Credentialing Audit

A review conducted by a regulatory body, accrediting organization, or payer to evaluate whether a healthcare organization's credentialing process meets established standards.

A credentialing audit is when someone comes in and checks whether your credentialing program meets standards. For health plans, NCQA conducts credentialing audits as part of their accreditation process. For hospitals, The Joint Commission reviews credentialing and privileging during their surveys. For delegated entities, the payer that delegated credentialing authority audits the delegate regularly. During a credentialing audit, the auditor reviews a sample of provider credentialing files to verify that all required verifications were completed, that they were done within the required timeframes, that the credentialing committee reviewed and acted on each file, and that the process followed documented policies and procedures. Common audit findings include: verifications that were not completed within the 180-day window, missing NPDB queries, credentials committee minutes that do not document the review of specific files, incomplete attestation responses that were not followed up on, and gaps in re-credentialing cycles where providers went beyond the required timeframe without re-credentialing. For payers, failing a credentialing audit can result in loss of NCQA accreditation, regulatory sanctions, and contractual consequences with employer groups that require NCQA accreditation. For hospitals, credentialing deficiencies found during a Joint Commission survey can result in citations and corrective action requirements. If your organization conducts credentialing, prepare for audits proactively. Conduct internal audits annually using the same criteria the external auditors will use. Fix problems before the auditors find them. Common preparation steps include: reviewing a random sample of files for completeness, verifying that all re-credentialing is current, confirming that policies and procedures match actual practice, and ensuring that credentials committee minutes are complete and specific. As an individual provider, credentialing audits affect you indirectly. If the payer or hospital that credentialed you gets cited for deficiencies, it might trigger a re-review of your file or additional requests for documentation. Keeping your own records organized and current protects you from getting caught up in audit-driven requests.