The CCM Monthly Audit Checklist
The CMS requirements behind a chronic care management claim do not change month to month, but the proof does. This checklist is a monthly control you run before claims go out, and every item on it traces back to a published CMS or OIG requirement.
Eight sections cover the program end to end, from patient eligibility through final claim release. Two of them carry an OIG audit trap flag, because those are the failures that drove the largest chronic care management overpayment recoveries on record.
Free download
Get the checklist
We will email you the PDF right away. Print it, or work it on screen.
Send me the checklistWe use your information to send the checklist and occasional remote care updates. Unsubscribe anytime.
How to use the checklist
The checklist runs in two passes. Verify eligibility and consent once at enrollment, then re-check them quarterly. Sections 3 through 8 get run every single month you bill.
Who runs it
Practice managers, clinical leads, and billing leads. Boxes are open for checking on paper or on screen, so a single owner can work through it and hand it off.
When to run it
Before claims are released for the month. Running it after submission turns a correctable gap into a repayment conversation.
What is inside: the eight sections
Each section below is a working control with its own checkboxes in the PDF. Here is what each one covers.
Enrollment controls
1Patient eligibility and baseline
Two or more chronic conditions expected to last at least 12 months, risk language in the record rather than diagnosis codes alone, established-patient status or a documented initiating visit, and at least two active ICD-10 codes carried on the claim.
2Beneficiary consent
What staff must explain before services begin, including the 20 percent Part B cost-share, the rule that only one practitioner bills per month, and the right to stop at any time. A signed form or a dated verbal-consent note has to sit in the EHR.
3Systems and access
Certified EHR content, a documented 24/7 pathway to reach clinical staff, continuity through a designated care team member, and the ability to deliver care by secure message, portal, telehealth, or home visit.
Monthly controls
4Comprehensive care plan
The living document, and the primary defense against a static-care-plan recoupment. Covers what a complete electronic plan contains, medication reconciliation, the patient copy and its documented transfer, and availability to other treating clinicians.
5Monthly time and documentation
Every entry carries a date, duration, staff name and credentials, and a clinical description. Qualifying tasks are listed, clerical time is excluded, thresholds are given per code, and the no-rounding and no-rollover rules are stated plainly.
6Supervision and staffing
General supervision for clinical-staff codes, state licensing and scope of practice, and whether staff are employed or contracted consistent with incident-to rules.
7Concurrency and no double-dipping
Mutually exclusive programs listed by code, separation of RPM and RTM minutes, Part A skilled nursing stays, and the transitional care management same-month rule.
8Final claim release
Completed by the billing lead. Billing NPI, place of service, how to set the date of service, and the ICD-10 match to the conditions actually managed under the care plan.
The two audit traps
Both are flagged inline in the PDF, at the point in the review where the risk actually applies.
OIG audit trap
The static care plan
Billing coordination minutes against a care plan that has not changed is a primary audit indicator. The plan has to show revisions reflecting interventions, consults, or medication changes in the month you billed.
OIG audit trap
Duplicate and overlapping billing
This is the highest exposure in the program. Only the first claim CMS adjudicates gets paid, and APCM, PCM, home health care plan oversight, hospice supervision, and ESRD services are all mutually exclusive with CCM in the same month.
The Audit Proof Packet
The checklist closes on a single standard. On an audit request, your practice should be able to export and deliver all of the following within 24 hours.
| The initiating visit note linking the CCM discussion and order | |
| The signed or documented consent record | |
| The electronic care plan with timestamps showing monthly revisions | |
| Contemporaneous time logs with names, credentials, durations, and descriptions | |
| Multi-program eligibility and concurrency validation |
How Vivo Care fits
Vivo Care builds consent capture, the electronic care plan, monthly time logs, and a concurrency check directly into the workflow. That way the packet is generated as the work happens instead of being reconstructed under audit pressure. The billing practitioner remains the biller of record.
Related reading
Want the full picture behind the checklist?
The 2026 Chronic Care Management Guide covers who qualifies, the 2026 CPT codes and reimbursement rates, consent and care plan rules, and the documentation this checklist is built to protect.
Read the 2026 CCM GuideScope a CCM program that produces this packet automatically
Book a working session with our team. We will map codes, documentation, staffing, and revenue against your patient panel.
Scope your CCM programSources
- CMS, Chronic Care Management Services, MLN909188
- CMS, Chronic Care Management Frequently Asked Questions
- CMS, Payment for Chronic Care Management Services FAQs
- HHS-OIG, Medicare Continues To Make Overpayments for Chronic Care Management Services, A-07-19-05122
Educational reference, not billing, legal, or reimbursement advice. Coverage, coding, supervision rules, and documentation expectations vary by payer, region, and Medicare Administrative Contractor. Confirm current CMS guidance and payer policy before billing. Medically reviewed by Dr. Aamir Iqbal, MD, Medical Director, Vivo Care. Last updated August 2026.