ISG Playbook
APIs
HARP
HCQIS Access Roles and Profile (HARP) is a secure identity management portal provided by the Centers for Medicare and Medicaid Services (CMS). Creating an account via HARP provides users with a user ID and password that can be used to sign into many CMS applications. It also provides a single location for users to modify their user profile, change their password, update their challenge question, and add and remove two-factor authentication devices.
Training Resources:
HARP Security Official Handout Download
Training Videos:
DARRT
The Deliverable Administration Review Repository Tool (DARRT) is a cloud-based solution providing a program management tool for CMS and Quality Improvement Organization (QIO) users. It provides the following functions:
Deliverables - CMS CCSQ contractors, CCSQ Central Office staff, and CMS Regional Office staff a central location for the submission, review, and storage of Quality Improvement contractor related artifacts including, but not limited to, Contract Deliverables and Quality Measure Reports.
Quality Improvement Initiative (QII) - Initiation and tracking.
Training Resources:
Step 1: If you do not yet have a HARP account or an EIDM or EUA account, register for a HARP ID. For instructions on the process, refer to the HARP handout.
Step 2: Once the HARP account has been created, log in to DARRT (https://darrt.cms.gov/) to submit your role request.
Which role do I choose?
Each contractor must have at least one Security Official designated to process user requests or additional Security Official role requests.
Capability | Role |
|---|---|
This role should be given to the person at your organization who is responsible for approving, deleting, rejecting, deactivating role requests within your organization for Submitter and Support Contractor roles; generally, the Security Official. Users with this role will be able to::
| User Admin |
Users with this role will be able to:
| Submitter |
This role is for the CMS COR who is responsible for approving, rejecting, and acknowledging deliverables that are ready for review. Users with this role will be able to:
| Reviewer (COR) |
* CMS SMEs should request a SME role in DARRT. Users with this role will be able to:
| *SME |
This role is reserved for the Application Development Organization (ADO). Do not request this role. | Application Admin |
This role is reserved for CMS. Users with this role can create and modify deliverables. Do not request this role. | Admin (Deliverable) |
This role is for users accessing DARRT for read-only purposes. | Support Contractor |
Step 3: Sign in to DARRT
|
|
Step 4: If you set up MFA in HARP, skip to Step 5.
If you did not previously set up MFA during your HARP account set up or profile update for existing users, you will be prompted to set up MFA before logging into DARRT.
HARP will present you with five multifactor authentication methods during your account registration process.
Refer to HARP Help and FAQ for more information.
SMS and Voice Authentication: Will require that you enter a single-use security code that is sent to your designated device when prompted. | |
|
|
Okta Verify: Will require that you download and install the Okta Verify app on your designated device. You will be requested to verify your identity by approving a push notification or by entering a one-time code during login the process. | |
|
|
Google Authenticator: Will require that you download and install the Google Authenticator app on your designated device. You will be requested to verify your identity by entering a one-time code during the login process. |
|
After configuring your MFA, follow the instructions for your selected MFA method to gain access to DARRT.
Note: The OKTA Verify and Google Authenticator options require an application to be downloaded for push notifications and single-use code to your mobile device.
Step 5: Select the ADD REQUEST button on the User Role Management screen. On the Add New Request modal, select the Contract, Task, User Role, and Assignment(s) you require, then click Submit.
|
| Note that a separate role request must be selected for each contract for users such as Reviewers (CORs) who are responsible for multiple contracts. |
For descriptions on DARRT roles, refer to DARRT Roles to review roles before selecting a role.
Step 6: After submitting your request, DARRT will present you with a role request confirmation.
| Once you have completed your role selection, you will be redirected to the User Requests page where you can review your pending requests. A notification email regarding your request will be sent by DARRT. |
Step 7: The submitted role request will be reviewed for approval or rejection by your designated Security Official.
DARRT: How to Request a Role, Contract, Task, and Assignments
Data & Analytics
ISG is working on Data & Analytics modernization tasks that include a Centralized Data Repository (CDR) in the HCQIS Cloud and an implementation of the new SAS Viya analytics tool for CCSQ users. The CDR will offer convenient, secure, and more timely access to CCSQ Quality data, as well as access to Claims data sourced from CMS systems of record. SAS Viya functionality will include data wrangling, data visualization, basic statistics, and advanced modeling capabilities.
Goals include: Improving Data & Analytic experiences for QIO 12th SOW and other CCSQ users; Modernizing current analytic platforms and data repositories; Improving data timeliness; Reducing data duplication; Simplifying/automating data access request process; Maturing data governance; Increasing data quality and security; and Increasing collaboration and data sharing for internal/external stakeholders.
Visit the main CCSQ Data & Analytics Modernization page for additional details.
Training Resources:
This briefly and succinctly describes the essential steps to getting started with Quality Analytics
Step 1: In order to have access to data in CDR a Data Use Agreement (DUA) needs to be in place and provided to the CDR team.
- Work with your COR to get your DUA established
- The COR should send the DUA information to the HCQIS_Data@hcqis.org mailbox for provisioning access to the CDR
Step 2: Get HARP ID. For instructions on the process, refer to the HARP page.
Step 3: Once the HARP account has been created, log in to HARP and request SAS Viya via a HARP User Role.
- For general instructions on this process, visit the HARP page.
- For Security Official (SO) specific instructions, see SO section below.
Step 4: The organization's SO approves the user role request.
Step 5: User can access applicable platforms and tools, such as SAS Viya, after a 24 hour period following the confirmation email.
Once you have created your HARP account (For instructions on the process, refer to the HARP page), or if you have an EIDM or EUA account, the next step is to request a SAS Viya User Role. For specific instructions on how to request a Security Officer role, visit the SAS Viya SO Role Request Process page. For instructions on how to request a SAS Viya Viewer or SAS Viya Analyst role, expand the steps below to view the process.
Note, a "Viewer" is someone who has the capability to view reports and dashboard created in SAS Visual Analytics/Visual Statistics. This group of users cannot run any SAS code, create or edit reports in SAS Visual Analytics/Visual Statistics, or conduct any text analytics. This group is for managers/directors/executives who may need to view reports that an analyst has created.
An "Analyst" is someone who has the ability to write and run SAS code to process and analyze data using SAS Studio, create and edit reports in SAS Visual Analytics, run text analytics using SAS Visual Text Analytics, load data into CAS using the various SAS Viya applications.
Each organization needs to designate a Security Official (SO) who will be responsible for approving individuals for access to QualityNet Analytics services, including SAS Viya, within their organization. Below are the steps for requesting to be assigned as an SO. The submitted request will be sent to the Master Slack SO for approval. Once the request is approved, the organization SO will have full access to approve members of your organization for access to SAS Viya.
Once you have created your HARP account (For instructions on the process, refer to the HARP page), or if you have an EIDM account, the next step is to request the SAS Viya SO role. Expand the steps below to view the process.
QualityNet Analytics Welcome Handout Download
Data & Analytics User References
Training Videos:
For training videos, please visit the CCSQ Data & Analytics SAS Viya Training Videos page.
FILECLOUD
FileCloud allows users to upload and download contract-related files and documents while operating within the HCQIS cloud. (FileCloud User Guide)
Features include:
- File Management: Create and delete new folders, upload/download files and contract deliverables
- Internet-Facing: Explore files using any web browser without the need for connecting to the HCQIS network
- File Versioning: Collaborate effectively using unlimited automatic file versioning
- Cross-organizational Collaboration: Create team-level folders, where CMS employees and HCQIS contractor employees can upload, edit, and share files in a centralized location
Training Resources:
Getting Started with FileCloud
Training Videos:
MFT
Managed File Transfer ("MFT") refers to a software or a service that manages the secure transfer of data from one computer to another through a network (e.g., the Internet). MFT is a managed file transfer solution that automates and secures file transfers using a centralized enterprise-level approach. MFT is a comprehensive solution that will manage file transfer, file sharing, secure FTP, and automation needs through a single interface. MFT is the Enterprise Services replacement for Axway Data Exchange.
Managed File Transfer (MFT) provides the ability to transfer files securely to another user. Users must be registered in HARP and have an MFT Web User role approved to send and receive files. Non-Authenticated functions allows a file to be sent from a registered user to a non-registered user. In addition, elevated permissions can be granted as Administrators to perform development work or request designation as a Security Official. Instructions for obtaining these roles are below.
Training Resources:
PRS
Program Resource System (PRS) is a repository of demographic information for hospital providers in the Centers for Medicare & Medicaid Services (CMS), Survey and Certification System (CASPER), and Quality Improvement and Evaluation System (QIES). PRS assists Quality Improvement Organizations (QIOs) and Program Support Contractors in maintaining CMS Programs and providing hospital information used in HQR applications.
Training Resources:
QMARS
Quality Management and Review System (QMARS) is a web-based system that allows Centers for Medicare and Medicaid Services (CMS), CMS-designated contractors, and Beneficiary and Family‑Centered Care (BFCC) Quality Improvement Organizations (QIOs) to document, monitor, and analyze data. The collected data is then used to
- identify opportunities,
- improve the quality of care and services for beneficiaries, and
- evaluate the efficiency and effectiveness of case review processes.
QMARS Sign-In: http://qmars.cms.gov/
NOTE: This QMARS URL is new as of 2/16/2021 and the old qmars.hcqis.org will be forwarded until mid-March. The reference documents on this page are still in the process of being updated with the new qmars.cms.gov URL.
Getting Started with QMARS
Prerequisites: A HARP ID is required for access to QMARS. Refer to the HARP User Guide for QMARS for specific instructions on registering for a HARP ID and getting a QMARS role.
System Requirements:
- Web Browser – Internet Explorer 11 or Higher
- Browser Configuration – QMARS uses pop-ups. Ensure pop-ups are enabled.
- Screen Resolution – Use the highest screen resolution available to minimize excessive horizontal scrolling. (On some resolutions, if parts of screens are not viewable at the highest resolution, change the screen zoom to 75%).
- Programs – QMARS uses Healthcare Quality Information Systems (HCQIS) image programs:
- Microsoft Word (Macros may need to be enabled. Work with your local QIO Administrator, if necessary).
- Microsoft Excel
- Adobe Reader
- Font – Free 3 of 9 Extended is required to see the barcode printed on correspondence and forms.
Refer to the QMARS User Guide as a quick-start welcome guide.
Training Resources:
HARP User Guide for QMARS v.1.0
QMARS-User Guide-v.2.0
QMARS Best Practices Guide
HCQIS Memo - QMARS Access HARP Announcement 3.12.1
SERVICENOW
ServiceNow is the backend ticketing tool that the QualityNet Service Desk and HCQIS community use for logging something not working correctly (Incidents) or requesting something new (Service Requests). When a user opens a new ticket, the ServiceNow app will email them with the ticket reference number and status. To inquire on the status of a ticket, users may reply to the ServiceNow email notification with additional information or log into the ServiceNow portal to view the status and/or add comments in real-time.
ServiceNow Portal: https://cmsqualitysupport.servicenowservices.com/sp_ess
Training Resources:
Getting Started with ServiceNow
ServiceNow Welcome Handout Download
Post Login Resources:
Training Videos:
Please contact the Service Center with questions regarding registering or access via email at ServiceCenterSOS@cms.hhs.gov or phone at 1-866-288-8914 (TRS: 711).
For questions related to the new service offerings, please contact ISGContractorOnboardingServices@cms.hhs.gov.