The agency must have a post-payment review process that—
(a)
Allows State personnel to develop and review—
(1)
Recipient utilization profiles;
(2)
Provider service profiles; and
(3)
Exceptions criteria; and
(b)
Identifies exceptions so that the agency can correct misutilization practices of recipients and providers.