Two functions that sound alike and do fundamentally different jobs. Understanding the difference explains why the non-hospital workforce needs a national certification standard.
The process of collecting and verifying credentials — licenses, privileges, and supporting documents.
The assessment process that confirms competence.
Confirming that a credential is valid and current.
Credentialing is only as strong as the credentials it collects. For healthcare professionals, those credentials are substantial: a state license and facility-granted privileges, verified through accredited channels. For the non-hospital workforce, there is no license to verify and no privileges to check — which means vendor credentialing, however diligently performed, is collecting documents that were never designed to answer the competence question.
One caution up front: the acronyms are nearly identical — CVO and VCO — but the systems behind them are worlds apart.
When a physician, nurse, or allied health professional practices in a facility, every link in the chain is anchored to a recognized authority:
Licensure — a state board grants legal permission to practice.
Credentialing — a Credentials Verification Organization (CVO) verifies licenses, education, and history through primary sources, operating under recognized third-party oversight (such as NCQA certification or URAC accreditation). Staffing firms can hold Health Care Staffing Services (HCSS) certification for how they verify their personnel.
Privileging — the facility's governing body grants specific clinical privileges: a defined list of what this professional may do in this facility, based on verified qualifications.
A national source of truth — verification works because authoritative national sources exist to verify against: state licensing boards, the National Practitioner Data Bank, federal exclusion lists, and board-certification registries.
When a supplier representative, technical service professional, or contracted specialist enters a facility, the chain looks very different:
No license — no state or national license is required to perform job tasks as a non-hospital professional in healthcare facilities.
Credentialing without accreditation — a Vendor Credentialing Organization (VCO) collects documents — immunizations, training attestations, policy acknowledgments — but no accreditation framework governs vendor credentialing itself, and each institution sets its own requirements. The result is a fragmented system.
No privileges — no facility process defines what this professional is qualified to do. Access is granted to a person, not to a function.
A fragmented source of truth — there is no national source to verify against. Each credentialing platform holds its own proprietary records, and each facility sets its own requirements — so the “truth” about the same professional is scattered across systems that don't agree with each other.
| Element | Healthcare professionals | Non-hospital workforce today |
|---|---|---|
| Legal permission to practice | State licensure | No license requirement |
| Credential verification | CVOs under recognized oversight (NCQA, URAC); HCSS certification for staffing services | VCO document collection — no accreditation framework governs vendor credentialing |
| Defined scope of what the person may do | Facility-granted privileges | None — access is granted to a person, not a function |
| Competence confirmed by assessment | Board certification, competency evaluation | Not assessed by any accredited third party |
| Source of truth | National — licensing boards, NPDB, exclusion lists, certification registries | Fragmented — proprietary platform records, different at every institution |
| Portable across facilities | License and board certification travel with the professional | Re-credentialed at every facility; nothing accumulates |
None of this reflects a failure of Vendor Credentialing Organizations. They are performing credentialing exactly as defined — collecting and verifying documents. The problem is structural: there is no license to verify, no privileges to confirm, and no national standard to anchor to. The credentials the system was built to collect simply do not exist for this workforce.
Even where requirements do exist for this workforce, they answer different questions — and neither answers the whole one.
FDA's requirements run to the product. Manufacturers must ensure that the people who represent and support a device know it — its indications, its proper setup, its correct use consistent with labeling. Product knowledge is regulated, trained, and expected.
CMS's requirements run to the care environment. Facilities are accountable for ensuring that work performed inside their walls — including contracted services — is performed safely and competently: sterile technique, infection prevention, patient rights, and the realities of clinical space.
Product knowledge is necessary — but it is not job competency. Knowing a device is not the same as being competent to perform a job task with that device in an operating room, at the point of care, in a healthcare environment. One requirement stops at the product; the other begins at the facility door. Between them sits the actual job — and every verification along that chain exists for one reason: patient safety.
Has the job task ever been defined for the non-hospital workforce? No — and that is precisely where the work begins.
Until the job tasks are defined, there is nothing to certify competency against — no matter how much product knowledge exists. Defining them, through evidence and consensus, is the purpose of the National Job Task Analysis.
The clinical model works because two anchors exist: licensure establishes baseline competence, and privileges define what each professional may do. The non-hospital workforce has neither — and that is precisely what certification to a national standard provides.
Privileges define what a healthcare professional may do. Job-task certification defines what a non-hospital professional may do.
Certification to a national standard fills the licensure role: an accredited third party, operating under ISO/IEC 17024, assesses and confirms the individual's competence to perform job tasks in a healthcare environment — portable to every facility in the country.
Job-task definition fills the privileging role: the certification's scope states what this professional is qualified to do — so facilities can align access to function, the way privileges align practice to qualification. The National Job Task Analysis is what defines those job tasks through evidence and consensus.
With those anchors in place, vendor credentialing finally has something worth verifying. The same credentialing programs that exist today can confirm a certification is valid and current — true verification, in the same sense the clinical world uses the word — instead of collecting documents that answer a different question.
A national standarddefines the requirements — developed through HWASC's accredited, open consensus process (BSR/HW1-202X).
Accredited certificationconfirms competence to that standard under ISO/IEC 17024 (individuals) and ISO/IEC 17065 (organizations).
Credentialing programs verifythat certifications are valid and current against an accredited registry — a single national source of truth this workforce has never had.
The Job Task Analysis defines the role. The standard defines the requirements. Both need the expertise of the people who live this system every day — including the credentialing community.