The agency must have a post-payment review process that -
(a) Allows State personnel to develop and review -
(1) Beneficiary utilization profiles;
(2) Provider service profiles; and
(3) Exceptions criteria; and
(b) Identifies exceptions so that the agency can correct misutilization practices of beneficiaries and providers.