Platform / Monitoring

Sort the queue by what breaks first.

Credentialing stopped being something you complete. It became something you keep proving, which makes the useful question not what arrived first, but what fails soonest.

Request accessRead the verification gap →
Signals · Sample facility7 open · 34 providers watched
Order by
  • Exclusion screeningOIG LEIE sweep — name match to clear2 providers · Entered Apr 1
    Today
  • AttestationCAQH attestation window closesOkafor, D. — MFM · Entered Feb 20
    9 days
  • ExpirableMalpractice coverage expiresOkafor, D. — MFM · Entered Mar 6
    31 days
  • LicenseArizona medical license renewalAlvarez, R. — MD · Entered Feb 2
    38 days
  • RecredentialingPayer cycle opens — 36 months6 providers · Entered Dec 18
    44 days
  • AttestationRecord ages past 120 days11 providers · Entered Jan 9
    66 days
  • CMECycle closes — 14 of 40 credits loggedNguyen, T. — CRNA · Entered Nov 3
    97 days

Ordered by time to failure. The exclusion match raised this morning sits first, above work that entered the queue five months earlier.

Sample queue, real signal model. Every item is the same file seen from a different distance — an exclusion match, a coverage lapse, a renewal, a cycle opening. Switch the ordering and the day changes completely.

Why the standard changed

Monitoring moved from once a cycle to once a month.

A file assembled every three years cannot show what was true every thirty days. Three dated forcing functions landed inside an eighteen-month window.

NCQA credentialing standards rewrite

Effective July 1, 2025

Shortened primary-source verification windows and moved monitoring against exclusion, NPDB and license data onto a roughly thirty-day cadence, in place of once-per-cycle review.

NCQA, 2025 credentialing standards

CMS Medicare Advantage directory rule (CMS-4208-F2)

Finalized September 19, 2025 · plan years from January 1, 2026

Directory data must be updated within 30 days of a change; from plan year 2027 it flows to CMS directly for Medicare Plan Finder. The pressure moves to whoever supplies the roster.

Federal Register · CMS-4208-F2 final rule

CMS enrollment and reporting enforcement

2026

PECOS reinforced as the authoritative source, with 30-day reporting for adverse actions and ownership changes, and cross-program termination enforced across state lines.

CMS, Medicare provider enrollment

Delay versus lapse

Delay is budgeted. Lapse is not.

Every organization can tell you what a slow enrollment costs. Almost none can tell you what it costs when a credential quietly stopped being valid three months ago.

A delay is visible the whole time it is happening. A lapse is invisible until the claims come back, and the window to refile closed while nobody was looking. That is the argument for continuous monitoring — not that expirations are easy to miss, but that missing one is unrecoverable rather than merely expensive.

What is watched

What is actually on the clock.

Expirables are not one thing on one cadence. They are eight things on eight different clocks, and each one fails in a different direction.

State licenses, per state
Expiration tracked continuously; status verified against the issuing board
The issuing board of record
DEA registration
Expiration tracked per registration
The registration on file
Board certification
Expiration and status; structure differs by provider type
The certifying board
Malpractice coverage
Policy period, limits and tail arrangement
The certificate of insurance
Exclusion screening
Monthly sweep, with matches raised for review
OIG LEIE
CAQH attestation
Re-attestation on roughly a 120-day cycle
The provider’s CAQH profile
Immunizations and health requirements
Facility-specific, tracked as expirables like any other
The document on file
CME
Credits logged against the cycle, per license and per board
The provider’s own record
Multi-state is the normal case

The Interstate Medical Licensure Compact reached 42 states plus the District of Columbia and Guam as of 2026. A provider with four licenses has four renewal calendars, four boards, and four CME cycles that do not line up with each other.

Interstate Medical Licensure Compact, 2026

The one that travels

Cross-program termination is the least discussed and the most dangerous. An action taken in a program in a state you do not operate in can cascade into termination in one you do — which means the sweep that matters is the one you had no reason to run.

CMS, Medicare provider enrollment enforcement · 2026

What it changes downstream

A cycle that reviews instead of rebuilds.

Payer recredentialing runs on roughly a 36-month cycle and hospital reappointment on roughly 24. Both are usually experienced as a rebuild. Neither has to be.

When the file went stale between cycles
  • The packet is assembled from scratch, because nothing between cycles was captured in a form the packet can use.
  • Primary source verification is re-run on everything, including the items nothing has changed about.
  • The provider is asked, again, for documents they already sent — usually the same four.
  • What was true in month fourteen is unknowable, because nobody wrote it down at the time.
When it never did
  • Every expirable already carries a current date, because it has been checked monthly rather than at cycle open.
  • Exclusion and license status have a continuous history, so the cycle reads a record rather than producing one.
  • The provider’s own attestations are already on file, timestamped, section by section.
  • What was true in month fourteen is answerable, because the file has time in it.

The cycle is the same length either way. The difference is whether it is spent confirming a record or reconstructing one under a deadline.

Questions we get

Continuous monitoring, plainly.

What does continuous monitoring actually check?
The credentials that expire — licenses, DEA, board certification, malpractice, immunizations — plus exclusion screening, CAQH attestation age and CME progress against each cycle. What matters is where the check points: license status is verified against the issuing board rather than against a document someone uploaded, and every check writes a timestamped event to the file.
How often does exclusion screening run?
Monthly, against OIG LEIE. That cadence is the operational norm the July 2025 NCQA standards revision pushed the market toward — roughly thirty days rather than once per credentialing cycle. Matches are raised for review rather than resolved silently, because a name match is not by itself a finding.
How is recredentialing different from initial credentialing?
Initial credentialing establishes qualification before a provider starts. Recredentialing re-establishes it on a cycle — roughly 36 months for payers, roughly 24 for hospital reappointment — and adds what has happened since: sanctions, claims history, quality data, changes in privileges. The work is only comparable to initial credentialing when nothing between the two was maintained, which is the situation continuous monitoring is meant to prevent.
Does monitoring cover licenses and CME in every state a provider holds?
Yes. Each license is tracked against its own board and renewal calendar, and CME against the cycle that license or board requires. The calendars rarely line up — which is exactly why a queue ordered by entry date fails and one ordered by time to failure does not.

Ask your queue what expires in the next ninety days.

If the answer takes more than a minute to produce, the queue is sorted the wrong way. Bring one roster and we will sort it by what breaks first.

Request accessRead the market brief →