Mar 14, 2019
Background
The Centers for Medicare & Medicaid Services (CMS) serves a critical quality assurance function for our country’s healthcare system. Quality Improvement and Evaluation System (QIES) will undergo a series of system enhancements resulting in what will be now called the Internet Quality Improvement and Evaluation Systems (iQIES).
To comply with federal security mandates, CMS is initiating new security requirements for access control to CMS Quality Systems through Remote Identify Proofing (RIDP) via the HCQIS (Healthcare Quality Information System) Access, Roles and Profile Management system. Users will create accounts in HCQIS Access Roles and Profile Management (HARP) to gain access to the iQIES system.
What is Remote Identify Proofing?
Remote proofing is a method for verifying the identity of a user remotely, as opposed to manual proofing or in-person proofing. Based on user-entered data, the HARP system uses Experian to generate a list of personal questions for the user to answer to verify their identity remotely. Remote proofing is the HARP-recommended method for identity verification, as it is typically much faster than other methods of identity proofing. If a user cannot successfully complete remote proofing during HARP registration, he/she will need to initiate manual proofing.
Why is Remote Identify Proofing Necessary?
The primary purpose of RIDP is to eliminate unauthorized access, reduce fraud, minimize manual processing, and prevent compromise of personally identifiable information (PII). These changes are designed to be compliant with federal and CMS guidelines and requirements such as OMB M04-04e-Authentication Guidance for Federal Agencies, HSPD-12, NIST 800-53 & 63, FISMA, FIPS 199 Standards, FIPS 200 and OMB M07-16.
What happens to the personal information used to register?
CMS does not store your personal information received for the purposes of RIDP. It only passes it to the credit reporting agency, an external identity verification system, to help confirm your identity. Your personal information is described as data that is unique to you as an individual, such as name, address, telephone number, Social Security Number, and date of birth.
Additional communication about iQIES program information including but not limited to onboarding, stakeholder engagement opportunities, training and general updates are in development and will be distributed in the coming weeks. For assistance with HARP onboarding, users can call the iQIES Service Center at (800) 339-9313 or e-mail: iqies@cms.hhs.gov