Utilization management (UM) is the set of clinical review processes health plans and other payers use to confirm that requested care is medically necessary and appropriate, before, during, or after it is delivered. Done well, UM is an evidence-based clinical quality function, not a cost-cutting gate. Its core review types are prior authorization, concurrent review, and retrospective review.
UM Touches Nearly Every Care Decision, Yet It’s Widely Misunderstood
Utilization management shapes nearly every significant care decision made in U.S. healthcare, yet it remains one of the least understood functions in the system, often reduced in shorthand to “the prior auth department.” That framing was already too narrow when the Institute of Medicine (IOM) first studied the field in 1989, and it’s even less accurate now.
Two forces make this the moment to understand UM more precisely. New CMS operational requirements take effect January 1, 2026, under the CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F). And physician sentiment has become impossible to ignore: in the 2025 AMA Prior Authorization Physician Survey, 95% of physicians say prior authorization processes delay access to necessary care.
UM began as a cost-containment tool. The programs that hold up under regulatory and clinical scrutiny today are the ones that have evolved into a clinical quality discipline instead.
What Is Utilization Management?
The field’s standard definition comes from the Institute of Medicine’s 1989 report: techniques used by, or on behalf of, purchasers of health benefits to manage costs by influencing care decisions through case-by-case assessment of appropriateness.
In practice, that plays out across three review windows: prospective review (prior authorization), concurrent review, and retrospective review, backed by peer review, appeals, and independent or external review as the system’s checks on any single determination. Prior authorization is one component of UM, working as a clinical quality tool applied before care is delivered, not a standalone product or a cost-cutting mechanism on its own.
Where Did Utilization Management Come From?
UM’s roots trace to the mid-1960s and 1970s, when Medicare and Medicaid created formal utilization review processes, and Congress established Professional Standards Review Organizations in 1972 to evaluate medical necessity with peer-review boards of care delivered through federal healthcare programs. Through the 1980s, employers and insurers adopted utilization review widely as health costs climbed, and UM grew into a private-sector industry.
The IOM’s 1989 report gave the field a definition, legitimacy, and its first serious quality critique. The managed care backlash of the 1990s followed, and accreditation bodies including URAC and the National Committee for Quality Assurance (NCQA), emerged to standardize review quality and independence. Evidence-based clinical criteria matured through the 2000s and 2010s as external review rights expanded under state law and the Affordable Care Act. The 2020s have brought a wave of regulatory modernization: electronic prior authorization, mandated turnaround times, transparency reporting, and state-level reform, culminating in CMS-0057-F.
What Makes a Utilization Management Program High-Quality?
Not all UM programs are built the same, and the gap between a strong program and a weak one shows up in five places.
Evidence-based criteria, applied consistently. Determinations should be grounded in current clinical literature, not blanket rules applied without regard to the individual case. URAC’s accreditation standards build consistency and evidence-based practice into the review process itself.
The right reviewer for the case. Quality review means same-specialty physician review, and, where required, review by a physician licensed in the same state as the patient, per URAC’s standards.
Speed as a quality metric, not just an operational one. Turnaround time is now a compliance requirement. The guidelines under CMS-0057-F set a 72-hour standard for expedited requests and 7 calendar days for standard requests.
Independence and conflict-of-interest safeguards. No incentive should be tied to determination outcomes. That independence is the premise behind the independent review organization model and behind URAC’s dual accreditation structure.
Transparency in the decision and the path to challenge it. Every determination needs a specific, transparent reason and a meaningful appeals path, with peer-to-peer dialogue available in place of one-way adjudication. CMS-0057-F formalizes several of these requirements for impacted payers.
What’s Changing in Utilization Management?
The operational provisions of CMS-0057-F took effect January 1, 2026: standardized decision timeframes, specific reasons required for adverse determinations, and public prior authorization metrics, with impacted payers’ first reports due March 31, 2026. Fast Healthcare Interoperability Resources (FHIR) API requirements and more are required by January 1, 2027.
States haven’t waited for federal action. A wave of states enacted prior authorization reform in 2024 and 2025, with more than a dozen in 2024 alone, and requirements now vary meaningfully by state on gold-carding, decision timelines, and transparency. Health plan leadership evaluating a UM partner should confirm the current state count against the AMA’s tracker before assuming uniform requirements across their footprint.
The industry has also made its own commitments. In June 2025, over 60 health insurers pledged to reforms including ensuring clinical denials get reviewed by a qualified clinician and expanding real-time responses. Physicians remain skeptical it will hold: the same 2025 AMA survey found only one in three physicians believe the pledge will make a meaningful difference, and just one in four believe medical-necessity denials are consistently reviewed by an appropriately qualified clinician today. Both data points are worth holding in mind at once: the commitments are real, and so is the skepticism about whether they’ll be honored in practice.
Technology’s role in UM is also shifting, though not in the direction some assume. The programs earning trust are using intake automation, criteria surfacing, and analytics to reduce unnecessary prior authorization volume, not to make determinations. Every one of those tech-enabled workflows still routes the actual decision to a physician reviewer.
For a health plan or TPA evaluating a UM partner in 2026, confirm these five criteria—regardless of state or line of business:
- Evidence-based criteria, applied consistently
- Specialty-matched physician review
- Accreditation through URAC or NCQA
- Measured and reported turnaround time
- Peer-to-peer dialogue available
- Analytics designed to reduce review volume, not increase throughput
How MRIoA Approaches Clinical Review
Medical Review Institute of America (MRIoA) has operated as a clinically driven utilization management partner since 1983. That 40-plus year track record is backed by URAC dual accreditation across Health Utilization Management and Independent Review Organization, plus NCQA accreditation, a network of 700-plus state-matched specialists across 150-plus specialties, and licensure in all 50 states.
Every case is matched to a same-specialty physician reviewer, with MRIoA’s technology streamlining intake and workflow so that reviewers can focus on the clinical judgment only they can provide. On MRIoA’s own reviews, that structure supports 98%+ turnaround-time performance, 99%+ quality performance, and more than 2.4 million reviews completed per year.
UM’s 40-year history is really the industry learning, sometimes the hard way, that cost and quality aren’t competing goals when reviews are clinically led. Health plans and at-risk providers evaluating a UM partner can talk with MRIoA’s clinical review team about benchmarking their UM program against the standard outlined above.
Talk with MRIoA’s clinical review team about your UM program. Click here to learn more.
Frequently Asked Questions
What is utilization management in healthcare?
Utilization management is the set of clinical review processes payers use to confirm that requested care is medically necessary and appropriate. It includes prospective review (prior authorization), concurrent review, and retrospective review, anchored to the IOM’s 1989 definition of the field.
What are the three types of utilization review?
Prospective review happens before care is delivered and includes prior authorization. Concurrent review happens during an ongoing course of care, such as an inpatient stay. Retrospective review happens after care has been delivered, evaluating appropriateness after the fact.
Is prior authorization the same as utilization management?
No. Prior authorization is one prospective component of UM, not the whole discipline. UM also includes concurrent and retrospective review, plus peer review, appeals, and independent or external review.
What does “medical necessity” mean in a clinical review?
A determination that a requested service is appropriate for the patient’s condition based on current clinical evidence, assessed case by case rather than through a blanket rule. Quality reviews apply this standard through same-specialty physician judgment, not automated criteria alone.
What makes a utilization management program high-quality?
Evidence-based criteria applied consistently, specialty-matched physician review, independence from outcome-based incentives, measured turnaround time, and transparency in both the determination and the appeals path.
What are the CMS prior authorization requirements for 2026?
Under CMS-0057-F, impacted payers must decide expedited requests within 72 hours and standard requests within 7 calendar days, provide specific reasons for adverse determinations, and publicly report prior authorization metrics, with first reports due March 31, 2026.
