US · guidance
CMS Pub. 100-06, ch. 7, § 20.2.1
CMS Contractor Control Objectives
CMS issues broad control objectives for which contractors shall develop control activities to ensure the
objectives are met. The complete list of control objectives is in Section 50. If your risk assessment was
completed prior to issuance of the current year CMS control objectives, ensure that any new or revised
control objectives are assessed and the risk matrix is updated. In addition, control activities should be
created or updated to support any new or revised control objectives as appropriate (see Section 10.2.3.3).
Contractors shall also include in their risk assessment any significant or material areas not covered by a
CMS control objective.
End Section 20.2.1 – CMS Contractor Control Objectives: Back to Table of Contents
History
(Rev. 13001, Issued: 12-13-24, Effective: 10-01-24, Implementation: 01-15-25)
Provenance
- Source
- cms.gov
- Retrieved
- 2026-08-25
- Edition
- iom-2026-08-25
- Content hash
90e38c05a12fab31a426263af596d96cf7f72da5fe6a0c663ae85c23cf0a107b
The link goes to the issuing authority’s own document — the one we read to produce this record. Where a source publishes whole titles rather than sections, your browser may need a moment to jump to the provision.
Unofficial copy of government-published law, reproduced from official sources with full provenance. Not an official publication; verify against official sources before relying on it in a filing. Records in the 'guidance' corpus, and only that corpus, are sub-regulatory (interpretive guidelines, survey procedures) and are not binding law. Validity bounds follow each jurisdiction's declared temporalBasis.