Electronic Prescriptions for Controlled Substances Clarification

DEA wishes to emphasize that third-party audits of software applications for Electronic Prescriptions for Controlled Substances (EPCS) must encompass all applicable requirements in our regulations, including security, and must address "processing integrity" as set forth in our regulations. Likewise, where questions or gaps may arise in reviewing a particular application, DEA recommends consulting federal guidelines set forth in NIST Special Publication 800-53A. DEA is also announcing the first DEA approved certification process for EPCS. Certifying organizations with a certification process approved by DEA pursuant to the regulations are posted on DEA's Web site once approved.