URAC PBM Accreditation: Frequently Asked Questions
Last updated: April 2026
Comprehensive answers to the 15 most common questions about URAC Pharmacy Benefit Management Accreditation, from a specialized healthcare accreditation consulting firm with over 25 years of URAC and NCQA expertise. These answers draw on our experience as lead PBM accreditation consultant since the original beta applications in 2007.
What Is URAC Pharmacy Benefit Management Accreditation?
URAC Pharmacy Benefit Management Accreditation is the only nationally recognized accreditation program for PBMs in the United States. Administered by the Utilization Review Accreditation Commission, it validates that a Pharmacy Benefit Manager meets rigorous operational, clinical, and governance standards across 10 quality modules. The current standard is PBM Accreditation v4.0, effective October 2, 2025, which superseded v3.1 within 48 hours of its release.
The accreditation evaluates every dimension of PBM operations: pharmacy core infrastructure (PHARM Core), customer service and member communications (CSCD), pharmacy distribution channels (PHARM-DC), drug utilization management (DrUM), formulary development governance (PTFD), and annual performance measurement reporting (RPT). Accreditation lasts three years with ongoing annual reporting requirements and random virtual reviews throughout the cycle.
URAC accreditation signals to state procurement agencies, health plan partners, and federal regulators that a PBM operates to measurable quality standards. With all 50 states having enacted PBM regulation and the FTC conducting active oversight, this external validation carries increasing weight in contract negotiations and regulatory interactions.
Is URAC the Only PBM Accreditor in the United States?
Yes, URAC is the exclusive accreditor for Pharmacy Benefit Management programs in the United States. There is no NCQA equivalent for PBM accreditation. While NCQA accredits health plans, certifies Credentials Verification Organizations (CVOs), and accredits credentialing programs, it does not offer a PBM-specific accreditation program.
This monopoly position has significant implications. Organizations seeking external PBM quality validation have exactly one pathway. URAC sets the standards, trains the surveyors, and makes the accreditation determinations without competitive pressure from an alternative accreditor. This makes experienced consulting guidance particularly valuable because there is no alternative accreditation body to pursue if your URAC application encounters problems.
The absence of competitive accreditation also means URAC's standards carry outsized influence in state procurement requirements. When South Carolina or Tennessee mandates PBM accreditation in an RFP, they specifically mean URAC accreditation because no other option exists.
Who Needs URAC PBM Accreditation?
Four categories of organizations need or benefit from URAC PBM accreditation, depending on their market position, regulatory environment, and competitive strategy.
Standalone Pharmacy Benefit Managers that perform claims adjudication, pharmacy network management, and rebate negotiation as independent entities. These organizations use accreditation to differentiate in a market where 66 distinct PBMs compete and the top three control approximately 80% of prescription claims volume.
Health-Insurer Owned PBMs that operate as vertically integrated divisions within managed care organizations. CVS Caremark/Aetna, Optum Rx/UnitedHealth, and Express Scripts/Cigna all maintain PBM accreditation alongside their parent organizations' health plan accreditation.
Retail Pharmacy Aggregators with internal PBM capabilities for employee lives or direct-to-employer contracting. These organizations are growing their PBM functions and use accreditation to signal operational maturity.
Specialized Government MCOs providing Medicaid and Medicare Part D managed care. These organizations face the highest regulatory scrutiny and use accreditation to satisfy state procurement requirements. South Carolina and Tennessee RFPs mandate URAC PBM accreditation as a bid prerequisite, and New Jersey RFPs strongly encourage it.
What Are the URAC PBM Accreditation Quality Modules?
URAC PBM Accreditation v4.0 evaluates organizations across 10 quality modules. No competitor publishes a plain-language explanation of what compliance looks like for each module. Here is what each requires.
PHARM Core is the foundational module covering regulatory compliance policies, inter-departmental coordination, delegation oversight contracts, IT security logs, business continuity plans, and HR competency assessments. It touches every operational area and generates the most deficiencies in surveys.
CSCD governs customer service, communications, and disclosure. You must maintain welcome packet distribution logs, call center performance metrics, complaint and grievance process documentation, and out-of-pocket cost disclosures. Everything member-facing must be documented and measurable.
PHARM-DC covers pharmacy distribution channels including network pharmacy credentialing protocols, geographic access analyses, participating pharmacy dispute resolution workflows, and temperature management logs for mail-order and specialty drug distribution.
DrUM addresses drug utilization management: coverage decision algorithms, prior authorization rationales, step-therapy protocols, and both standard and expedited appeals timeline policies. Clinical decisions must have documented evidence-based foundations.
PTFD governs P&T committee operations and formulary development: meeting minutes, clinical versus economic consideration methodologies, conflict of interest policies, and new molecular entity evaluation workflows.
RPT covers performance measurement reporting: data systems that track and submit mandatory annual metrics including generic dispensing rates, call abandonment rates, and dispensing accuracy. URAC-accredited PBMs report these annually. Medicare lines of business achieved an aggregate 86.18% overall performance rate in 2025 reporting, the highest among all lines.
How Long Does URAC PBM Accreditation Take?
URAC PBM accreditation realistically takes 9 to 12 months from consulting engagement kickoff to final accreditation committee decision. URAC markets a six-month timeline, but that clock starts at formal application submission and assumes your documentation is already substantially complete. It rarely is.
The full lifecycle spans seven phases: Standard-by-Standard Review (month 1), policy development and remediation (months 2-4), mock desktop review (month 5), application submission to AccreditNet (month 6), URAC desktop review with RFI response (months 7-8), mock validation review (month 9), and official validation survey with committee review (months 10-11). The committee typically renders its determination within 10 business days of receiving the anonymous redacted report.
Organizations with strong existing documentation and experienced internal accreditation coordinators can sometimes compress the front-end preparation. Organizations starting from scratch or undergoing significant operational changes should plan for the full 12-month timeline.
How Much Does URAC PBM Accreditation Cost?
URAC does not publish its PBM accreditation fees publicly. Fees are quote-based and scale by PBM tier and organizational complexity. Contact URAC directly for current fees. Fees scale by organization size, covered lives, and operational volume. URAC does not issue refunds if accreditation is denied.
IHS consulting fees are separate from URAC fees. IHS engagement fees are scoped to each client's specific situation — organizational size, accreditation history, documentation maturity, and timeline. Every engagement begins with a complimentary discovery call that produces a fixed-fee proposal tailored to your organization. The total investment depends on your organization's starting compliance posture and the scope of remediation needed.
For a detailed breakdown of all cost components, see our PBM Accreditation Cost Guide.
What Are the Most Common URAC PBM Survey Deficiencies?
The most frequently cited deficiencies fall into predictable categories that IHS has identified and remediated across every standards version since v1.0. The top 10 include primary source verification failures for clinical staff credentials (PHARM Core), incomplete clinical assessment documentation for drug utilization review decisions (DrUM), temperature management and distribution control gaps (PHARM-DC), HR competency assessment documentation shortfalls (PHARM Core), welcome packet distribution audit trail failures (CSCD), omission of regulatory agency contact information in grievance packets (CSCD), procedure manual version control mismatches (PHARM Core), lack of statistically measurable QI acceptance criteria (PHARM Core Quality), insufficient leadership oversight documentation (PHARM Core), and failure to update activity menus after operational changes (PHARM Core).
The pattern is clear: PHARM Core generates the most deficiencies because it touches every operational area. Organizations that invest in robust PHARM Core documentation during the remediation phase significantly reduce their overall deficiency exposure.
How Does URAC PBM Accreditation Relate to CAA 2026 Transparency Requirements?
The Consolidated Appropriations Act of 2026, enacted in February 2026, fundamentally changes PBM transparency obligations at the federal level. It mandates drug-by-drug pricing disclosure for PBMs serving commercial group health plans beginning January 1, 2029, and requires Medicare Part D PBM compensation to transition to flat bona fide service fees by 2028, eliminating rebate-driven models.
The Department of Labor has published proposed rules increasing visibility into PBM compensation for plan fiduciaries of self-insured group health plans subject to ERISA. No source currently connects CAA 2026 compliance obligations to URAC PBM accreditation standards. IHS bridges this gap.
URAC PBM accreditation provides the operational infrastructure and documentation framework that supports CAA compliance: financial reporting systems, transparency documentation, clinical governance records, and performance measurement capabilities. Organizations preparing for CAA 2026 can align that effort with URAC accreditation readiness, building one compliance infrastructure that serves both requirements rather than duplicate parallel efforts.
What Documentation Is Required for URAC PBM Accreditation?
URAC PBM accreditation requires comprehensive documentation across all 10 quality modules, uploaded to AccreditNet, URAC's proprietary web-based platform. Key documentation categories include:
PHARM Core: Regulatory compliance policies, inter-departmental coordination procedures, delegation oversight contracts, IT security logs, business continuity plans, and HR competency assessments.
CSCD: Welcome packet distribution logs, call center performance metrics, complaint and grievance process documentation, and out-of-pocket cost disclosures.
PHARM-DC: Network pharmacy credentialing protocols, geographic access analyses, participating pharmacy dispute resolution workflows, and temperature management logs.
DrUM: Coverage decision algorithms based on clinical information, prior authorization rationales, step-therapy protocols, and appeals timeline policies.
PTFD: P&T committee meeting minutes, clinical versus economic consideration methodologies, conflict of interest policies, and new molecular entity evaluation workflows.
RPT: Data systems and reports for tracking generic dispensing rates, call abandonment rates, dispensing accuracy, and other mandatory annual performance metrics.
How Does URAC PBM Accreditation Differ from URAC Health Plan Accreditation?
URAC PBM accreditation and URAC Health Plan Accreditation are complementary but separate programs with distinct standards, review processes, and accreditation cycles. PBM accreditation focuses specifically on pharmacy benefit management functions: drug utilization management, formulary governance, pharmacy distribution channels, and pharmacy-specific performance measurement under v4.0 standards.
Health Plan Accreditation covers broader managed care operations under v8.0 standards: network management, utilization management across all service types, quality improvement, credentialing, and member protections including mental health parity and AI/ML governance provisions.
Vertically integrated organizations with both health plan and PBM operations commonly hold both accreditations. The programs share some operational infrastructure but each requires its own dedicated documentation, survey preparation, and accreditation cycle management. For a full comparison, see our PBM vs Health Plan Accreditation comparison.
What Happens During a URAC PBM Validation Review?
The URAC PBM validation review is a formal 1 to 3-day audit conducted virtually, on-site, or as a hybrid. It is fundamentally different from the desktop review. Where the desktop review evaluates documentation, the validation review tests whether your organization lives its policies in daily operations.
URAC surveyors interview leadership and operational staff across all applicable quality modules. They test whether staff can articulate clinical decision-making rationales, demonstrate working knowledge of grievance and appeals procedures, explain quality improvement methodologies, and describe how temperature management protocols function in practice. Surveyors look for consistency between documented policy and operational reality.
An anonymous redacted report is then submitted to the URAC Accreditation Committee. The committee issues one of four outcomes: Full Accreditation, Conditional Accreditation, Provisional Accreditation, or Denial. IHS prepares organizations for validation reviews through comprehensive mock reviews that simulate actual surveyor questioning patterns.
Can a Health Plan with an In-House PBM Get URAC PBM Accreditation?
Yes. Health plans with in-house PBM functions can and regularly do pursue URAC PBM accreditation separately from their health plan accreditation. The PBM accreditation evaluates pharmacy benefit management operations specifically, regardless of whether those functions are performed by a standalone entity or an internal division.
Vertically integrated organizations such as CVS Caremark/Aetna, Optum Rx/UnitedHealth, and Express Scripts/Cigna commonly maintain both accreditations. The key consideration is that the PBM functions must be identifiable, documented, and auditable as a distinct operational program, even when they share infrastructure with the broader health plan. IHS has guided both standalone and integrated PBMs through the accreditation process.
What Is a URAC PBM Standard-by-Standard Review?
A URAC PBM Standard-by-Standard Review is a comprehensive pre-accreditation assessment of your organization's current operational compliance against every applicable URAC PBM standard. It is the essential first step of any accreditation engagement.
IHS conducts exhaustive operational audits, meeting with your internal teams across all relevant departments to review actual policies, procedures, workflows, and documentation against each of the 10 quality modules. The output is a detailed deficiency report that serves as your project roadmap for the entire engagement. Every gap is categorized by severity, module, and estimated remediation effort.
Gap analyses typically take one month and cost $1,000 to $5,000 depending on organizational complexity. Organizations that skip or abbreviate the Standard-by-Standard Review phase consistently encounter more RFIs and longer remediation cycles during the formal URAC review process.
How Do I Respond to a URAC PBM RFI?
When URAC clinical reviewers score a standard as "Not Met" during the desktop review phase (months 7-8), they issue a Request for Information (RFI) identifying the specific deficiency and requesting corrective documentation. Effective RFI response requires understanding what the reviewer is actually asking for, which is often more nuanced than the written standard suggests.
IHS manages RFI response by analyzing the reviewer's specific concerns, identifying the underlying compliance gap, revising policies or documentation to address the deficiency substantively, and resubmitting through AccreditNet with clear explanations. A poorly handled RFI can delay accreditation by months because it signals to the reviewer that the organization does not fully understand the standard.
Having responded to RFIs across every version of the PBM standards since 2007, IHS recognizes common reviewer patterns and can translate feedback into compliant documentation efficiently. RFI response management is one of the highest-value consulting interventions in the accreditation lifecycle.
What Are the P&T Committee Documentation Requirements Under URAC PBM Standards?
URAC PBM standards require extensive Pharmacy and Therapeutics committee documentation under the PTFD (P&T Standards / Formulary Development) module. This is one of the most complex documentation areas and a frequent source of survey deficiencies.
Required documentation includes regular P&T committee meeting minutes demonstrating active governance, clinical versus economic consideration methodologies showing how formulary decisions balance patient outcomes with cost management, conflict of interest policies for all committee members with signed attestations, and new molecular entity evaluation workflows documenting how new drugs are assessed for formulary inclusion or exclusion.
The committee must demonstrate independence in clinical decision-making and maintain documented evidence that formulary decisions are evidence-based rather than solely financially driven. With the CAA 2026 mandate shifting PBM compensation toward bona fide service fees and away from rebate-driven models, P&T committee governance documentation will face increasing scrutiny from both URAC surveyors and federal regulators.
Related Resources
Ready to Get Started?
Schedule a no-obligation Standard-by-Standard Review with IHS. We will assess your current compliance posture against URAC PBM Accreditation v4.0 standards and give you a clear roadmap to accreditation.