The Affordable Care Act mandated that the Centers for Medicare and Medicaid Services (“CMS”) establish risk categories for Medicare enrollment, which are used by CMS to determine what level of scrutiny to give provider enrollment applications, which includes initial enrollment, change of ownership (“CHOW”) applications, and revalidations.  Three risk categories were subsequently created under 42