Migration from EDE to ARC-AMPE Contingency Planning Controls

This white paper serves as a guide for Direct Enrollment Entities (DEEs) to transition their Enhanced Direct Enrollment (EDE) System Security and Privacy Plans (SSPPs) to the Acceptable Risk Controls for ACA, Medicaid, and Provider Entities (ARC-AMPE). It specifically addresses the Contingency Planning controls within the ARC-AMPE framework. The document outlines the background of the Affordable Care Act (ACA) and the role of Enhanced Direct Enrollment in improving access to healthcare. It details the oversight responsibilities of the Centers for Medicare & Medicaid Services (CMS) regarding DEEs, emphasizing compliance with federal regulations and data protection measures. The ARC-AMPE framework, published by CMS, replaces the previous EDE guidelines and introduces a new control mapping system. The paper further elaborates on the specific controls related to contingency planning, which are essential for ensuring the availability of critical information resources and continuity of operations during emergencies. The document is part of a series aimed at facilitating the transition to the new compliance requirements.