offers a simple way to help automate the non-human parts of the software development process. Jenkins implements a continuous integration and continuous delivery environment for almost any combination of languages and source code repositories using pipelines, as well as automating other routine development tasks. Cloudbees Jenkins Enterprise (CJE) is a centrally managed Enterprise class version of Jenkins.

System Status -

New Relic Application Performance Monitoring (APM) is a Software as a Service (SaaS) offering to monitor resources such as infrastructure, applications, and Amazon Web Service (AWS) endpoints for applications in the HCQIS cloud. New Relic is fully integrated with the HCQIS single sign on solution and is replacing SteelCentral APM for applications in the HCQIS Cloud. 

System Status -

The HCQIS Cloud is an AWS-based public cloud solution that enables the HCQIS program to utilize AWS cloud services in a manner that meets CMS security, architecture, and governance requirements.

System Status -

GitHub Enterprise (GHE) is the Open Source solution used by HCQIS to implement Software Configuration Management (SCM).

System Status -

Nexus IQ Server (NXIQ) is the policy engine that powers Nexus Firewall, Nexus Lifecycle, and Nexus Auditor.

System Status -

Nexus Repository Manager (NXRM) is the repository management solution that is used by HCQIS to store and manage whatever libraries and other binary artifacts that the users require.

System Status -

Zscaler: An alternative to a virtual private network (VPN) that uses a unique method of allowing users to access HCQIS resources, while remaining connected to contractor network resources.

System Status -

Splunk is a powerful tool for searching and exploring data. It can help predict, identify, and solve problems related to business, information technology (IT), DevOps, and security in real time.

System Status - 

SurveyMonkey is  an online survey software tool that helps you to create and run professional online surveys.  With SurveyMonkey you can gather opinions and transform them into actionable Data.  

System Status -

TestRail is a modern web-based Test Case Management system developed by Gurock that provides a complete test case management solution to efficiently mange, track and organize software testing efforts. 

System Status - 

HCQIS Network DevOps provide and supports secure network infrastructure and data transfer services into, out of, and within HCQIS processing environments. Network Services (Internet, CMSNet WAN, HCQIS WAN, VPN, Network Security, Presentation Zone. Data Services (Data Transfer, Data Manipulation, Data Retrieval, Syslog Servier Cluster.)

Change Management is the guiding process for how we prepare, equip and support our customers and employees throughout the phases of an implemented change. It provides an organized method for people to successfully move from their current ideology or methodology to their future ones as you have defined them.

Incident Management is the process used by DevOps and IT Operations teams to respond to an unplanned event or service interruption and restore the service to its operational state.

Release and Environment Coordination 

Release and Environment Coordination provides for advanced Enterprise Services (ES) / Line of Business (LOB) planning for required infrastructure and other updates. 

Authentication required to access this information 

QualityNet IT Services Contract Onboarding Process

The onboarding process, which follows a timeline that begins 60 days prior to contract award, consists of the following activities:

• Notification of Contract Solicitation
• Identification of Contract Requirements
• Notification of Contract Award
• Completion of Contract Engagement Intake Form
• Participation in Contract Engagement Meeting

COR Actions

To ensure a smooth and quick onboarding experience for all involved, the following actions should be completed according to the stated timeline.

Resources

• ISG Questionnaire
• Contract Engagement Intake Form
• QualityNet | HARP
• CMS Services
• Contractor Onboarding
• QualityNet IT Services

Need Help?

Contact the Contract Engagement team at ISGContractEngagement@hcqis.org.

Contract Closeout Process

The Contract Engagement team tracks contracts that use QualityNet IT Services from contract start to end. To ensure a smooth and secure process is followed for closing out an existing contract's access to these services, the team contacts the CMS COR 60 days before the contract POP end date to initiate closeout activities.

These activities start by communicating which scenario will occur once it is known to the Contract Engagement team. Based on the scenario, the Contract Engagement team will request a few pieces of information that are needed to coordinate user access.

The CMS COR is asked to select one of the following closeout scenarios:

The Contract Engagement team's role is to ensure that user access to QualityNet IT Services occurs seamlessly, whether onboarding a new contractor, transitioning an existing contractor, or closing out a contract with no award, by working with the CMS COR.

Contract Maintenance

During the contract Period of Performance (POP) there are three actions for QualityNet IT Services that may require CMS COR involvement:

Security Official

The SO is responsible for the following:

• Communicate to users in your organization how to request access to the QualityNet IT Services approved for your contract/organization.
• Review and approve all new user requests for these services.
  NOTE: Only approve user requests that come directly from your contract/organization.
• Remove users that no longer require access to these services.
• Approve other SOs within your organization, as needed, to assist with the above tasks.

Refer to the Security Official Role on the QualityNet | HARP page for instructions on requesting the SO role in HARP and a short video of the role. Once your request is approved, you will review and approve requests from members of your organization for access to the desired services. You will also remove users’ access to services no longer needed.

To ensure a smooth and quick start to utilizing the approved service(s), the Contract Engagement team recommends the following actions be taken:

Resources

QualityNet | HARP

QualityNet IT Services

Security Point of Contact

Each organization is required to designate at least one (1) Security Point of Contact (SPOC) who is responsible for ensuring the organization is compliant with CMS security requirements and policies. You may access the Policies/Procedures and Security Awareness Training by going to https://qnetconfluence.cms.gov/ and selecting Security. The SPOC is responsible for reporting and handling security incidents that occur within the organization. 

When a contract is awarded, the CMS COR will designate the first SPOC who will be established in ServiceNow. When an organization needs to add, update, replace or make any changes to the  SPOC it can be done via the HARP application following the instructions below. Once approved, the SPOC is stored and tracked through ServiceNow for general tracking and maintenance. 

HCQIS ServiceNow - Refer to Security POC tab on this page for requesting assignment as your organization's SPOC for a program. Note that your CMS COR must have a HARP account for your request to be approved.

Security Requirements and Policies

QualityNet Security - Central source of security-related information and reference material.

Resources

HCQIS ServiceNow

QualityNet Security