Five Ways a Network Build Fails Before CMS Ever Looks

Network adequacy failures are not random. Our team has hands-on network-build experience, and these are the five patterns we would look for first.

For each one: what it looks like in practice, what it costs, and what to do instead.

Lesson 1: The Documentation Gap: You Built a Good Network You Can't Prove

What it looks like: The plan has actually done the work. Providers are recruited, contracted, and seeing patients. The network is real. But when someone asks for the proof, the verification dates, the appointment access data, the support behind a directory attestation, it sits in disconnected spreadsheets, email chains, and the memory of the network team.

What it costs: CMS scores the tables you upload, not the network you know you have. Its December 2024 guidance says names and addresses must be submitted exactly the same way each time, and that differences can cause processing problems and network deficiencies. A real provider on a messy row can still cost you the county.

What to do instead: Decide where the records live before the build starts, not after. Every contracting decision, panel status verification, and appointment access data point should be captured somewhere you can find it later. If your network management lives in spreadsheets, you have a documentation gap in progress.

Lesson 2: The Last-Minute Scramble: Submitting the Week of the Deadline

What it looks like: The deadline is weeks out. The adequacy analysis finally runs. Gaps appear: sometimes expected ones the team knew about, sometimes surprises from stale data or recently terminated providers. The rest of the time is crisis mode: emergency outreach, expedited contracting, and an upload that goes in under pressure.

What it costs: For an applicant, the network has to pass inside the application, and the final upload is the response to the Notice of Intent to Deny, due within 10 days under 42 CFR 422.502(c)(2)(ii). That is enough time to fix an address. It is not enough time to recruit a specialist.

What to do instead: Run your adequacy analysis months before the upload, not weeks. Use that window to recruit, contract, and credential while there is still time. There is no reliable national average for credentialing, so plan around your own process; see how long provider credentialing takes.

Lesson 3: The Rural Blind Spot: Metro Focus, CEAC Gaps

What it looks like: The network build team focuses energy where most members are: Large Metro and Metro counties. Then the adequacy report runs and the Rural and CEAC counties, the ones with few primary care providers and no specialists within the standard, are deficient. Nobody had been tracking them because nobody was thinking about them.

What it costs: Rural and CEAC gaps are harder to close quickly. There are fewer providers to recruit, and telehealth earns only a 10 point credit, in listed specialties. Teams that find these gaps late may file hoping for an exception, and exceptions are not a safe plan: MedPAC reports CMS denied 259 of 448 exception requests in 2021, or 58%.

What to do instead: Build your adequacy monitoring county by county from day one, weighted by difficulty of closure. Build your recruitment roadmap starting with the hardest geography, not the easiest. Rural gaps rarely resolve themselves.

Lesson 4: The Credentialing Bottleneck: Contracted but Not Activated

What it looks like: The recruitment team closes a productive quarter. A batch of providers signs participation agreements, and the network team declares victory. Weeks later, many of them still haven't cleared credentialing. Applications are incomplete, primary source verification is pending, the credentialing committee hasn't convened. They're contracted. They're not activated.

What it costs: CMS's guidance looks for a fully executed contract on the HSD table, but in most plans a provider isn't loaded as participating until the credentialing committee approves the file. Until then, members can't see that provider, whatever the table says. A network that looks adequate on contracts alone is overstating what members can actually use.

What to do instead: Track contracting status and credentialing status as separate fields, and report both. Build credentialing turnaround into your recruitment timeline by working back from the date you need the provider seeing members. The credentialing pipeline is the constraint; plan accordingly.

Lesson 5: The Data Hygiene Problem: Stale NPIs and Wrong Panel Status

What it looks like: The provider directory looks complete. The adequacy report looks green. Then someone calls a few providers from the rural cardiology list to confirm appointment availability. Two aren't taking new patients. One retired. The NPI is still in the system. The panel status field says "accepting." Nobody checked.

What it costs: Others are checking. In the third round of its MA online directory reviews, CMS found that 48.74% of 10,504 provider locations had at least one inaccuracy. Senate Finance Committee staff ran a secret shopper study of MA mental health listings in 2023, and Medicaid state secret shoppers start for rating periods on or after July 9, 2028. A member who relies on a directory and can't get an appointment is both a regulatory and a reputational problem.

What to do instead: Implement a continuous verification cadence, not an annual one. The No Surprises Act already requires commercial plans to verify every 90 days, and the REAL Health Providers Act brings 90-day verification to MA from plan year 2028. Log each verification date. This is not a once-a-year project.

None of these failures are inevitable. All five can be spotted well before they become compliance problems, if you're looking in the right places on the right timeline. Start earlier, and don't hope the spreadsheet holds together until submission.