CMS-HCC model software is written in SAS and can be downloaded from the
CMS web site. However, it is not readily usable. I have created a SAS macro library version of this software. This library is much more user-friendly and allows you to produce risk scores for last three years. Please contact me if you are interested in a trial version.