CMS strengthens Medicare Beneficiary's information security.

CMS IDM Customers,

We are pleased to announce that the Experian Risk Based Alternative (RBA) Remote Identity Proofing (RIDP) solution has been successfully deployed to the Identity Management (IDM) production environment as of August 15, 2023. The RBA RIDP solution is not just an upgrade; it represents a comprehensive approach to identity verification. By incorporating multiple components, when combined, they equip CMS with a potent RIDP solution designed to safeguard against fraud and confirm the identities of individuals accurately.

Who is Affected?

All existing and future Medicare beneficiary applications are integrated with IDM and leverage RIDP services.

Key Highlights:

1. ARS Compliance: This solution aligns with the latest Acceptable Risk Safeguards (ARS) standards, ensuring your data always remains protected.

2. Shift Away from Knowledge-Based Authentication (KBA): The RBA RIDP solution doesn't depend on out-of-wallet questions, eliminating a previously vulnerable method of user vetting. Instead, users will submit PII (Personally Identifiable Information) to successfully prove their identity.

3. User-Friendly Experience: With the elimination of out-of-wallet questions, users can expect a smoother, more straightforward vetting process.

The adoption of the Experian RBA RIDP solution underscores our commitment to maintaining the highest standards of data security and integrity. This change will help fortify our defenses against fraud and ensure the trustworthiness of the identities with whom we engage. For additional information or if you require assistance regarding this update, contact the IDM Team (IDMIntegrationOps@cms.hhs.gov); If support is needed related to this or other CMS services, please reach out to your application's Tier 1 Help Desk.