Thursday, December 9, 2010

CCHIT needs to follow test procedures for Certification

This showed up in my e-mail, but blogger marked it as spam, so I'm reposting it here.

Amit Trivedi has left a new comment on your post "CCHIT needs to follow test procedures for Certific...":

Keith – just want to set the facts straight. Our CCHIT Certified® testing requirements and the ONC-ATCB testing requirements are separate and distinct. We make it very clear to everyone that CCHIT uses the NIST test tools in its ONC-authorized certification program. We do *not* use the Laika tool for ONC-ATCB testing. We use the following tool as specified in the NIST test procedures for CCD/C32 validation: http://xreg2.nist.gov/cda-validation/mu.html

Your blog is well-read and we appreciate the work you do in the health IT standards community. We hope you will feel free to contact CCHIT directly to verify misstated claims such as this one.
Now for mea-culpas.  Yes, I should have checked in with CCHIT on this, and for failing to do that I apologize. 

On the flip side, CCHIT shouldn't be setting different requirements for Comprehensive Certification that CONFLICT with ONC-ATCB Certification, which is what appears to have done.  If it were me, I'd pick one tool and stick with it, but they could still use the LAIKA tool -- just update it to integrate with the RIGHT set of rules from NIST.


See comments below for updates. This may result from confusion between CCHIT Comprehensive certification (for which CCHIT can use their own procedures), and ONC-ATCB certification. In that case, comprehensive certification under CCHIT would seem to require something different from ONC-ATCB certification, which would certainly be unfortunate and undesirable, but not against the regulations.


Due to a technical problem, blogger lost the original content of this post.  I have reconstructed it below:


A recent post to the structured documents and CCD lists brings up the issue that the LAIKA tool isn't coming up with the same results as the NIST tools.  The LAIKA tool is wrong, and the NIST tool is right (click on the link above for details).

Under the applicable regulations [emphasis mine]:
§170.423 Principles of proper conduct for ONC-ATCBs.
...
(e) Use test tools and test procedures approved by the National Coordinator for the purposes of assessing Complete EHRs and/or EHR Modules compliance with the certification criteria adopted by the Secretary;

To my knowledge, only the NIST test procedures have been adopted by the secretary.  Those procedures  (pdf) reference the NIST test tool, not the LAIKA one.


Reading further in the Certification rule,

§170.560 Good standing as an ONC-ACB.
(a) Adhering to the Principles of Proper Conduct for ONC-ACBs;e.g., use procedures adopted by ONC...

So, going further, what's your recourse if affected?  A section down describes what ONC can do on recieving evidence of non-complaince.


§170.565 Revocation of authorized certification body status.
...
(b) Type-2 violations. The National Coordinator may revoke an ONC-ACB’s status for failing to timely or adequately correct a Type-2 violation. Type-2 violations comprise noncompliance with §170.560.

(1) Noncompliance notification. If the National Coordinator obtains reliable evidence that an ONC-ACB may no longer be in compliance with §170.560, the National Coordinator will issue a noncompliance notification with reasons for the notification to the ONC-ACB requesting that the ONC-ACB respond to the alleged violation and correct the violation, if applicable.


So, if you can show to ONC that CCHIT requires a testing procedure that is not the one accepted by ONC, you can almost certainly get CCHIT to fix it if ONC agrees that the procedure is in violation.

6 comments:

  1. This may be a disconnect between Comprehensive certification requirements (for which CCHIT can set their own rules), and ONC-ATCB certification, for which they must follow the ONC temporary certification regs in 45 CFR 170.400 - 600. I'm checking up on this.

    ReplyDelete
  2. Keith – just want to set the facts straight. Our CCHIT Certified® testing requirements and the ONC-ATCB testing requirements are separate and distinct. We make it very clear to everyone that CCHIT uses the NIST test tools in its ONC-authorized certification program. We do *not* use the Laika tool for ONC-ATCB testing. We use the following tool as specified in the NIST test procedures for CCD/C32 validation: http://xreg2.nist.gov/cda-validation/mu.html

    Your blog is well-read and we appreciate the work you do in the health IT standards community. We hope you will feel free to contact CCHIT directly to verify misstated claims such as this one.

    ReplyDelete
  3. Amit, thanks for setting me straight. I've update the post. Now, about that Comprehensive certification that's different...

    ReplyDelete
  4. I had to comment on this...as a EHR Vendor this kind of differing standards on the CCD promotes exactly the opposite of what interoperability is about. CCHIT should man up and just adopt ONC requirements for the CCD instead of trying to push their own.

    ReplyDelete
  5. "Man up"? This one must be a tea bagger.

    ReplyDelete
  6. Caveat that I am a volunteer and co-chair of the Interoperability workgroup within CCHIT, but am NOT speaking officially for CCHIT. As a little background, CCHIT's criteria in its comprehensive certification were defined in 2009, and the CCD tests were based on the NIST validator available at the time. Laika just "front ended" the NIST validator with a UI. CCHIT has always had an annual cycle, so once the criteria were defined and the comprehensive program launched, it has tried hard to keep from changing the "rules of the game" (i.e., the test scripts) throughout the year. Otherwise, developers would face the undesirable situation of chasing a moving target. The ONC Final Rule and "final" NIST Test scripts (which can still evolve) didn't occur until many months later. So things are the way they are due to timing of when the different programs were launched, not due to any intentional deviation. Still I think the concept of harmonizing the CCHIT and ONC criteria is a very reasonable request.

    ReplyDelete