Q: When should I contact the dedicated help desk for the SPOT? How do I contact them?
A: You should contact the SPOT help desk if:
You experience difficulty creating your official IACS account for the SPOT or with changing your password
You do not understand a message sent from IACS Support or [email protected]
You need to have your official IACS account password reset or your account unlocked
You receive an error message when trying to access the SPOT
Q: I have registered for The SPOT through IACS, but I still cannot access First Coasts provider Internet portal. What should I do?
A: Please check your email for a request to validate your account in Individuals Authorized Access to the CMS Computer Services (IACS)
If you havent received a revalidation request, please contact [email protected] to ensure that your account is still active.
Q: I can log in to The SPOT, but I cant access any of its features because of a system error or message. What should I do?
A: Please make a note of the error message and contact [email protected] for assistance.
Q: Why do I have to provide my personal Social Security Number (SSN) when registering for my official IACS account for the SPOT? Will anyone be able to see my SSN?
A: First Coasts Secure Provider Online Tool (the SPOT) is a Web-based application that is hosted through CMS applications portal. As an account holder for the SPOT, you will have access to highly confidential information, including the Protected Health Information (PHI) and Personally Identifiable Information (PII) of Medicare beneficiaries, which is why the Centers for Medicare & Medicaid Services (CMS) restricts access to its systems by enforcing strict security protocols.
CMS security protocols to protect PHI and PII
First, CMS requires that all prospective account holders for Web-based applications hosted through its portal (e.g., the SPOT, STAR) must successfully complete the registration process through Individuals
Authorized Access to the CMS Computer Services (IACS).
Second, before applicants may begin the six-step, IACS registration process, they are required to read and accept CMS Computer Systems Security Requirements statement, which includes the following:
The Social Security Number (SSN) is used as an identifier in the Federal Service because of the large number of present and former Federal employees and applicants whose identity can only be distinguished by use of the SSN is authorized by Executive Order 9397. Furnishing the information on this form, including your Social Security Number, is voluntary. However, if you do not provide this information, you will not be granted access to CMS computer systems.
During the first step of the IACS registration process, you will be asked for your name, email address, date of birth, and your personal SSN:
Account requirements for The SPOT FAQ
Q: Are there specific account requirements for First Coasts Secure Provider Online Tool (SPOT)?
A: Yes. To use First Coast Service Options (First Coast) provider Internet portal, you must establish an account though the Centers for Medicare & Medicaid Services Individuals Authorized Access to the CMS Computer Services (IACS).
To become an account holder for The SPOT you must meet the following requirements:
Applicant must successfully complete the IACS registration process for The SPOT
Applicant must identify the officially designated in the providers enrollment record -- in the Provider Enrollment Chain and Ownership System (PECOS) -- as one of the following:
Q: I am listed as the contact person in Internet-based PECOS on my practice/facilitys enrollment application. Isnt being listed as the contact person on the electronic or paper application the same as being designated as one of the practice officials (i.e., managing employee, authorized official, delegated official, or practitioner) on the application?
A: No. The contact person listed in Internet-based PECOS or your paper enrollment application is not automatically considered to be the same individual as the practice or facilitys managing employee, authorized official, or designated official. However, a practice official may also act as the contact person for the providers enrollment application if he or she has been specifically designated in both roles on the providers enrollment application.
The Centers for Medicare & Medicaid Services (CMS) defines the differences between these terms as follows:
Contact person: An individual who has been designated in the providers application as the central contact person to answer questions regarding information included on the application. Although it is not required for the contact person to be an authorized official or designated official, the contact person does not have the same standing as an authorized official, delegated official, or managing employee. Note: In Internet-based PECOS, the information listed in the Correspondence Section will be used to contact the provider after the application has been approved.
Managing employee: A general manager, business manager, administrator, director, or other individual who exercises operational or managerial control over, or who directly or indirectly conducts, the day-to-day operations of the provider, either under contract or through some other arrangement, regardless of whether the individual is a W-2 employee of the provider.
Authorized official: An appointed official (for example, chief executive officer, chief financial officer, general partner, chairman of the board, or direct owner) to whom the organization has granted the legal authority to enroll it in the Medicare program, to make changes or updates to the organizations status in the Medicare program, and to commit the organization to fully abide by the statutes, regulations, and program instructions of the Medicare program. Although there is no limit on the number of authorized officials, each must be listed separately on the providers application and must disclose his or her personal social security number and sign the application.
Note: Only an authorized official has the authority to sign the initial enrollment application on behalf of the provider or the enrollment application that must be submitted as part of the periodic revalidation process. A delegated official does not have this authority. In addition, only an authorized official may delegate the authority to make changes and/or updates to the providers Medicare status.
Delegated official: An individual who is delegated by an authorized official the authority to report changes and updates to the providers enrollment record. A delegated official must be an individual with an ownership or control interest in (as that term is defined in Section 1124(a)(3) of the Social Security Act), or be a W-2 managing employee of, the provider.
Note: Delegated officials may not delegate their authority to any other individual. Each delegated official must have and disclose his/her social security number on the providers enrollment application.
Q: My application for my official IACS account for the SPOT was denied. What are the possible reasons that my account request would have been denied? Do I need to begin the registration process again?
A: Once you have completed the six-step registration process in Individuals Authorized Access to the CMS Computer Services (IACS) system, the provider-specific information you entered will be compared to the providers official enrollment record in the Provider Enrollment Chain and Ownership System (PECOS).
The following provider-specific information will be verified in PECOS by IACS Support:
National Provider Identifier (NPI)
Provider Transaction Access Number (PTAN)
Last five digits of the providers Social Security Number (SSN) or Tax Identification Number (TIN)
Practice Officials first name, last name, and role
Line of business (LOB)
Reasons for denial
An application for an official IACS account for the SPOT may be denied for any of the following reasons:
Incorrect account holder information entered (e.g., SSN, first name, last name, email address)
Incorrect combination of provider-specific information (i.e., NPI, PTAN, last five of SSN/TIN, Practice Officials identity and role, LOB, or location)
Incorrect role selected (i.e., Help Desk instead of FCSO Portal User )
If any of the above information was entered incorrectly in the IACS application, your request for an official IACS account for the SPOT will be denied, and you will have to complete and submit a new application in IACS.
Q: I have successfully completed the registration process for the SPOT? What do I need to do to keep my account active?
A: Once you have successfully registered for your official IACS account for the SPOT, you must meet the following criteria to keep your account in Active Status:
Log in to your official IACS account for the SPOT at least once every 60 days
Log in to the IACS administration site and change your account password every 60 days
Successfully complete annual IACS certification
IACS account Password/User ID recovery FAQ
Q: What should I do if I have forgotten either the Password or the User ID for my IACS official account for the SPOT? What information will I need to provide?
A: Although the processes to recover your account Password and User ID are similar, each requires that you furnish a specific set of information about the account holder.
To recover your account Password, you will be required to furnish the following information:
User ID for the account
Account holders Social Security Number (SSN)
Account holders email address
Answers to at least two Authentication Questions
To recover your account User ID, you will be required to furnish the following information:
Account holders first and last names
Account holders date of birth
Account holders SSN
Account holders email address
Answers to at least two Authentication Questions
Password recovery: Step-by-step instructions
If you have forgotten your account Password, please follow these steps:
1. Navigate to the IACS Administration website
2. Enter your User ID on CMS Login to IACS page
3. Click the Forgot Your Password? button
Note: You may also utilize the Forgot Your Password? button on CMS Application Login page; however, you will be automatically redirected to the Login to IACS page (after accepting CMS Terms and Conditions) and will need to begin the process again.