Close this search box.
Healthcare Compliance Newsletter – February 2022

Healthcare Compliance Newsletter – February 2022

In this issue:
  1. Intro to Bi-Annual Attestation Process
  2. ONC Cures Updates & Testing Fee Discount
  3. Penetration Testing for EHR Providers
  4. Webinar Highlights Importance of FHIR® Standard
  5. Join Us at ViVE in Miami Beach!
  6. New RWT Advisory Services Offerings
  7. We Welcome You to HIMSS22
  8. Clinical Quality Measures Are Expanding
  9. Pediatric EHR Testing & Certification to Launch in Q2

Intro to Bi-Annual Attestation Process

In April, developers will be required to adhere to a new bi-annual attestation process managed on the ONC CHPL website. Health IT developers must attest compliance to Conditions and Maintenance of Certification requirements applicable to their certified products, including conditions of certification, i.e., Information Blocking, Assurances, Communications, APIs and Real World Testing. Note the bi-annual attestation is a separate ONC compliance requirement and does NOT replace the quarterly attestation.

During the April 1-30 attestation window, developers will attest to complying with applicable conditions of certification for the time period from the ONC Interim Final Rule compliance dates through March 31. The next attestation window will be Oct. 1-31, 2022, (covering the attestation period from April 1 through Sept. 30).

ONC is sending invitations to developers due to the importance of providing accurate contact information on their CHPL listing(s). If any updates are needed prior to receiving the initial ONC invitation, please contact us at The ONC will provide a user guide for developers to help navigate the CHPL website and provide attestation guidance. IMPORTANT: Not responding to the ONC’s invitation and/or not responding to the bi-annual April 1-30 attestation may result in a corrective action that impacts certification status.

ONC Cures Updates and Testing Fee Discount

Health IT developers must certify and deploy technology with applicable Cures updates by Dec. 31, 2022. Developers may attest to self-testing the new and revised Cures criteria with the exception of 170.315 (g)(10) Standardized API for Patient and Population Services which requires a live test session. Drummond is offering a 15 percent discount to developers scheduling and completing (g)(10) during Q1 and Q2 2022, and a 10 percent discount for (g)(10) testing completed in Q3 2022. To register for testing, click here. Need assistance? Contact us at

Penetration Testing for EHR Providers

Healthcare organizations may have technology and procedures in place to prevent data theft, but it’s difficult for organizations to identify every security weakness. Designed to benefit our EHR clients, a new service offering is now available – penetration testing for EHR providers – to establish the best privacy practices and protect electronic patient health information (PHI)

It is best practice to have an independent third party test the security of your EHR application and avoid any conflict of interest. Drummond can help identify potential vulnerabilities and show you how hackers try to exploit those vulnerabilities. Download our new guide and schedule some time to address your questions, including additional information about our penetration test solutions and services or to receive a quote. You may also email

Webinar Highlights Importance of FHIR® Standard

As an Associated Community Affiliated Plans (ACAP) Preferred Vendor, Drummond presented an educational webinar to the ACAP membership in January: “Roadmap for Compliance to CMS and Patient Access Final Rule.” It highlighted the following:

  • Importance of FHIR® as foundational for secure data exchange in the Health IT industry
  • CMS and ONC regulatory landscape
  • Our commitment to social determinants of health (SDoH) and patient privacy to improve equitable and better patient outcomes

Join Us at ViVE in Miami Beach!

Drummond’s FHIR® API and health IT testing and certification experts – Timothy Bennett and Sonia Galvan – will be at this year’s CHIME ViVE event March 6-9 in Miami Beach. The ViVE atmosphere and setting are custom-designed to maximize your interaction with decision-makers and digital health leaders. As a sponsor, Drummond offers you a registration discount by using code: VIVE22SP_Drummond150. Visit our Booth No. 762 in the exhibit hall or if interested in booking an advance meeting, email: or

New RWT Advisory Service Offerings*

This is Real World Testing Test Plan Execution Year! Accordingly, Drummond Advisory Services is engaged with customers in two additional offerings related to assisting customers with delivery of a compliant test results plan to the ONC-ACB by early Q1 2023.

The Test Coordination offering is designed to provide developers with project management and templates to ensure test plan methods and metrics are well positioned and tracked for later reporting.

Our Test Execution and Reporting program can be tailored to a customer’s unique needs by providing options for focused testing and data-gathering sessions and/or customized authoring of test result reports. As with our test planning service, customers have the flexibility to work with our experienced test plan team for smaller engagements if the need arises.

Reminder: Real World Testing is an annual requirement and, therefore, another test plan is due in November. Drummond Advisory Services is here to help! Contact John Valutkevich for more information.

We Welcome You to HIMSS22!

We’re proud to be an exhibitor and one of the expert resources at HIMSS22. Timothy Bennett, Jim Dow, Justin Jones, Heather Kelty, James Threatte, John Valutkevich and Mike Wion will be at Booth 2027 to answer your questions on the spot, offering advisory services, healthcare IT security, privacy, and compliance services that help create a more secure future. Schedule your meeting in advance here and join us for a FHIR® demo in the Interoperability Showcase (11:45 am, Wednesday, March 16), too! We’ll see you soon!

Clinical Quality Measures Are Expanding

New Clinical Quality Measures (eCQMs) became effective on Jan. 1, including a new CQM for Eligible Clinicians (CMS646v2) and one for Eligible Hospitals (CMS844v2). Additional CQMs are in “pre-rulemaking” status and set to be finalized soon. If you want to learn more about how these changes may impact your product, contact us at or create a support case in our Drummond Customer Portal.

Pediatric EHR Testing & Certification to Launch in Q2

Drummond Group will be launching a pediatric EHR testing and certification program next quarter. For more information, contact

The services offered by Drummond Advisory Services are separate and distinct from the Drummond Group Test Lab and Certification Body. The purpose of Drummond Advisory Services is to provide expert support and guidance for the planning, analysis, and execution of certification activities; it does not negate the steps or required actions of the certification process. Use of Drummond Advisory Services does not guarantee successful ONC Health IT testing or certification.

More News

Ready To Start Your Compliance Journey?

Download Drummond's Guide to Integration Review of E-Prescription Module

Please fill out the form below to download the guide.

[gravityform id="66" title="false" description="false" ajax="true"]

Drummond's guide to EPCS Recertification

Please fill out the form below to download the guide.

[gravityform id="65" title="false" description="false" ajax="true"]

Drummond's guide to Initial EPCS Certification

Please fill out the form below to download the guide.

[gravityform id="64" title="false" description="false" ajax="true"]