Tuesday, September 8, 2026

1. Signal of the Day · SNF / Post-Acute Surfaced late · published September 4

   OIG: CMS Lacks a Standardized Way to Identify Contract Surveyors as Risk-Based Survey Begins

   HHS-OIG report A-04-24-08105, issued September 2 and posted September 4, found CMS "lacked a process to easily determine whether SA employees or contractors conducted nursing home surveys," and that CMS officials said contractor oversight was not their responsibility; the finding lands as CMS's Risk-Based Survey begins in eligible nursing homes, a memo that itself requires contract surveyors to complete training before conducting any RBS activity. Skilled nursing and senior living operators should read this as a question of survey attribution rather than survey eligibility, which runs entirely on facility-level performance data.

   HighBy HHS-OIGRead at source ↗

2. Security & AI Risk Surfaced late · published August 11

   CISA Re-Releases Critical Advisory for Johnson Controls Badge-Access Servers Used in Care Facilities

   Advisory ICSA-26-204-01 Update A, released August 11, covers Johnson Controls C-CURE 9000 and victor application server at CVSS v3 9.6, citing server-side request forgery and execution with unnecessary privileges across CVE-2026-21655, CVE-2026-21653 and CVE-2026-34496, where exploitation could allow an attacker with network access to achieve remote code execution. No public exploitation has been reported to CISA. Physical access control carries no AI component and for that reason rarely appears on an AI system inventory, while sitting squarely inside the blast radius of one.

   MedBy CISARead at source ↗

3. Regulation & Policy

   CMS Sets FY2028 New Technology Add-On Payment Town Hall, and It Does Not Reach Skilled Nursing

   CMS published notice today of a virtual town hall on December 9 and 10, 2026 for FY2028 new technology add-on payment applications, where applicants present evidence on the substantial clinical improvement criterion. The notice contains no reference to artificial intelligence, machine learning or software, and NTAP is a hospital inpatient prospective payment mechanism: skilled nursing operators reading headlines about Medicare paying for new technology should note that SNF PPS is a separate payment system and is unaffected.

   LowBy Federal RegisterRead at source ↗

4. SNF / Post-Acute

   Risk-Based Survey Begins Today in Eligible Nursing Homes, Phased to State Survey Schedules

   QSO-26-14-NH states the nationwide launch "will occur in eligible facilities beginning September 8, 2026 (based on SA survey schedules)," so adoption follows each state's own survey calendar rather than switching on at once. The memo is unrevised since its July 16 release, with no delay or rescission, and the public list of qualifying facilities is dated September 30. Appendix A sets eleven disqualifying criteria, not the four-item summary that circulates widely.

   MedBy CMSRead at source ↗

5. SNF / Post-Acute Surfaced late · published July 6

   Post-Acute Denial Rates Sit Far Above the Headline Numbers, and Come From a Different Source

   Summarizing two HHS-OIG reports on June 2024 data from Medicare Advantage insurers with at least 200,000 enrollees, KFF reports denial rates of 65 percent for long-term care hospital requests, 54 percent for inpatient rehabilitation and 12 percent for skilled nursing, against an overall rate previously measured below 8 percent. Skilled nursing denials were appealed in only 18 percent of cases and overturned 95 percent of the time when they were, with initial denial delaying care an average of five to six days.

   HighBy Jeannie Fuglesten Biniek, Meredith Freed and Juliette Cubanski · KFFRead at source ↗

6. Regulation & Policy Surfaced late · published August 13

   First Year of Federally Required Prior Authorization Metrics Cannot Be Read for Post-Acute Care

   Under CMS-0057-F, payers posted 2025 prior authorization metrics by March 31, 2026. KFF's analysis of 14 insurers covering roughly 71 million enrollees found Medicare Advantage denied 12 percent of standard requests, Medicaid managed care 14 percent and ACA Marketplace 18 percent, with overturn-on-appeal at 67, 47 and 43 percent. The metrics carry no service-category breakout, so no skilled nursing denial rate can be extracted from them, and the pending 2026 proposed rule does not add that requirement.

   HighBy Michelle Long, Jeannie Fuglesten Biniek, Justin Lo, Rayna Wallace, Jada Raphael, Allison Kim and Kaye Pestaina · KFFRead at source ↗

Get the Daily Dispatch by email · free, about 8 a.m. Eastern · RSS