CMS Pub. 100-10, ch. 8, § 8030

The QIO Program IT performance standards are based on five system administrative

performance areas that must be met or exceeded during the course of the contract.

The performance standards areas are as follows:

• Contingency Planning – This category concerns preparation for disaster or the

loss of information. It includes contingency planning, archiving, backup, and

storage operations to restore operability of IT system resources and QIO Program

information

• System Maintenance – This category concerns maintenance of IT system

resources. It includes proper monthly maintenance and application of routine and

emergency updates, upgrades, and patches in compliance with CMS hardware,

software, security standards, and operational practices

• User and Administrator Training – This category concerns user and system

administrator compliance with training on contractor and CMS-furnished IT

systems, networks, applications, devices, standards, procedures, and security

• Security – This category concerns safeguards for the security of QIO Program

information collection, storage, use, sharing, retention, and destruction, security

for IT access controls and operational practices, and the protection of privacy

data and confidential information

• Inventory – This category concerns maintenance of inventories for contract

acquired and CMS-furnished property