1. Confidential 1 Electronic Prescribing of Controlled Substances: Prescriber Identity Proofing and Credentialing Part 2 of a 3 Part Series Chuck Klein, Ph.D. GM/Director, Medication Management

2. Confidential 2 Agenda Defining EPCS Requirements: Prescribers Identity Proofing and Credentialing OrderConnect Timeline

3. Confidential 3 What is EPCS? EPCS—the Electronic Prescribing of Controlled Substances— allows prescribers who use an EPCS-certified e-prescribing application to send prescriptions for controlled substances electronically to pharmacies. Although highly desired, EPCS is not mandatory, except for New York State prescribers (effective 3/27/2015).

4. Confidential 4 What is Required for Prescribers to do EPCS? Prescribers: The DEA requires prescribers to go through Identity Proofing and Issuance of Credentials. Specific processes are outlined by the DEA for ‘activating’ physicians to do EPCS. Two factor authentication is required by prescribers when transmitting EPCS prescriptions.

5. Confidential 5 Identity Proofing and Credentialing Netsmart has partnered with Verizon who will provide identity proofing and credentialing services. Verizon is a federally approved Certificate Authority and a Credential Services Provider (NIST SP 800-63-1 Assurance Level 3). Netsmart will offer, through the OrderConnect Admin Tool and Registration Tool, the ability for providers to get identity proofed and credentialed (via Verizon).

6. Confidential 6 Identity Proofing and Credentialing To begin, clients in New York will be sent a form to fill out indicating which prescribers wish to electronically prescribe controlled substances. The fields to complete are: First Name Last Name Personal Email Address (not a shared address) OrderConnect User ID (eg, OC Login ID) Once completed the form will be emailed back to Netsmart for uploading in a Verizon portal.

7. Confidential 7 Identity Proofing and Credentialing Going forward, organizations will be able to enter EPCS prescriber information directly into OrderConnect (versus completing a form and emailing). After receiving the prescriber information, Verizon will send an email to the prescriber’s personal email address that will contain a link to begin the identity proofing process.

8. Confidential 8 Identity Proofing and Credentialing

9. Confidential 9 Identity Proofing and Credentialing

10. Confidential 10 Identity Proofing and Credentialing

11. Confidential 11 Identity Proofing and Credentialing

12. Confidential 12 Identity Proofing and Credentialing

13. Confidential 13 Identity Proofing and Credentialing

14. Confidential 14 Identity Proofing and Credentialing

15. Confidential 15 Identity Proofing and Credentialing Sample questions used for Identity Proofing:

16. Confidential 16 Identity Proofing and Credentialing If the prescriber fails the online identity proofing, he/she will need to fill out a two page form (provided by Netsmart on behalf of Verizon), have it notarized, and fax back to Verizon. There will be an additional charge for this process.

17. Confidential 17 Identity Proofing and Credentialing As an alternative to Identity Proofing through Verizon, organizations can provide their own as long as they meet the DEA’s requirements for Institutional Identify Proofing.

18. Confidential 18 Identity Proofing and Credentialing Netsmart will send the organization the number of hard tokens requested. Then, each prescriber will add the hard token to his/her profile using the UIS Profile Manager and then he/she can use it.

19. Confidential 19 Identity Proofing and Credentialing After completing Identity Proofing, the prescriber will log into their OrderConnect provider profile and finalize the identity proofing by entering their user name, password, and a PIN associated with their token. Netsmart will have sent the organization the number of hard tokens requested. Then, each prescriber will add the hard token to his/her profile using the UIS Profile Manager and then he/she can use it.

20. Confidential 20 Setting Access Controls in OrderConnect for EPCS Once a prescriber has gone through identity proofing and obtained an authentication credential he/she is eligible for EPCS access in OrderConnect. The OrderConnect Admin Tool will contain the access controls needed to activate prescribers for EPCS according to strict DEA standards. Two separate individuals will be required to grant access for each prescriber.

21. Confidential 21 OrderConnect’s Timeline for EPCS OrderConnect EPCS will be released for use by our New York clients on March 16, 2015. Prior to its release, user documentation will be provided as well as a recorded training webinar. Instructions will also be sent that will allow providers to go through identity proofing and credentialing. In addition, information will be sent to our NY clients that will allow them to register their OrderConnect with the NY Bureau of Narcotic Enforcement. OrderConnect EPCS will be available for use by all other clients by April 30, 2015.

22. Confidential 22 What Will the Additional Cost be for EPCS? One Time Set up Fee: $50 per prescriber Monthly License Fee: $8 per prescriber (in addition to their prescriber license). If a prescriber fails online Identity Proofing and is required to complete a notarized form, an additional $50 fee will be charged.

23. Confidential 23 OrderConnect EPCS Webinars: Part 3 Part 3: February 19, 2015 Will cover EPCS workflow in OrderConnect for prescribers and agents. Invitations will be forthcoming.

24. Confidential 24 Questions?