CMMC Readiness: How to Prepare and Incorporate a Zero Trust Strategy for Your CMMC Scope | October 14th @ 1:00PM ET

Contact Us
Services
Services
Crypto and Digital Trust
Crypto and Digital Trust
Schellman Training
Schellman Training
Sustainability Services
Sustainability Services
AI Governance
AI Governance
About Us
About Us
Leadership Team
Leadership Team
Corporate Social Responsibility
Corporate Social Responsibility
Careers
Careers
Strategic Partnerships
Strategic Partnerships

EPCS-DEA Third Party Audits - How Often?

Published: Aug 7, 2024

Last Updated: Sep 21, 2026

Is there a period of time that the DEA-EPCS Third Party audit is valid?

On March 31, 2010 the Drug Enforcement Agency's (DEA) rule, "Electronic Prescriptions for Controlled Substances" has revised its regulations to give physicians the choice of writing prescriptions for controlled substances the traditional method or through the electronic system. Originally, the regulation restricted physicians and practitioners from writing electronic prescriptions for controlled substances (EPCS).

The EPCS allows pharmacies, practitioners, and hospitals the ability to employ the benefits of information technology to the field of health care while maintaining the necessary controls for the dispensary of controlled substance prescriptions. In addition, this legislation will reduce the amount of necessary paperwork and the occurrences of prescription forgery. This rule came into effect on June 1, 2010.

The regulation only requires an audit every two years if there are no changes to the functionality of the application. In other words, your report would be valid for 2 years.

About Schellman

Schellman is a leading provider of attestation and compliance services. We are the only company in the world that is a CPA firm, a globally licensed PCI Qualified Security Assessor, an ISO Certification Body, HITRUST CSF Assessor, a FedRAMP 3PAO, and most recently, an APEC Accountability Agent. Renowned for expertise tempered by practical experience, Schellman's professionals provide superior client service balanced by steadfast independence. Our approach builds successful, long-term relationships and allows our clients to achieve multiple compliance objectives through a single third-party assessor.