Credentials

Why credentials matter on CCHP

Credentials are the licenses, certifications, registrations, and facility privileges that authorize health staff to practice. Domain III (Personnel and Training) is about 5%–10% of the CCHP exam, and credentials are a high-yield sub-topic because they sit at the intersection of patient safety, medical-legal risk, and Responsible Health Authority (RHA) accountability. Exam items often present a nurse with an expired license, a contract psychiatrist whose file has only a résumé, or a new dentist granted full privileges after a hallway conversation—and ask what the program should have done.

In correctional settings, patients cannot freely choose another clinician. That heightens the duty to ensure every person delivering care is legally authorized, currently in good standing, and privileged for the work assigned. Credentialing failures are not paperwork technicalities; they can invalidate care, create liability, and fail NCCHC Standards for Health Services in Jails and Prisons (2026 edition is the exam reference).

---

What must be current and unrestricted

Licenses and certifications

For every licensed or certified role (physician, dentist, advanced practice clinician, registered nurse, LPN/LVN, pharmacist, psychologist, and other regulated professionals as defined by state law), the program must verify:

Unrestricted means the license is not suspended, revoked, limited to supervised practice only, or subject to conditions that conflict with independent correctional duties. A provider with a restricted license may still work if the restriction is known, privileges are adjusted to match, and supervision or scope limits are enforced—but unrestricted status is the baseline expectation for independent clinical roles unless policy and law allow a controlled exception.

Non-licensed staff (medical assistants, clerks, some technicians) do not hold clinical licenses, but they may need job-related certifications (e.g., phlebotomy, BLS) that the facility requires and tracks.

Timing: before care, not after

Credential verification must be complete before the person delivers independent clinical services. Onboarding checklists that "catch up later" after the clinician starts sick call create risk. Orientation may include shadowing under supervision when policy allows, but independent practice waits for a complete file.

---

Primary source verification

Primary source verification means confirming credentials with the issuing authority (state board, national certifying body) or a recognized primary-source agent—not relying solely on candidate-supplied copies.

Acceptable approaches

• Direct query of the state licensing board website or written verification letter
• Designated credentials verification organizations (CVOs) or primary-source databases when policy accepts them
• Written confirmation from the certification body for board or specialty credentials

Not sufficient alone

• Photocopy of a wall certificate or wallet card without primary confirmation
• Self-attestation without verification
• A previous employer's word without re-verification at hire (or reappointment)

CCHP logic: a forged or outdated copy can look perfect. Primary sources catch expiration, discipline, and restrictions.

Re-verification and tracking

Credentials expire. Programs maintain a tickler system (spreadsheet, HRIS, credentials software) with:

• Expiration dates for licenses, DEA, BLS/ACLS, specialty certificates
• Advance alerts (e.g., 90/60/30 days)
• Documented re-verification at reappointment or annually as policy requires
• Immediate flagging if a board posts disciplinary action

---

Privileging for providers

Licensure says the person may practice the profession. Privileging says what this facility authorizes this provider to do here.

Core privileging concepts

1. Application and delineation — Providers request specific privileges (e.g., general medicine, minor procedures, mental health prescribing, telehealth).
2. Review of qualifications — Training, experience, peer references, malpractice history, and current competence support the request.
3. Granting authority — Medical director or credentials/privileging committee (per policy) grants, modifies, or denies privileges.
4. Scope match — Privileges should not exceed available equipment, support staff, or the facility's service model (e.g., no granting complex surgical privileges with no OR).
5. Reappointment — Privileges are time-limited; renewal reviews performance, peer review findings, and updated credentials.

Exam traps often confuse credentialing (verify license/education) with privileging (authorize clinical activities). Both are required for independent providers.

---

Contractor and locum credential files

Correctional health frequently uses contract vendors, telehealth groups, and locum tenens coverage. NCCHC-aligned practice expects comparable credential documentation for contracted clinicians who provide care to the facility's patients—not a lower bar because payroll runs through a vendor.

Contractor file essentials

• Primary source–verified license and certifications
• Privileges or defined scope for this facility
• Malpractice coverage as required by contract/policy
• Orientation to site policies (see orientation standards in Domain III)
• Emergency contact and after-hours coverage expectations
• DEA/prescribing authority when applicable

The RHA retains responsibility for ensuring that whoever delivers care under the health program is appropriately credentialed, even when a vendor performs initial screening. Contracts should require timely notification of license changes and allow the facility to remove a clinician immediately if credentials fail.

---

Temporary privileges: controls, not shortcuts

Temporary privileges may be used when a fully completed file is in process but urgent coverage is needed (e.g., sudden provider vacancy). They are exceptions with controls, not a permanent alternative to full credentialing.

Sound temporary-privilege controls

If temporary privileges become routine because full files never finish, the program has a system failure, not a staffing solution.

---

Suspension, restriction, and removal from practice

When a board suspends, restricts, or revokes a license—or when internal findings raise competence or impairment concerns—the facility must act immediately:

1. Stop or limit clinical practice consistent with the restriction (full suspension → no clinical care).
2. Notify medical leadership, RHA, and custody/administration as policy requires for coverage planning.
3. Document the board action, internal decision, effective date, and patient-coverage plan.
4. Adjust privileges formally (suspend, restrict, or revoke privileges).
5. Protect patients already under that clinician's care through reassignment and chart continuity.

Do not wait for the next credentials committee meeting if a license is suspended today. HR discipline and peer review processes may run in parallel, but practice authority turns on current legal authorization.

---

Documentation and retention

Credential files should be complete, organized, confidential, and retained according to facility policy and applicable law (often multi-year retention after separation). Typical contents include:

• Application and CV
• Primary source verification records and dates
• License/certification copies and expiration tracking
• Privilege delineation and approval signatures
• Peer references / NPDB or equivalent queries where used
• Malpractice history and coverage certificates
• Temporary privilege grants and expirations
• Actions taken on restrictions or suspensions
• Reappointment packets

Files support surveys, investigations, and litigation. Gaps such as "license on file but never re-checked after 2019" are classic survey findings.

---

Exam scenarios to rehearse

• Expired RN license discovered mid-shift → Remove from independent nursing duties immediately; reassign patients; document; investigate how the tickler failed.
• Contract psychiatrist starts with only a CV → Do not grant independent privileges; complete primary source verification and privileging first.
• Surgeon requests privileges the site cannot support → Deny or limit privileges to available services; refer complex procedures off-site.
• Temporary privileges granted "until we get around to the file" six months later → Noncompliant; temporary grants need hard end dates and full completion.

Credentials protect patients first. On CCHP, choose answers that verify early, verify from primary sources, privilege deliberately, control temporary access, and stop practice the moment legal authority fails.