Stage 1 Overview
To participate in the Medicare and Medicaid EHR Incentive Programs, EPs and EHs must demonstrate that they are "meaningfully using" EHR technology by meeting specific objectives in various stages. The Stage 1 objectives, along with detailed performance measures, are explained in The CMS Final Rule [PDF - 14 MB]. According to this document, EPs and EHs had to meet mandatory core measures and choose from among several menu set measures in 2011-12 to be eligible to collect an EHR incentive payment.
With the release of The CMS Stage 2 Rule in fall 2012, several of the requirements for Stage 1 were also updated. Some of these changes went into effect with FY/CY 2013 while others did not go into effect until FY/CY 2014. (Note that these changes are not retroactive to FY/CY 2011 or 2012.)
Security Risk Analysis
Per 45 CFR 164.308(a) (1), a Risk Analysis is required to meet MU. This Security Risk Analysis must be completed during each participation year prior to the end of the MU EHR reporting period.
Tribal and Urban sites may use the IHS External Risk Analysis. Please contact OITSecurity@ihs.gov with any questions.
IHS External Risk Analysis [PDF - 361 KB]