Frequently Asked Questions

Generally, information from the Federal data services hub will only be sent in direct response to a call from the requesting entity. However, in the case of verifications conducted by DHS, there can be up to three steps to a verification, the second and third of which will not be in real time. If the step 1 query fails, the Federal data services hub will automatically invoke step 2, and the response may take up to several days. If step 2 fails, the Federal data services hub will notify the requesting entity which will need to submit additional documentation from the applicant for step 3. The step 3 response can take weeks. During this time, the Federal data services hub will regularly poll DHS to see if the response has come back.

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 104.38 KB)

FAQ ID:93316

No, states that already have submitted their 2018 (07/01/2017 - 06/30/2018) inpatient hospital, outpatient hospital, or nursing facility services UPL demonstrations will not have to resubmit using the templates. In that instance, CMS will populate the templates using data already submitted by the state.

FAQ ID:92211

No. CMS does not participate the state's in E&E or in MMIS system development life cycle (SDLC) level reviews.

FAQ ID:95056

Yes. The rules pertaining to procuring IV&V contracts (State Medicaid Director Letter 16-010) apply to both E&E and MMIS.

FAQ ID:95061

In most cases once they are created, the documents will simply be updated to account for the additional modules being planned or developed. A new document is not necessarily created for each module. If a state calls a document by a different name, the state should inform CMS of the name difference.

FAQ ID:95076

Granting CMS direct access to the state's evidence repository is the preferred method for making evidence available to CMS. If that is not possible, the state may make other secure arrangements with CMS, such as using encrypted File Transfer Protocol (FTP). It is critical to follow all Health Insurance Portability and Accountability Act (HIPAA) regulations when submitting evidence that contains personal health information (PHI) and personally identifiable information (PII).

FAQ ID:95081

No. Only the checklists pertaining to the modules undergoing review need to be included, and that only for the report created in preparation for a milestone review. However, the IV&V progress report should include risks and recommendations for the entire project--not just those about to undergo a milestone review.

FAQ ID:95086

When streamlining the core checklists (IA, TA and S&C checklists), we found that some criteria fit better in other checklists, so they were moved. To keep traceability simple for the states, we chose to keep the original identifiers for any criteria that were moved. The same holds true for criteria moved to the programmatic tab of the IV&V progress report template.

FAQ ID:95091

No, E&E systems are not subject to certification. Though the Medicaid Eligibility and Enrollment Toolkit (MEET) was based on the MMIS toolkit, the MEET was created as a way to align how CMS reviews Medicaid enterprise systems and is a means for CMS to provide technical assistance to the states.

FAQ ID:95096

MARS-E 2.0 compliance is not required by CMS for states' MMIS, but CMS recommends that states follow applicable national privacy and security standards and practices for their MMIS. MARS-E 2.0 compliance is required for states' Medicaid/CHIP Eligibility and Enrollment (E&E) systems in order to maintain their Authority to Connect with CMS. Link for more information about MARS-E 2.0: https://www.medicaid.gov/federal-policy-guidance/downloads/cib-09-23-2015.pdf (PDF, 105.5 KB).

FAQ ID:94871