How does the HRSA CRO process work?

How does the HRSA CRO process work?

The Compliance Resolution Opportunity (CRO) is a process established by the Health Resources and Services Administration (HRSA) to support the timely resolution of noncompliance identified during an Operational Site Visit (OSV). Through the CRO process, health centers have the opportunity to address and resolve findings of non-compliance before the issuance of the final site visit report. Following the conclusion of the OSV, HRSA reviews and processes the “draft” site visit report and then issues an Urgent Site Visit Report Request task through the Electronic Handbooks (EHBs) system. This task notifies the health center of any identified areas of non-compliance and provides an opportunity to submit additional information, supporting documentation, and clarifying materials that demonstrate compliance. Most often, members of the OSV site team will have shared the necessary steps and/or documentation to follow to resolve the areas of concern. The CRO process officially begins once the site visit has ended and the “Urgent Site Visit Report Request” task has been issued through EHBs.

 

Once the request is issued, the health center has 14 calendar days to respond through the EHBs system. All documentation referenced in the response must be attached at the time of submission, as no extensions or exceptions to the deadline are permitted. HRSA reviews the submitted materials to determine whether the health center has adequately demonstrated compliance. If compliance is not sufficiently demonstrated upon completion of the CRO process, the identified findings will be documented in the final site visit report, and HRSA may issue corresponding conditions through a Notice of Award or a Notice of Look-alike Designation. 

Have a question?

Facebook
Twitter
LinkedIn

Compliance in Action

June 23rd, 2026

10:00 AM PT // 1:00 PM ET

Evidence-Based Strategies for Demonstrating Program Effectiveness

Regulators are no longer satisfied with documentation alone; they want evidence that your compliance program actively prevents, detects, and corrects risk. Investigators expect to see how issues are identified early, investigated thoroughly, corrected effectively, and monitored over time. Boards demand measurable insight, and leadership needs confidence that exposure is managed before it becomes a liability. The standard has shifted from activity to impact.