Cardiology AUC Compliance Automation:
QCDSM, DSN Capture, G-Code Workflow & the CMS WISeR Model in 2026

Why AUC Is Quietly Back in Scope for Cardiology in 2026

The PAMA Appropriate Use Criteria program applies CMS-approved AUC to advanced diagnostic imaging — cardiac PET, SPECT myocardial perfusion, coronary CT, cardiac MRI — for Medicare beneficiaries. CMS paused the payment-related elements in late 2023, and most cardiology practices reasonably read the pause as permission to dial back the workflow. Three forces are pulling it back: commercial and MA prior auth haven't moved (eviCore, Carelon/AIM, Cohere, NIA still require QCDSM evidence on advanced cardiac imaging — the G-codes may not flow on Medicare claims, but the QCDSM record is still attached to MA prior-auth submissions); the CMS WISeR Innovation Center model is rolling AI-assisted prior authorization into selected MAC jurisdictions on a defined service list, converting some post-service-paid services into pre-service-authorization-required services in pilot regions; and recovery audits and TPE pre-pay reviews continue to accelerate on advanced imaging, where a structured AUC consultation tied to the order is the cleanest pre-pay defense.

The Four Compliance Artifacts a 2026 Cardiology Workflow Needs

An AUC compliance workflow in 2026 isn't about reporting on a Medicare claim — it's about producing four artifacts every time an advanced cardiac imaging study is ordered, so whichever payer asks (Medicare, MA, commercial, RBM, or a future WISeR pre-auth queue), the answer is already on file:

• 1. The QCDSM consultation record. A Qualified Clinical Decision Support Mechanism is the electronic tool that consults Appropriate Use Criteria at the point of order. The practical cardiology short list: CareSelect Imaging (Change Healthcare), AIM Inform (now Carelon), eviCore Decision Support, ACR Select, and EHR-embedded modules in Epic, Athena, Cerner, and ModMed.
• 2. The Decision Support Number (DSN). A unique identifier returned by the QCDSM. The artifact a downstream payer asks for. Most practices know how to generate one; few capture it consistently into a structured field on the order so it can be retrieved in three clicks two months later.
• 3. The G-code identifying which QCDSM was consulted. The HCPCS G1000–G1011 series — G1000 is ACR Select, G1001 is CareSelect, G1002 is AIM Inform/Carelon, G1003 is eviCore, G1004 is MedCurrent OrderWise, and so on. Sits on the same claim line as the imaging CPT.
• 4. The adherence modifier. ME (consulted, adheres), MF (consulted, does not adhere), MG (consulted, no AUC applicable). MH was historically used for hardship-exception non-consultation. Practices that handle the QCDSM and DSN well still routinely drop this modifier — because nobody owns the handoff from the QCDSM output back into the claim.

The CPT Surface Area: Which Cardiology Studies Trigger AUC

AUC scope in cardiology concentrates in five CPT families: SPECT myocardial perfusion (78451 single study, 78452 multiple, 78453 planar single, 78454 planar multiple); cardiac PET (78429–78433, lower volume but high reimbursement and high RBM scrutiny); coronary CT and CTA (75571 calcium scoring, 75572–75574 CCTA with contrast and FFR-CT — the fastest-growing AUC category as CCTA moves into chest-pain pathway protocols); cardiac MRI (75557–75565 with/without stress, contrast, and flow quantification — often performed at imaging-center partners, complicating the AUC handoff); and selected nuclear cardiac viability and infarct imaging beyond the perfusion set. Diagnostic catheterization, transthoracic echo, transesophageal echo, and standard treadmill stress are not in scope under the original PAMA list — though commercial payers and RBMs increasingly require their own clinical-pathway documentation on echo and stress orders, which is a parallel workflow.

The CMS WISeR Model: What Changes in Pilot Regions

The Wasteful and Inappropriate Service Reduction (WISeR) Model is a CMS Innovation Center pilot testing AI-assisted prior authorization on a defined list of services in selected MAC jurisdictions. Operationally, it has four properties cardiology practices need to internalize: a defined service list and defined pilot regions (both published by CMS and updated as the pilot expands); pre-service authorization (services on the list move from post-service review to pre-service authorization, and a claim submitted without authorization is denied at adjudication); AI-assisted review by a contracted entity with required human clinician review on adverse decisions; and the AUC consultation as the strongest piece of evidence — where a WISeR-list service overlaps an AUC-applicable advanced imaging study, the QCDSM consultation with DSN, G-code, and adherence modifier is the cleanest pre-auth submission a cardiology practice can make.

What Native EHR AUC Modules Don't Do

Epic integrates with several QCDSMs through its Decision Support framework and can fire a CDS hook at order entry. Athena embeds AUC checks in the imaging order workflow. ModMed Cardiology includes AUC prompts. eClinicalWorks supports CareSelect and ACR Select integrations. The native modules do real work — but four predictable gaps show up the moment a practice scales above one or two locations: inconsistent DSN capture (the QCDSM returns a DSN, but the EHR doesn't always write it into a structured searchable field on the order — six months later it's buried in a free-text note or lost); no automatic G-code/modifier population (the clinical side runs the consultation, the billing side generates the claim, and the G1000–G1011 code plus ME/MF/MG modifier rarely flow automatically — billers add them manually, or skip them, or guess); QCDSM-payer mismatch (a panel that includes Medicare, MA, BCBS, UnitedHealthcare, and Aetna may need different QCDSMs for different RBM contracts, but the EHR usually defaults to one mechanism — wrong mechanism, evidence not accepted); and no exception monitoring (the prompt fires; if the cardiologist clicks past it, nobody finds out until a denial lands — no nightly variance report, no scheduler alert).

Device Vendor Integration: Where Cardiology Is Different from Radiology

AUC was designed primarily around radiology workflows. Cardiology adds a complication that the original program didn't anticipate: implantable cardiac devices and remote monitoring portals that frequently drive imaging orders. Medtronic CareLink (pacemaker, ICD, CRT-D), Abbott Merlin/Merlin.net, Boston Scientific Latitude, plus Biotronik Home Monitoring and Microport for mixed-vendor inventories — remote alerts from any of these regularly trigger an echo, cardiac MRI, or perfusion study order. None of these vendor portals natively feed the QCDSM. The cardiologist sees the alert, opens the EHR, places the imaging order, and is supposed to consult the QCDSM at that moment. In a busy day with 30–60 device alerts queued, that's where the AUC consultation gets skipped — and the AUC trail downstream of the order is incomplete.

The Concrete Workflow Automation: What a Cardiology Practice Actually Builds

The fix isn't replacing the EHR or ripping out the device-vendor portals. It's a thin orchestration layer that sits alongside both and produces the four required artifacts on every applicable order. Six components, each closing a specific failure point:

• Order-event listener. Subscribes to EHR order-creation events (Epic CDS hook, Athena webhook, ModMed equivalent), fires when an in-scope CPT is selected, never blocks the order.
• Payer-aware QCDSM router. Launches the right QCDSM based on the patient's primary payer and RBM contract — CareSelect for one, AIM Inform for another, eviCore for a third. Cardiologist sees a single embedded prompt.
• DSN capture and structured write-back. Captures the DSN, writes it into a structured AUC field on the order, and attaches the consultation record (HL7/FHIR) so it travels with the study to PACS, imaging-center partners, and the billing system.
• G-code and modifier insertion at claim generation. Reads the AUC-DSN field, writes the corresponding G1000–G1011 code and ME/MF/MG modifier on the claim line. Biller doesn't have to remember; the claim is correct on first pass.
• Exception monitoring and pre-study alerting. A nightly job lists every advanced imaging order in the next 7 days without a captured DSN. The imaging coordinator gets time to circle back before the study date. For WISeR pilot regions, the same job flags WISeR-list orders needing pre-service authorization.
• Device-vendor alert bridge. Subscribes to Medtronic CareLink, Abbott Merlin, and Boston Scientific Latitude alert feeds. When an alert prompts an imaging order, pre-populates the AUC clinical context (indication, suspected pathology, relevant priors) into the QCDSM consultation.

Implementation Cadence: 6–10 Weeks for a Single Practice

A targeted AUC build for a mid-sized cardiology practice typically runs 6–10 weeks: weeks 1–2 for discovery and payer-QCDSM mapping (including WISeR pilot-region check); weeks 3–6 to build the order-event listener, DSN capture, G-code/modifier auto-insertion, and exception report, then run two weeks in shadow mode against live orders; weeks 7–10 to add the device-vendor alert bridge, the WISeR pre-auth queue if applicable, and cut over from shadow to live. HIPAA, BAA controls, and audit logging baked in from kickoff. EHR stays system of record. The cardiologist's daily workflow doesn't visibly change — but the four AUC artifacts are now produced reliably on every applicable order.

What to Do This Quarter

Audit the last 90 days of advanced cardiac imaging orders (78451, 78452, 75572, 75574, 75561) and confirm a QCDSM consultation, captured DSN, matched G-code, and modifier appear on each corresponding claim. Confirm whether your MAC region is in the WISeR pilot and inventory the overlap with your ordering volume. Map your payer panel against QCDSM contracts; if you're using one mechanism for everything, document which RBMs require a different one. Then decide whether to fix the gap inside the EHR module or with a thin orchestration layer that makes the four artifacts deterministic.