U.S. flag

An official website of the United States government

Frequently Asked Questions

Frequently Asked Questions are used to provide additional information and/or statutory guidance not found in State Medicaid Director Letters, State Health Official Letters, or CMCS Informational Bulletins. The different sets of FAQs as originally released can be accessed below.

Showing 21 to 28 of 28 results

CALT is no longer available. Where should state artifacts and evidence be posted?

Granting CMS direct access to the state's evidence repository is the preferred method for making evidence available to CMS. If that is not possible, the state may make other secure arrangements with CMS, such as using encrypted File Transfer Protocol (FTP). It is critical to follow all Health Insurance Portability and Accountability Act (HIPAA) regulations when submitting evidence that contains personal health information (PHI) and personally identifiable information (PII).

FAQ ID:95081

SHARE URL

Should IV&V progress reports include all the checklist sets every time they submit a progress report?

No. Only the checklists pertaining to the modules undergoing review need to be included, and that only for the report created in preparation for a milestone review. However, the IV&V progress report should include risks and recommendations for the entire project--not just those about to undergo a milestone review.

FAQ ID:95086

SHARE URL

Why are there Standards and Conditions (S&C) and Access and Delivery (A&D) criteria in the Information Architecture checklist?

When streamlining the core checklists (IA, TA and S&C checklists), we found that some criteria fit better in other checklists, so they were moved. To keep traceability simple for the states, we chose to keep the original identifiers for any criteria that were moved. The same holds true for criteria moved to the programmatic tab of the IV&V progress report template.

FAQ ID:95091

SHARE URL

Are Eligibility and Enrollment (E&E) systems now going to be certified the way MMIS systems are certified?

No, E&E systems are not subject to certification. Though the Medicaid Eligibility and Enrollment Toolkit (MEET) was based on the MMIS toolkit, the MEET was created as a way to align how CMS reviews Medicaid enterprise systems and is a means for CMS to provide technical assistance to the states.

FAQ ID:95096

SHARE URL

Based on CMS guidance, states may take up to 18 months to bring an IV&V contractor on board to perform certification tasks or align current IV&V contract to comply with CMS guidance pertaining to scope of services and financial independence. What must the state do if the IV&V contractor's start up is delayed?

IV&V contractor activities must still be performed such as checklist evaluation, artifact review and preparation of IV&V Progress Reports. The state should provide a plan and timeline for how these activities will be supported and performed until the proper IV&V contract can be either procured or aligned with updated CMS guidance on IV&V.

FAQ ID:94866

SHARE URL

What is the applicability of Minimum Acceptable Risk Standards for Exchanges (MARS-E) 2.0 to states' Medicaid Management Information Systems (MMIS)?

MARS-E 2.0 compliance is not required by CMS for states' MMIS, but CMS recommends that states follow applicable national privacy and security standards and practices for their MMIS. MARS-E 2.0 compliance is required for states' Medicaid/CHIP Eligibility and Enrollment (E&E) systems in order to maintain their Authority to Connect with CMS. Link for more information about MARS-E 2.0: https://www.medicaid.gov/federal-policy-guidance/downloads/cib-09-23-2015.pdf (PDF, 105.5 KB).

FAQ ID:94871

SHARE URL

Can state Medicaid agencies access federal financial participation (FFP) to support system changes necessary to meet HIPAA, NIST cybersecurity, or MARS-E 2.0 standards?

For E&E and MMIS, enhanced FFP funding is available at 90 percent via the usual Advanced Planning Document process.

FAQ ID:94876

SHARE URL

What is the benefit for a state to have milestone reviews with CMS?

Milestone reviews have proven to reduce risk by having earlier discussions where CMS can identify opportunities for efficiencies, facilitate collaboration with other states, and share other ideas that can save time, money, and effort. Identifying issues and opportunities earlier in the process will allow for a much greater impact than was experienced under the old process.

FAQ ID:93976

SHARE URL
Results per page