Every risk manager wants to believe that the credentialing process has properly vetted all the organization's health care professionals to ensure that they are qualified and have no known criminal record. But that is not always the case. Too often, risk managers get a phone call alerting them that one of their staff or physicians has a problem that did not show up in the credentialing process.