Medical Credentialing Glossary

ABMS — ABMS is the umbrella organization that oversees 24 member boards certifying physicians in recognized medical specialties in the United States.

Credentialing teams use ABMS verification to confirm that a physician's board certification is current and in good standing. Most hospitals and payers consider ABMS or AOA certification the gold standard for specialty competence. Source: abms.org.

Allied health professional — An allied health professional is a non-physician, non-nursing clinician who delivers patient care or diagnostic services, such as a physical therapist, respiratory therapist, or medical technologist.

Allied health professionals usually go through a parallel credentialing track that verifies licensure, certifications, and continuing education, but with fewer privilege-level requirements than physicians.

AOA — AOA is the professional organization for Doctors of Osteopathic Medicine (DOs) that also accredits osteopathic medical schools and operates osteopathic specialty boards.

AOA board certification is recognized alongside ABMS certification for credentialing purposes at most hospitals, payers, and CVOs. Source: osteopathic.org.

Application — A credentialing application is the standardized package of identifying information, training history, work history, licenses, certifications, and attestations a provider submits to be considered for participation, employment, or privileges.

Most U.S. organizations now accept the CAQH ProView profile or a CAQH-aligned application instead of maintaining their own paper form.

Attestation — An attestation is a signed statement in which a provider affirms that the information on their credentialing application is true, complete, and current as of a specific date.

CAQH requires re-attestation every 120 days, and most payers will not process an enrollment if the most recent CAQH attestation is older than that window.

Background check — A background check is the formal review of a provider's criminal history, identity, employment, and education records performed as part of credentialing.

Healthcare background checks typically combine county, state, and federal criminal searches with sex offender registry, OIG LEIE, and SAM.gov sanctions screens.

Board certification — Board certification is the voluntary credential a physician earns by passing the examinations of an ABMS or AOA member board after completing residency training.

Most credentialing standards require either current certification or active progress toward certification within a defined number of years after residency.

CAQH — CAQH is a non-profit alliance of health plans and trade associations that operates the centralized CAQH ProView database of provider credentialing information.

Most commercial payers in the United States pull credentialing data from CAQH rather than collecting it directly, so a complete and re-attested CAQH profile is effectively a prerequisite for payer enrollment. Source: caqh.org.

CAQH ProView — CAQH ProView is the online provider profile system where clinicians enter and re-attest their demographic, licensure, and credentialing data once for use by participating payers.

ProView profiles must be re-attested every 120 days. Granting payers access to the profile is what allows them to pull data for credentialing and re-credentialing. Source: proview.caqh.org.

CE / CEU — CE is the ongoing professional learning licensed clinicians must complete to maintain licensure, and CEUs are the standardized units used to measure that learning.

Most non-physician licenses (nursing, allied health, behavioral health) define renewal in CE hours or CEUs rather than CME credits.

CME — CME is accredited continuing education for physicians, measured in credit hours awarded by ACCME-accredited providers.

Most state medical boards require a set number of CME credits per renewal cycle, often with mandated topics such as opioid prescribing, ethics, or human trafficking awareness. Source: accme.org.

CMS — CMS is the federal agency within HHS that administers Medicare, Medicaid, CHIP, and the Health Insurance Marketplaces.

CMS sets the enrollment, revalidation, and screening rules that govern Medicare and Medicaid provider participation, and operates PECOS as the system of record for those enrollments. Source: cms.gov.

COI — A COI is a one-page document issued by an insurance carrier that summarizes the policyholder, coverage limits, and effective dates of a malpractice or general liability policy.

Hospitals, payers, and contracting facilities typically request a current COI as proof of malpractice coverage at credentialing and again at every renewal.

CVO — A CVO is an organization that performs primary source verification of provider credentials on behalf of hospitals, health systems, or payers.

Many CVOs are accredited by NCQA or URAC, which allows hospitals and payers to rely on the CVO's verifications without re-doing the work themselves.

DEA — DEA registration is the federal authorization, issued by the Drug Enforcement Administration, that allows a practitioner to prescribe, administer, or dispense controlled substances.

DEA registrations are tied to a specific practice address and schedule level, must be renewed every three years, and as of 2023 require an 8-hour one-time training in substance use disorder treatment (MATE Act). Source: deadiversion.usdoj.gov.

Delegated credentialing — Delegated credentialing is an arrangement in which a payer or hospital formally delegates the credentialing process to another entity — typically a medical group, IPA, or CVO — under a written delegation agreement.

The delegating organization remains accountable and must audit the delegate annually against NCQA or URAC standards, but providers can be added to the network much faster than under direct credentialing.

ECFMG — ECFMG is the organization that certifies international medical graduates as qualified to enter U.S. graduate medical education and to obtain U.S. medical licensure.

ECFMG certification is a primary source for international medical school, training, and identity verification during credentialing of IMG physicians. Source: ecfmg.org.

EIN — An EIN is the nine-digit federal tax identification number assigned by the IRS to a business entity, including a professional corporation, group practice, or hospital.

Group enrollments with Medicare and most payers are tied to the group EIN and a Type 2 NPI, while the individual providers are linked to the group via Type 1 NPIs.

FSMB — FSMB is the national association of the 70 U.S. state medical and osteopathic regulatory boards, and the operator of the FCVS credentials repository.

FSMB's Federation Credentials Verification Service (FCVS) provides a permanent, primary-source-verified physician credentials portfolio that boards and hospitals can rely on for licensure and credentialing. Source: fsmb.org.

Hospital privileges — Hospital privileges are the specific clinical activities a provider is authorized to perform at a particular hospital, granted by the hospital's medical staff after credentialing.

Privileges are typically organized into core privileges for a specialty plus specific additional procedures that require documented training, case logs, or proctoring.

TJC — The Joint Commission is an independent, non-profit accreditor of U.S. hospitals and other healthcare organizations, formerly known as JCAHO.

Joint Commission accreditation requires medical staff credentialing and privileging processes that meet specific standards (MS chapter), and CMS recognizes the accreditation as deemed status for Medicare conditions of participation. Source: jointcommission.org.

License — A license is the state-issued authorization that allows a clinician to legally practice a regulated profession within that state.

Licenses must be primary-source verified at credentialing and re-credentialing by querying the issuing board directly or through FSMB / Nursys.

Locum tenens — Locum tenens is the practice of a clinician temporarily filling in for another provider, typically through a staffing agency.

Locum providers still require full credentialing and privileging at each facility, though many hospitals use expedited or temporary privileges to shorten onboarding.

Malpractice insurance — Malpractice insurance is professional liability coverage that protects a clinician against claims of negligence or harm arising from the delivery of care.

Credentialing requires both proof of current coverage (a COI) and a complete history of past coverage with carrier names, policy numbers, and any gaps or settlements.

Medicaid enrollment — Medicaid enrollment is the state-by-state process of registering a provider with a state Medicaid program so the provider can be reimbursed for services delivered to Medicaid beneficiaries.

Each state operates its own enrollment portal and screening rules under the federal CMS framework, and providers must revalidate at least every five years.

Medicare enrollment — Medicare enrollment is the federal process of registering a provider, supplier, or organization with CMS to bill the Medicare program, completed through PECOS or the CMS-855 paper forms.

Medicare enrollments must be revalidated every five years (every three for DMEPOS suppliers), and any changes of address, ownership, or banking must be reported within 30 days. Source: cms.gov enrollment.

NAMSS — NAMSS is the professional association for medical services professionals (MSPs) who manage credentialing, privileging, and provider enrollment at U.S. healthcare organizations.

NAMSS administers the CPCS and CPMSM certifications and publishes industry guidance on credentialing standards and ideal credentialing practices. Source: namss.org.

NCQA — NCQA is a non-profit organization that accredits health plans and certifies CVOs against published credentialing standards (CR 1–8).

NCQA's credentialing standards define what must be primary source verified, how long verification is valid, and the timeline for re-credentialing every 36 months. Source: ncqa.org.

NPDB — NPDB is a federal repository of reports about medical malpractice payments and adverse actions taken against healthcare practitioners.

Hospitals are required by law to query NPDB at initial credentialing and re-credentialing, and certain entities must report adverse actions to NPDB within 30 days. Source: npdb.hrsa.gov.

NPI — An NPI is the 10-digit, lifelong, HIPAA-standard identifier assigned by CMS to every U.S. healthcare provider and organization that transmits health information electronically.

NPIs are issued by the NPPES system and validated with the Luhn checksum algorithm. Every billed claim, prescription, and credentialing record uses the NPI as the canonical provider identifier. Source: NPI Registry.

NPI Type 1 vs Type 2 — An NPI Type 1 identifies an individual provider (a person), while an NPI Type 2 identifies an organization or group practice (a legal entity).

An individual clinician has exactly one Type 1 NPI for life; a group practice has a Type 2 NPI for billing and may add a separate Type 2 for each subpart it wants to enroll independently.

NPPES — NPPES is the CMS system that assigns NPIs and maintains the public NPI Registry of all enumerated providers and organizations.

Provider taxonomy, practice address, and other NPI demographics are maintained in NPPES and must be kept current — many payer mismatches trace back to an out-of-date NPPES record. Source: nppes.cms.hhs.gov.

NUCC — NUCC is the body that maintains the Healthcare Provider Taxonomy Code Set, the official list of provider type and specialty codes used on claims and NPI records.

The taxonomy code set is published twice a year and is the authoritative source for provider type, classification, and specialization values across credentialing, billing, and directory systems. Source: nucc.org.

OIG LEIE — OIG LEIE is the federal HHS Office of Inspector General's monthly-updated list of individuals and entities excluded from participation in Medicare, Medicaid, and all federal healthcare programs.

Every employer of a healthcare worker must screen against the LEIE before hire and monthly thereafter — billing for any service ordered or performed by an excluded individual triggers civil monetary penalties. Source: oig.hhs.gov/exclusions.

Onboarding — Onboarding is the end-to-end process of bringing a new provider into an organization, including HR paperwork, credentialing, privileging, payer enrollment, IT setup, and orientation.

Credentialing is one workstream inside onboarding, and it is usually the longest — most organizations target 90–120 days from signed offer to revenue-generating start date.

Payer enrollment — Payer enrollment is the process of registering a provider with each insurance plan, network, and government program so that claims for that provider's services can be paid.

Each payer has its own enrollment application, timeline, and effective-date rules. Most plans pull data from CAQH ProView, but Medicare uses PECOS and Medicaid uses state-specific portals.

PECOS — PECOS is the CMS online system used to enroll providers and suppliers in Medicare, revalidate their information, and report ownership and managing control changes.

PECOS is the system of record for Medicare enrollment — the CMS-855I, 855B, 855R, and other paper forms map directly to PECOS sections, and submitting electronically through PECOS is typically faster than paper. Source: pecos.cms.hhs.gov.

Peer reference — A peer reference is a written or verbal evaluation from another clinician of the same discipline that attests to an applicant's clinical competence, ethics, and ability to work with others.

NCQA and most hospital medical staff bylaws require peer references from physicians who have worked with the applicant in the past 12–24 months, and the responses must be from a primary source.

PSV — Primary source verification is the act of confirming a credential directly with the issuing source rather than relying on a copy submitted by the applicant.

For example, a medical license is PSV'd by querying the state medical board's official website or FSMB, and a board certification is PSV'd through ABMS or the appropriate AOA board.

Privileging — Privileging is the process by which a hospital's medical staff and governing body grant a credentialed provider specific clinical privileges, defining what procedures and patient populations they may treat.

Privileging follows credentialing — credentialing answers "is this provider qualified at all?", privileging answers "what specifically may they do here?".

Provisional privileges — Provisional privileges are a time-limited initial grant of privileges, typically while the new provider is observed by the medical staff for an initial focused professional practice evaluation (FPPE) period.

Joint Commission standards require an FPPE for every newly privileged practitioner before full privileges are granted.

Reappointment — Reappointment is the hospital-side equivalent of recredentialing — the periodic re-evaluation that reconfirms a practitioner's medical staff membership and privileges.

Joint Commission requires reappointment at least every 24 months, including a current ongoing professional practice evaluation (OPPE) of clinical performance.

Recredentialing — Recredentialing is the periodic re-verification of a provider's credentials after the initial credentialing, required at least every 36 months by NCQA and most payers.

Recredentialing repeats primary source verification for licensure, DEA, board certification, malpractice coverage, NPDB, and sanctions screens, and re-reviews any quality, complaint, or claims data accumulated since the last cycle.

Roster — A roster is the list of providers a group practice or facility submits to a payer to add, change, or terminate participation under an existing delegated or group contract.

Many payers accept monthly roster submissions in a standardized spreadsheet format, which is much faster than running each provider through a full individual enrollment.

SAM.gov — SAM.gov is the U.S. government's official System for Award Management, which includes a public exclusion record of individuals and entities barred from receiving federal contracts or assistance.

Healthcare employers screen new and current providers against SAM.gov in addition to OIG LEIE to ensure no federal exclusions affect their ability to bill federal payers. Source: sam.gov.

Sanctions check — A sanctions check is the bundled screening of a provider against federal and state exclusion, debarment, and disciplinary lists.

A typical sanctions check includes OIG LEIE, SAM.gov, state Medicaid exclusion lists, OFAC, and each state licensing board's disciplinary actions.

Specialty — A medical specialty is a defined branch of medical practice, such as Internal Medicine, Cardiology, or Pediatrics, that aligns with an ABMS or AOA board and a NUCC taxonomy code.

Specialty drives both the credentialing review process (which board verifies certification) and payer directory placement (which network a provider appears under).

State licensure — State licensure is the legal authorization issued by an individual U.S. state or territory that permits a clinician to practice their profession within that jurisdiction.

Every state where a provider sees patients — including telehealth visits — generally requires a separate active license, unless the state participates in an interstate compact such as the IMLC for physicians.

Taxonomy code — A taxonomy code is the 10-character NUCC code that classifies a provider's type, classification, and area of specialization for claims and NPI records.

Choosing the right primary taxonomy is critical — payers route enrollments, set fee schedules, and place providers in network directories based on the taxonomy reported in NPPES and on claims. Source: taxonomy.nucc.org.

URAC — URAC is an independent, non-profit accreditor of healthcare organizations, including health plans, CVOs, pharmacies, and telehealth providers.

URAC accreditation is recognized alongside NCQA as evidence that a CVO or health plan's credentialing program meets industry standards. Source: urac.org.

W-9 — A W-9 is the IRS form on which a provider or group certifies their legal name, business structure, and taxpayer identification number to a payer or contracting entity.

Payers require a current W-9 at enrollment so that 1099 reporting and electronic funds transfer (EFT) are tied to the correct tax ID; a stale W-9 is one of the most common causes of payment delays.