Newly on-boarded HCQIS Services users who have taken all three training modules within thelast 90 days of the organization's certification period are EXEMPT from taking SAT training for the current annual certification period. This group of users will take security awareness training as normal during the following annual certification period.
Note: Any deviations from either training module will require the user to take any missed training during the current certification period.
- Only (1) memo is required for all sites under each prime contract region/area/site.
- The Certification Memo must be signed by the Security Point of Contact (SPOC)/ Security Officer (SO) and the organization's designated Program Lead.
- You may apply a naming convention that best suits your organization, Contract or deliverable. Some examples of the document format names are listed below:
- Naming format for BFCC: "BFCC-QIO-(Contract Name)_SAT_20xx.pdf"
- Naming format for QIN: "QIN-QIO-(Contract Name)_SAT_20xx.pdf"
- Other Organizations: "(Org/Contract Name)_SAT_20xx.pdf"
- You may also have multiple sites that need to be tracked separately. "Site Identification" located at the top of the Certification Memo will help (if applicable):
- Region/Area/Network ID; this will vary between contract type/organization.
- "BFCC-QIO Region 1"
- "QIN-QIO Area-G"
- Region/Area/Network ID; this will vary between contract type/organization.
- Submit the completed certification memo electronically to your COR using the specified vehicle outlined in the contract (email, CDS, DARRT, etc.) as directed by the CMS COR (if applicable).
- SAT Records are not required for submission unless requested by the COR or ISSO. SAT Records must always be updated and maintained. (SAT record templates are available within HCQIS Security Resources on QNP or may be obtained by the CMS COR/ISSO.
- Contracts acting under multiple sites (prime/sub) may exercise the option of having multiple SAT records or a single SAT record that reflects ALL individual sites and each user respectfully.
- At the top of each page insert the Contract name and specify the site if applicable.
- For multiple sites in a single area, you may use a different table that identifies each state/region for each site.