Best Practices vs. Minimum Standards

Many practices mistakenly stop at what’s legally required — but in reality, DEA compliance should be a starting point, not the finish line. This topic outlines best practices that go beyond minimum standards to create a culture of accountability and safety.

Legal Minimum Requirements

RequirementDEA Expectation
Locked storage cabinetYes (for all CII–CV)
Secure logbooks or e-logsYes
Authorized access onlyYes
Theft/loss reportingRequired
Storage separationEncouraged but not mandated

Best Practices to Exceed Compliance

  • Separate Storage by Schedule
    Store Schedule II drugs in a separate DEA-compliant safe from Schedule III–V. This makes tracking easier and limits cross-access.
  • Use Dual Controls or Witness Systems
    For high-risk drugs (e.g., fentanyl, ketamine), implement double-signature requirements for removal and administration.
  • Restrict Access by Role
    Not all staff need access. Define clear authorization levels, and limit keys or codes accordingly.
  • Use Smart Cabinets
    Consider investing in electronic drug cabinets that log access by user, time, and drug removed.
  • Integrated Surveillance
    Install cameras near storage areas and integrate with audit logs to detect unusual activity.
  • Frequent Internal Audits
    Conduct weekly or monthly inventory checks — comparing logs with actual inventory.
  • Maintain Redundant Records
    Keep both digital and paper logs — and store them securely for a minimum of 2–5 years, depending on your state’s requirement.

Remember: In DEA inspections, agents will often ask, “What have you done beyond the bare minimum to prevent diversion?”