Audit-ready is a state, not a scramble.
A DEA inspection doesn't wait for a convenient week. The facilities that walk through it calmly aren't the ones that prepare beforehand — they're the ones whose records were already complete and accurate on a current basis, every day, without a special effort.
What's actually at stake
- $19,246 Per recordkeeping violation, as of the 2025 DOJ inflation adjustment
- 2 years Records must be kept and available for inspection (21 CFR 1304.04)
- Every two years The biennial inventory floor (21 CFR 1304.11)
The five record sets an inspector asks for
An inspector's list is predictable. If you can produce all five without a scramble, you're most of the way there.
- Inventories — initial count plus a new inventory at least every two years (21 CFR 1304.11).
- Receiving records — what came in, from whom, and when; Schedule II receipts on DEA Form 222 or CSOS.
- Dispensing and administration records — complete and accurate, maintained on a current basis (21 CFR 1304.21).
- Disposal records — DEA Form 41, with two employees witnessing handling and destruction (21 CFR Part 1317).
- Theft or loss reports — DEA Form 106, when a significant loss occurred.
The test is "complete and accurate... on a current basis." Records assembled after the fact, no matter how accurate, fail that test.
The counting rules facilities get wrong
Two rules trip up otherwise careful facilities.
- Schedule II needs an exact count — opened Schedule II containers, such as those holding euthanasia solutions, require an exact count or measure, not an estimate (21 CFR 1304.11).
- Schedule III-V can be estimated — unless the container holds more than 1,000 tablets or capsules, in which case it also needs an exact count.
- Liquids are where honest counts drift — overfill, hub loss, and syringe tolerance all push an estimated liquid count away from the true number. See <a href=\"/research/syringe-accuracy\">syringe accuracy</a> for why that drift happens even when nobody made a mistake.
A self-audit routine you can actually keep
-
Count on a shorter schedule
Count meaningfully more often than the two-year legal minimum — the shorter the cycle, the smaller any variance has to be before you notice it.
-
Reconcile against the running balance
Check the physical count against your running balance, not just against the last inventory.
-
Document every discrepancy the day you find it
Write it down immediately, while the context is still fresh enough to investigate.
-
Investigate before it compounds
Run down the cause before the next cycle stacks a new variance on top of the old one.
-
File and retain for 2 years
Keep the documentation on file and available for inspection for at least two years (21 CFR 1304.04).
How the CSI-360 keeps you ready without a special effort
A running balance turns the biennial count into a confirmation, not an investigation — the number to check against already exists.
- Exact measure, automatically — weighed dispenses satisfy the exact-count expectation for opened Schedule II stock without a manual tally.
- Reports, not binders — inventory, activity, and user-access reports answer "readily retrievable" with a report instead of a filing cabinet.
- Who had access, answered — per-user credentials mean that question already has a record, not a reconstruction.
Common questions
-
What does an inspector actually look at first?
The reconciliation between the log and the shelf in your study rooms — whether what the record says should be on hand matches what's actually there. Everything else follows from whether that first check comes back clean.
-
How often should we really count?
The biennial inventory is the legal minimum (21 CFR 1304.11), not a target. Short-cycle counts, monthly or more often, keep any variance small enough to explain, instead of letting two years of small drift accumulate into one big, hard-to-explain gap.
-
What happens if we find a discrepancy during a self-audit?
Document it the day you find it, then investigate. If it rises to a significant loss under the factors in 21 CFR 1301.76(b) (quantity, pattern, specific individuals implicated), it needs the Form 106 reporting path: written notice to your local DEA Field Division within one business day, and Form 106 filed electronically within 45 calendar days.
-
Is the CSI-360 itself "DEA compliant"?
Something has to be, and that something is your facility — DEA compliance belongs to the registrant, not to a cabinet, a logbook, or a piece of software. The CSI-360 is a tool that makes staying compliant vastly easier: measured dispenses, per-user access, and reports on demand. But like any control, it has to be used. No product can be your compliance for you.
-
How long do records have to be kept?
At least two years, and available for inspection the entire time (21 CFR 1304.04). That includes inventories, dispensing records, receiving records, and disposal records.
-
How does the CSI-360 change audit prep?
It removes the prep. Weighed dispenses, per-user credentials, and on-demand reports mean the records an inspector asks for are already current, not assembled the week before. See the CSI-360 product page for the full system, or the diversion prevention and syringe accuracy articles for the security and measurement sides of the same problem.
References
- Inventory requirements, including the counting-rule thresholds: 21 CFR 1304.11.
- Current-basis recordkeeping requirement: 21 CFR 1304.21.
- Two-year record retention: 21 CFR 1304.04.
- Disposal recordkeeping, two-witness destruction, Form 41: 21 CFR Part 1317.
- Theft/significant-loss reporting (one-business-day notice; electronic Form 106 in 45 days): 2023 DEA final rule.
- Civil-penalty amount ($19,246 per violation, as of the 2025 adjustment): 2025 DOJ inflation adjustment.
- Practitioner compliance resources: DEA Diversion Control Division.
Make audit-ready the default, not a project.
The CSI-360 keeps a current, reconciled record of every dispense automatically. Give us a call and we'll walk through what that looks like against your current recordkeeping.