Contractor Onboarding
The following steps provide guidance for access to these QualityNet IT Services based on whether you are a new contractor or an existing contractor requiring additional services.
New Contracts
Contractors that are new to QualityNet IT Services should follow this four-step process to begin onboarding after the contract's period of performance begins.
Step One: The CMS COR and New Contractor create an engagement request to identify the type of work to be performed and the services required.
Step Two: The CMS COR or New Contractor submits the completed ISG Contract Onboarding Services Request form to ISGContractorOnboardingServices@cms.hhs.gov.
Step Three: The ISG Contract Onboarding Services team conducts an interview with the CMS COR and New Contractor to confirm eligibility for these services and sends a request for approval of these services to the CMS Service Leads for processing.
Step Four: After the CMS Service Leads have processed the request, the ISG Contract Onboarding Services team prepares and sends a welcome package to the New Contractor’s Security Official (SO) to complete the engagement process. The welcome package includes the following information:
- List of SO Responsibilities
- List of Approved Services
- Description of Approved Services
- Instructions for Onboarding Users
Upon receipt of this welcome package and informational materials, the New Contractor SO can begin the process of onboarding new users into the QualityNet IT Services. Access is based on the list of approved services provided in the package.
Existing Contracts
If you are an existing contractor with QualityNet IT Services looking to obtain access to an additional service, follow this three-step process to begin onboarding.
Step One: The CMS COR or Contractor submits a request to obtain access to an additional service by emailing ISGContractorOnboardingServices@cms.hhs.gov. The request should contain the following information:
- Name of Organization (HARP Organization Name Preferred)
- Name of QualityNet IT Service
- Business Justification for Use of Service
- Estimated Number of Users
- COR Approval (NOTE: COR approval for the new service request is required before we can proceed. Please include your COR's approval with your request.)
Step Two: The ISG Contract Onboarding Services team sends a request for approval of the service(s) to the CMS Service Leads for processing.
Step Three: After the CMS Service Leads have processed the request, the ISG Contract Onboarding Services team prepares and sends a welcome package to the Contractor’s Security Official (SO) to complete the onboarding process. The welcome package includes the following information:
- List of SO Responsibilities
- List of Approved Services
- Description of Approved Services
- Instructions for Onboarding Users
Upon receipt of this welcome package and informational materials, the Contractor SO can begin the process of onboarding users into the QualityNet IT Service(s).
The following table provides information and resources to help with setting up and managing contractor access to all accounts and tools he/she will need to function and complete work within the QualityNet or ISG Environment.
DISCLAIMER: ISG has no control over the services listed in the following table. Refer to the information provided for assistance.
| |
Data Use Agreements (DUAs) | CMS enters into DUAs with most data requesters for disclosures of protected health information (PHI) and/or personally identifiable information (PII) to ensure that data requesters adhere to CMS privacy and security requirements and data release policies. Refer to the Data Disclosures and Data Use Agreements (DUAs) page for information on the categories of data files maintained by CMS and general guidelines for submission of DUAs. COR and contractor-specific guidance is provided on the Contractors page, which includes DUA reminders regarding contact changes, DUA closures, and training materials for contractors and CORs. All CMS contractors requiring access to PHI/PII as well as their CORs must create and maintain their CMS DUAs through the Enterprise Privacy Policy Engine (EPPE) system. Note that CMS CORs and contractors must complete EPPE training before accessing the system to submit DUA actions. The following prerequisites are required for access to the EPPE: - Obtain access to the CMS Portal - https://portal.cms.gov/
- Download the VIP Access MFA Software - https://vip.symantec.com/
- Obtain EIDM or EUA credentials and EPPE access by following the instructions in these documents:
- Requesting EPPE User Role
- Contractor Approval Workflow: CMS Contact (COR)
For assistance: EPPE Help Desk: 844-EPPE-DUA (844-377-3382) or EPPE@cms.hhs.gov Refer to the CCSQ Data & Analytics > Data Resources > Mapping DUAs to the CDR page for information on how to correctly map your DUA to the Centralized Data Repository (CDR). |
Enterprise User Administration (EUA) Accounts | - EUA is a system used by CMS to manage enterprise User IDs and passwords. It provides centralized administration of User IDs on the entire CMS enterprise including the mainframe systems, mid-tier devices such as AIX or Sunsystems, network operating systems such as Windows, and database platforms such as Oracle, Sybase, and MS SQL. The system utilizes online data to automate the approval process for access requests and provides logging and auditing support.
- If EUA Access is required, please read The Enterprise User Administration Access Approvers Guide, which can be found on CMS Intranet.
- The CMS COR should work with the contractor to ensure that all the necessary security paperwork is completed (e.g., HHS 745, Application for Access to CMS Computer Systems, Security Training and PIV Training Certification). The CMS COR should ensure that the paperwork is submitted and processed so that the New Contractor has their access and badging completed within the dates of the transition timeline.
- An email should be sent to the new EUA users provided additional information including timeline, how to set up their password and how to choose job codes.
For assistance: CMS IT Service Desk: CMS_IT_Service_Desk@cms.hhs.gov or 1-800-562-1963 or 410-786-2580 |
Medicare Provider Enrollment, Chain, and Ownership System (PECOS) | - PECOS supports the Medicare Provider and Supplier enrollment process by allowing registered users to securely and electronically submit and manage Medicare enrollment information.
For assistance: CMS External User Services: By Chat: Live Chat Launch; By E-mail: EUSSupport@cgi.com; By Phone: Toll-Free: (866) 484-8049 TTY/TDD: (866) 523-4759 |
Documentation on the Quality Payment Program (QPP) Onboarding process steps can be found on CMS Quality Payment Program (QPP) Onboarding Confluence Page.
QPP ServiceNow access provides the contractor access to the ServiceNow instance in support of questions submitted for the Quality Payment Program (QPP). This will allow contractors to view and respond to questions submitted to their respective content areas. For further information regarding QPP ServiceNow access and ServiceNow group requests, please access the CCSQ ServiceNow Confluence page.
ISG Playbook
APIs
