ISG Playbook
APIs
HARP
HCQIS Access Roles and Profile (HARP) is a secure identity management portal provided by the Centers for Medicare and Medicaid Services (CMS). Creating an account via HARP provides users with a user ID and password that can be used to sign into many CMS applications. It also provides a single location for users to modify their user profile, change their password, update their challenge question, and add and remove two-factor authentication devices.
Training Resources:
HARP Security Official Handout Download
Training Videos:
Deliverable Administration Review and Repository Tool (DARRT)
The Deliverable Administration Review and Repository Tool (DARRT) is a cloud-based solution providing a program management tool for CMS and Quality Improvement Organization (QIO) users. It provides the following functions:
Deliverables - Provides CMS CCSQ contractors, CCSQ Central Office staff and CMS Regional Office staff a central location for the submission, review and storage of Quality Improvement contractor related artifacts and including but not limited to Contract Deliverables and Quality Measure Reports.
Quality Improvement Initiative (QII) - Initiation and tracking.
Training Resources:
Step 1: If you do not yet have a HARP account or an EIDM or EUA account, register for a HARP ID. For instructions on the process, refer to the HARP handout.
Step 2: Once the HARP account has been created, log in to DARRT (https://darrt.hcqis.org/) to submit your role request.
Which role do I choose?
Role | Capability |
|---|---|
User Admin | This role should be given to the person at your organization who is responsible for approving, deleting, rejecting, deactivating role requests within your organization; generally, the Security Official. Users with this role will be able to:
|
Submitter | Users with this role will be able to:
|
Reviewer (COR) | This role should be given to the CMS COR who is responsible for approving, rejecting and acknowledging deliverable that are ready for review. Users with this role will be able to:
|
*SME | * CMS SMEs and Support Contractors such as National Strategic Leadership (NSL), National Administration Support (NAS) and Improvement Evaluation Contractor (IEC) should request a SME role in DARRT. Users with this role will be able to:
|
Application Admin | This role is reserved for the Application Development Organization (ADO). Do not request this role. |
Admin (Deliverable) | This role is reserved for CMS. Users with this role can create and modify deliverables. Do not request this role. |
Support Contractor (Help Desk) | This role is reserved for the Help Desk. |
Step 3: Sign in to DARRT
|
|
Step 4: If you set up MFA in HARP, skip to Step 5.
If you did not previously set up MFA during your HARP account set up or profile update for existing users, you will be prompted to set up MFA before logging into DARRT.
OKTA will present you with multifactor authentication methods. You may elect to set up one or more. Upon selecting your preferred method by clicking Setup, OKTA will walk you through the setup process.
| OKTA Verify Allows you to receive push notifications from the app and just select “Approve” or “Deny” when prompted for multifactor authentication. Google Authenticator Will require that you enter a single-use security code when prompted. SMS Authentication Will require that you enter a single-use security code that is sent to your designated device when prompted. Voice Call Authentication Will require that you use a phone to authenticate by following voice instructions. |
NOTE: The OKTA Verify and Google Authenticator options require an application to be downloaded for push notifications and single-use code to your mobile device.
Step 5: Select the ADD REQUEST button on the User Role Management screen. On the Add New Request modal, select the Contract, Task, User Role, and Assignment(s) you require, and then click Submit.
|
| Note that a separate role request must be selected for each contract for users such as Reviewers (CORs) who are responsible for multiple contracts. |
Step 6: After submitting your request, DARRT will present you with a role request confirmation.
| Once you have completed your role selection, you will be redirected to the User Requests page where you can review your pending requests. A notification email regarding your request will be sent by DARRT. |
Step 7: The submitted role request will be reviewed for approval or rejection by your designated Security Official.
Data & Analytics
ISG is working on Data & Analytics modernization tasks that include a Centralized Data Repository (CDR) in the HCQIS Cloud and an implementation of the new SAS Viya analytics tool for CCSQ users. The CDR will offer convenient, secure, and more timely access to CCSQ Quality data, as well as access to Claims data sourced from CMS systems of record. SAS Viya functionality will include data wrangling, data visualization, basic statistics, and advanced modeling capabilities.
Goals include: Improving Data & Analytic experiences for QIO 12th SOW and other CCSQ users; Modernizing current analytic platforms and data repositories; Improving data timeliness; Reducing data duplication; Simplifying/automating data access request process; Maturing data governance; Increasing data quality and security; and Increasing collaboration and data sharing for internal/external stakeholders.
Visit the main CCSQ Data & Analytics Modernization page for additional details.
Training Resources:
This briefly and succinctly describes the essential steps to getting started with Quality Analytics
Step 1: In order to have access to data in CDR a Data Use Agreement (DUA) needs to be in place and provided to the CDR team.
- Work with your COR to get your DUA established
- The COR should send the DUA information to the HCQIS_Data@hcqis.org mailbox for provisioning access to the CDR
Step 2: Get HARP ID. For instructions on the process, refer to the HARP page.
Step 3: Once the HARP account has been created, log in to HARP and request SAS Viya via a HARP User Role.
- For general instructions on this process, visit the HARP page.
- For Security Official (SO) specific instructions, see SO section below.
Step 4: The organization's SO approves the user role request.
Step 5: User can access applicable platforms and tools, such as SAS Viya, after a 24 hour period following the confirmation email.
Once you have created your HARP account (For instructions on the process, refer to the HARP page), or if you have an EIDM or EUA account, the next step is to request a SAS Viya User Role. For specific instructions on how to request a Security Officer role, visit the SAS Viya SO Role Request Process page. For instructions on how to request a SAS Viya Viewer or SAS Viya Analyst role, expand the steps below to view the process.
Note, a "Viewer" is someone who has the capability to view reports and dashboard created in SAS Visual Analytics/Visual Statistics. This group of users cannot run any SAS code, create or edit reports in SAS Visual Analytics/Visual Statistics, or conduct any text analytics. This group is for managers/directors/executives who may need to view reports that an analyst has created.
An "Analyst" is someone who has the ability to write and run SAS code to process and analyze data using SAS Studio, create and edit reports in SAS Visual Analytics, run text analytics using SAS Visual Text Analytics, load data into CAS using the various SAS Viya applications.
Each organization needs to designate a Security Official (SO) who will be responsible for approving individuals for access to QualityNet Analytics services, including SAS Viya, within their organization. Below are the steps for requesting to be assigned as an SO. The submitted request will be sent to the Master Slack SO for approval. Once the request is approved, the organization SO will have full access to approve members of your organization for access to SAS Viya.
Once you have created your HARP account (For instructions on the process, refer to the HARP page), or if you have an EIDM account, the next step is to request the SAS Viya SO role. Expand the steps below to view the process.
QualityNet Analytics Welcome Handout Download
Data & Analytics User References
Training Videos:
NOTE: Version has changed from 3.4 to 3.5.
NOTE: The new version of SAS Studio 5.2 includes changes, as described here.
For additional training videos, please visit the Data & Analytics Training Videos page.
FILECLOUD
FileCloud allows users to upload and download contract-related files and documents while operating within the HCQIS cloud. (FileCloud User Guide)
Features include:
- File Management: Create and delete new folders, upload/download files and contract deliverables
- Internet-Facing: Explore files using any web browser without the need for connecting to the HCQIS network
- File Versioning: Collaborate effectively using unlimited automatic file versioning
- Cross-organizational Collaboration: Create team-level folders, where CMS employees and HCQIS contractor employees can upload, edit, and share files in a centralized location
Training Resources:
Getting Started with FileCloud
Training Videos:
MFT
Managed File Transfer ("MFT") refers to a software or a service that manages the secure transfer of data from one computer to another through a network (e.g., the Internet). MFT is a managed file transfer solution that automates and secures file transfers using a centralized enterprise-level approach. MFT is a comprehensive solution that will manage file transfer, file sharing, secure FTP, and automation needs through a single interface. MFT is the Enterprise Services replacement for Axway Data Exchange.
Managed File Transfer (MFT) provides the ability to transfer files securely to another user. Users must be registered in HARP and have an MFT Web User role approved to send and receive files. Non-Authenticated functions allows a file to be sent from a registered user to a non-registered user. In addition, elevated permissions can be granted as Administrators to perform development work or request designation as a Security Official. Instructions for obtaining these roles are below.
Training Resources:
PSI Software
Patient Safety Indicators (PSI) software is a free, publicly available tool that allows users to measure patient safety events in the inpatient hospital setting based on their own administrative data using SAS software. To calculate measure scores, administrative claims data is run through software that CMS creates – a SAS version and a Windows version. The SAS version is what CMS uses to calculate measure scores for use in the quality reporting programs. The Windows version is provided as a courtesy for hospitals to use for their own quality improvement efforts as well as to replicate scores that CMS publicly reports in a more user-friendly format than SAS.
Getting Started with PSI Software
Step 1: Submit your request using the QualityNet Question and Answer Site, Ask a Question tool: https://cmsqualitysupport.servicenowservices.com/qnet_qa?id=ask_a_question.
Step 2: Fill in the required fields (denoted by an *) and select the following for Program and Topic:
Program = Inpatient Claims-Based Measures
Topic = Patient Safety Indicators (PSI) -> PSI 90 Software
In the Question field, specify if the request is for the Windows or SAS version of the software.
Step 3: Check “I’m not a robot” and click Submit.
Once submitted, a ServiceNow ticket will be created by the QualityNet Help Desk and you will receive an email confirmation with the ticket number. The QualityNet Help Desk will send your ticket to the appropriate team for response.
If additional information is needed to complete the request, you will receive an email from CMS Quality Support – Production. Reply to this email with the requested information.
Qualtrics
Placeholder for content.
SERVICENOW
ServiceNow is the backend ticketing tool that the QualityNet Service Desk and HCQIS community use for logging something not working correctly (Incidents) or requesting something new (Service Requests). When a user opens a new ticket, the ServiceNow app will email them with the ticket reference number and status. To inquire on the status of a ticket, users may reply to the ServiceNow email notification with additional information or log into the ServiceNow portal to view the status and/or add comments in real-time.
ServiceNow Portal: https://cmsqualitysupport.servicenowservices.com/sp_ess
Training Resources:
Getting Started with ServiceNow
ServiceNow Welcome Handout Download
Post Login Resources:
Training Videos:
For questions related to the new service offerings, please contact QualityNet_IT_Services@hcqis.org.