ISG Playbook
APIs
This section provides guidance for offboarding a contractor's access to QualityNet IT Services before the contract Period of Performance (POP) end date.
When a contract’s POP is coming to an end, the ISG Contract Engagement team assists with any transition or removal of user and data access to QualityNet IT Services. To ensure that a smooth and secure process is followed when closing out the contract, the ISG Contract Engagement team contacts the CMS COR 60 days before the contract POP end date to initiate closeout activities.
The CMS COR is asked to select one of the following closeout scenarios and provide the requested information.
The last two entries in the timeline refer to the activities involved in the offboarding process. Note that this timeline may vary based on your contract.
QualityNet | Contract Services - Onboarding/Offboarding Timeline
To learn more about the actions required and who is responsible for each action, click on the tab that corresponds to the step in the timeline.
Notification of Contract Closeout
The ISG Contract Engagement team tracks contracts that use QualityNet IT Services from contract start to end. To ensure a smooth and secure process is followed for closing out an existing contract's access to these services, the team contacts the CMS COR 60 days before the contract POP end date to initiate closeout activities.
These activities start by communicating which scenario will occur once it is known to the Contract Engagement team. Based on the scenario, the ISG Contract Engagement team will request additional information that is needed to coordinate user access.
The CMS COR is asked to select one of the following closeout scenarios and provide the requested information:
Scenario 1: Contract ends, and a new contract is re-awarded to the incumbent.
Under this scenario, the team attempts to allow the contractors to retain their current access to QualityNet IT Services.
The following information is requested to accomplish this goal:
- New Contract Name (if applicable)
- New period of performance (POP)
- New Contract and Task Order Numbers (if applicable)
- For contracts that utilize SAS VIYA or a service that requires a Data Use Agreement (DUA), validate the DUA is still active.
- If not, a new DUA is required and access will be paused until the PDF copy of the updated/new DUA is provided.
- Confirm that the Security Official (SO) and Security Point of Contact (SPOC) remain the same.
- If not, provide new SO and SPOC names and HARP IDs.
- Determine if any data the contractor worked on for CMS needs to be archived and if contractor will need the same data for a new contract.
Scenario 2: Contract ends, and a new contract is awarded to another contractor.
Under this scenario, the team will coordinate the timely removal of the contractor's access to the QualityNet IT Services and coordinate the onboarding process with the new contractor.
The following information is requested to accomplish this goal:
- Confirm the POP end date for the current contractor so the team can coordinate the timely removal of the contractor’s access to QualityNet IT Services.
- Determine if any data the contractor worked on for CMS needs to be archived and if the new contractor may need the data.
Note: The new contract will follow the New Contract Onboarding Process. A separate communication will be sent to the CMS COR on this process when the contract is awarded.
Under this scenario, the team will coordinate the timely removal of the contractor's access to the QualityNet IT Services and ensure that all CMS data is archived.
The following information is requested to accomplish this goal:
- Confirm the POP end date for the current contractor so the team can coordinate the timely removal of the contractor’s access to QualityNet IT Services.
- Determine if any data the contractor worked on for CMS needs to be archived.
Under this scenario, the team will update existing records with the new contract information.
The following information is requested to accomplish this goal:
- Confirm the new POP end date for the team's tracking purposes.
- If using SAS Viya or another service requiring a Data Use Agreement (DUA), confirm the contractor’s DUA is valid through the new POP end date. If any updates to the DUA, a PDF copy of the updated DUA will be required.
Contract Removed from QualityNet IT Services
The ISG Contract Engagement team will remove user access to QualityNet IT Services based on the scenario identified by the CMS COR.
Responsible Parties:
ISG Contract Engagement Team
Refer to the Onboarding Process to determine what actions are required and who is responsible prior to and after award of a contract.
- QualityNet IT Services: Please Contact the Service Center by phone at 1-866-288-8914 (TRS: 711); by email at ServiceCenterSOS@cms.hhs.gov; or via Slack at #help-service-center-sos
- Contract Services (Onboarding/Offboarding): Please Contact the ISG Contract Onboarding Services team by email at ISGContractorOnboardingServices@cms.hhs.gov or via Slack at #help-contract-onboarding
- Contractors: If you have other questions, please reach out to your CMS COR.