Every body that governs hospital pharmacy, and what each one actually requires.

Regulator-first lists make one obligation look like three separate projects. A pharmacist reviewing orders is a CMS condition, an accreditation standard and a state board rule at the same time, and it is one program, one policy and one record. This is the crosswalk.

Educational reference for licensed pharmacists, not legal or regulatory advice. Citations marked with a dashed border need confirming against the current source: The Joint Commission renumbered in the Accreditation 360 restructure, and state adoption of USP chapters varies. Verify before you rely on any reference here.

Who governs you

Ordered by how much of a compliance week each one consumes, not by how often it gets discussed. Accreditation is talked about most and is not the heaviest load.

United States Pharmacopeia

Heaviest load

Compounding and hazardous drug handling. Chapters 795 (nonsterile), 797 (sterile) and 800 (hazardous drugs) set the practice standards for anything the pharmacy prepares.

What it can doUSP itself does not inspect. Its chapters become enforceable because states adopt them into regulation, CMS and accreditors survey against them, and they are treated as the standard of care in litigation. Adoption varies by state, which is why the same chapter is mandatory in one state and guidance in another.

Drug Enforcement Administration

High

Controlled substances end to end: registration, ordering, recordkeeping, inventory, security, disposal, and loss reporting.

What it can doFederal criminal and civil authority. Registration can be suspended or revoked, and individual practitioners are personally exposed. This is the highest consequence body on the list and the one where "we were working on it" carries the least weight.

State Board of Pharmacy

High

Licensure of the pharmacy and every pharmacist and technician in it, the pharmacist in charge role and its duties, staffing ratios, and whatever the state has adopted on compounding, sterile products and remote or telepharmacy practice.

What it can doLicence action against the facility and against named individuals. The pharmacist in charge is personally accountable in most states, which makes this the body with the most direct effect on the person reading this.

Centers for Medicare and Medicaid Services

Moderate

Conditions of Participation, the floor for any hospital that bills Medicare. Pharmacy is 482.25; medication error reporting, formulary, controlled substance loss reporting and pharmacist supervision all live there. Antibiotic stewardship was added in 2019.

What it can doParticipation in Medicare. The most severe consequence available to any body on this list, and the reason accreditors matter at all, since accreditation is how most hospitals demonstrate they meet it.

The Joint Commission

Moderate

Accreditation. The Medication Management chapter runs from planning through selection, storage, ordering, preparation, administration, monitoring and evaluation, plus stewardship. Medication management is consistently among the most cited survey areas.

What it can doAccreditation status, and with it deemed status for Medicare. Findings arrive as required corrective action rather than penalty, which is why it is survivable and why it still consumes enormous preparation time.

Institute for Safe Medication Practices

Moderate

Medication safety practice. Targeted Medication Safety Best Practices for Hospitals, the high alert medication lists, and the error alerts that drive local action.

What it can doNo enforcement authority at all. It matters because accreditors and plaintiffs treat it as the standard of care, and because CMS interpretive guidance points at recognized standards. Ignoring an ISMP best practice is a defensible position only in writing, never by omission.

Prescription drug monitoring program

Moderate

Controlled substance dispensing data: reporting into the program and querying it before prescribing or dispensing.

What it can doEnforced through the state board, and increasingly through accreditation expectations on opioid stewardship.

Occupational Safety and Health Administration

Lower

Worker protection. Hazard communication for hazardous drugs, respiratory protection, bloodborne pathogens, and the general duty clause where no specific standard exists.

What it can doCitation and monetary penalty, driven largely by employee complaint and by injury.

Environmental Protection Agency and state waste authority

Lower

Pharmaceutical waste. RCRA hazardous waste determination, the healthcare specific subpart P rules, and the sewering prohibition. State authorities are frequently stricter than federal.

What it can doCivil penalty per day per violation, and these accumulate quietly because the violation is usually a disposal practice running unchanged for years.

Food and Drug Administration

Lower

Drug approval, labeling, REMS, recalls, shortage reporting, and the outsourcing facility framework under 503B that most hospitals now depend on.

What it can doDirect enforcement is aimed at manufacturers and outsourcing facilities rather than hospitals, but recall and REMS obligations land on the pharmacy.

The crosswalk

Filter by the body that enforces it or by how often it comes around. Open any requirement for what has to be in place, what proves it, and where it fails.

15 requirements

A pharmacist reviews every order before the first dose

TJC MM.05.01.01CMS 42 CFR 482.25Board varies
continuous
The requirement

Every medication order is reviewed by a pharmacist for appropriateness before the first dose reaches the patient, with defined and limited exceptions for emergencies and for situations where a delay would harm the patient.

What you need in place

A written list of the exceptions, the override list in the dispensing cabinets that matches it, and a retrospective review process that closes the loop on anything released without prospective review.

What proves it

The order review policy, the exception list, and the retrospective review log showing what was reviewed, when and by whom.

What surveyors look for

Surveyors compare the written exception list against the actual cabinet override list. A mismatch is the common finding, not the absence of a policy.

Where it fails
  • The override list grew by request and was never reconciled against the policy
  • Retrospective review happens but is not documented, so it cannot be demonstrated
  • The exception list is written broadly enough to swallow the rule
OwnerDirector of pharmacy
Reports toP&T, then Medical Executive
Cyclecontinuous

Order review and medication access when the pharmacy is closed

TJC MM.05.01.13CMS 42 CFR 482.25(b)
continuous
The requirement

When the pharmacy is not open, a qualified professional reviews orders in the pharmacist's absence, access to medications is limited to designated personnel, and a pharmacist performs retrospective review when the pharmacy reopens.

What you need in place

A defined after hours path, a limited night cabinet, and a retrospective review on reopening. Remote order entry or telepharmacy closes the gap where staffing cannot.

What proves it

The after hours policy and the retrospective pharmacist review log.

What surveyors look for

The paper trail rather than the policy. Surveyors want to see the retrospective review actually happened on specific dates.

Where it fails
  • Night cabinet contents expanded until it is a small pharmacy nobody reviews
  • The policy names telepharmacy that was never contracted
OwnerDirector of pharmacy, with nursing
Reports toP&T, then Medical Executive
Cyclecontinuous

Biennial controlled substance inventory

DEA 21 CFR 1304.11Board varies
biennial
The requirement

An exact count of all controlled substances on hand, taken at least every two years, dated, and retained. Schedule II must be an exact count; other schedules may be estimated in some circumstances, subject to container size rules.

What you need in place

A scheduled inventory with a named responsible person, a documented method, and reconciliation of every discrepancy before the record is closed.

What proves it

The signed and dated inventory record, retained for the required period and available at the registered location.

What surveyors look for

Date, signature, completeness, and whether the record is physically retrievable at the registered location rather than in a shared drive nobody can reach during inspection.

Where it fails
  • Taken on time but never signed or dated
  • Discrepancies noted and left unresolved on the face of the record
  • State requires annual and the pharmacy ran the federal two year cycle
OwnerPharmacist in charge
Reports toThe record stays with the registration; discrepancies escalate immediately
Cyclebiennial

Reporting theft or significant loss of controlled substances

DEA 21 CFR 1301.76(b)CMS 42 CFR 482.25(b)Board varies
triggered
The requirement

Theft or significant loss is reported to the DEA in writing, and separately to the state board where required. CMS additionally requires that abuses and losses be reported internally to the person responsible for pharmaceutical services and, as appropriate, to the chief executive.

What you need in place

A written decision path for what counts as significant, who makes that call, and the parallel internal and external notifications with their own deadlines.

What proves it

The DEA Form 106, the state report, and the internal escalation record.

What surveyors look for

Timeliness, and whether "significant" was defined in advance or decided after the fact.

Where it fails
  • Losses are treated as a series of small discrepancies and never aggregated
  • The internal CMS notification is skipped because the DEA form was filed
OwnerPharmacist in charge
Reports toCEO, compliance, and the board
Cycletriggered

A controlled substance diversion prevention program

DEA 21 CFR 1301.71CMS 42 CFR 482.25(b)TJC medication management and leadership
continuous
The requirement

Effective controls to guard against theft and diversion, covering chain of custody from receipt to waste, surveillance capable of detecting anomalous use, and a defined investigation pathway.

What you need in place

Automated anomalous use surveillance, discrepancy resolution with a closure clock, witnessed waste, and a written handoff between pharmacy, human resources, legal, the licensing board and law enforcement.

What proves it

The diversion prevention plan, surveillance reports, discrepancy log with resolution times, and investigation records.

What surveyors look for

Whether surveillance is capable of catching a competent diverter, and whether discrepancies close within a defined time.

Where it fails
  • Surveillance is manual and only catches the careless
  • No defined threshold for escalating from monitoring to investigation
  • Waste is witnessed as a signature ritual with nobody watching
OwnerPharmacist in charge, usually with a diversion committee
Reports toCompliance and the governing body
Cyclecontinuous

Sterile compounding under USP 797

USP General Chapter 797Board variesCMS 42 CFR 482.25TJC medication management, preparing and dispensing
continuous
The requirement

Compounded sterile preparations are prepared in qualified engineering controls by trained and competency assessed personnel, with beyond use dating assigned by category, environmental monitoring on a defined schedule, and documented cleaning.

What you need in place

Certification of primary and secondary engineering controls, viable and non viable environmental monitoring, personnel garbing and gloved fingertip and media fill testing, master formulation and compounding records, and a designated person accountable for the whole program.

What proves it

Certification reports, environmental monitoring results with action level responses, competency records per person, master formulation records, and cleaning logs.

What surveyors look for

Competency records for every person who compounds, and whether an out of action level environmental result produced a documented investigation and repeat.

Where it fails
  • Monitoring is performed and results are filed without anyone reading them
  • Competency lapses for a per diem or float pharmacist nobody tracked
  • Beyond use dating is assigned by habit rather than by category
OwnerThe designated person named in the program
Reports toP&T and quality
Cyclecontinuous

Hazardous drug handling under USP 800

USP General Chapter 800OSHA 29 CFR 1910.1200OSHA 29 CFR 1910.134Board varies
continuous
The requirement

Hazardous drugs are handled under containment from receipt through storage, compounding, administration and disposal, by trained personnel, under a written plan. Personnel of reproductive capability confirm in writing that they understand the risks.

What you need in place

An assessment of risk for any drug handled under alternative controls, containment engineering, designated storage and negative pressure where required, personal protective equipment standards, spill control, deactivation and decontamination procedures, and medical surveillance.

What proves it

The written hazardous drug plan, the drug list with assessment of risk decisions, training and acknowledgement records, and spill and exposure records.

What surveyors look for

Whether the local hazardous drug list is current against the NIOSH list, and whether any assessment of risk is written rather than assumed.

Where it fails
  • The list was built once and never reconciled against the current NIOSH update
  • Nursing and environmental services were never trained, only pharmacy
  • Alternative containment was adopted with no written assessment of risk
OwnerDirector of pharmacy, with occupational health and safety
Reports toSafety committee and P&T
Cyclecontinuous

A formulary system established by the medical staff

CMS 42 CFR 482.25(b)TJC medication management, selection and procurement
continuous
The requirement

A formulary system established by the medical staff to assure quality pharmaceuticals at reasonable cost, with a defined process for addition, removal and restriction.

What you need in place

A P&T committee with charter and membership, a monograph standard, a request pathway, and a documented link from decision to order set change.

What proves it

Committee minutes, the current formulary, and monographs supporting decisions.

What surveyors look for

That the medical staff, not pharmacy alone, owns the formulary, and that minutes show actual deliberation rather than ratification.

Where it fails
  • Decisions are recorded with no implementation owner, so nothing changes downstream
  • The formulary in the EHR and the formulary in the minutes have diverged
OwnerDirector of pharmacy, with the P&T chair
Reports toMedical Executive Committee
Cyclecontinuous

Medication errors and adverse drug reactions reach the prescriber and QAPI

CMS 42 CFR 482.25(b)CMS 42 CFR 482.21TJC medication management, monitoring
continuous
The requirement

Drug administration errors, adverse drug reactions and incompatibilities are reported immediately to the attending physician and, where appropriate, into the hospital's quality assessment and performance improvement program.

What you need in place

An event reporting system, a defined immediate notification path, and aggregation into QAPI with trending by type and harm severity.

What proves it

Event reports, notification records, and the QAPI medication report.

What surveyors look for

Whether reporting reaches QAPI as analysis rather than as a raw count.

Where it fails
  • Every action item in the trend report is education
  • Reporting volume is treated as a safety measure rather than a culture measure
OwnerMedication safety officer
Reports toMedication safety committee, then quality and the board
Cyclecontinuous

ISMP Targeted Medication Safety Best Practices gap analysis

ISMP Targeted Medication Safety Best Practices for HospitalsCMS recognized standards of care
biennial
The requirement

Not a regulation. ISMP publishes consensus best practices on a two year cycle and expects hospitals to assess themselves against them and act on gaps. Accreditors and plaintiffs treat them as the standard of care.

What you need in place

A gap analysis against each best practice at every release, an action plan with owners and dates for anything not fully implemented, and tracking to closure.

What proves it

The completed gap analysis worksheet and the action plan with closure dates.

What surveyors look for

Not directly surveyed. It surfaces when an event occurs and the relevant best practice was known, unimplemented and undocumented.

Where it fails
  • Completed once at release and never tracked to closure
  • A best practice is declared not applicable with no written rationale
OwnerMedication safety officer
Reports toMedication safety committee
Cyclebiennial

Monthly review of externally reported errors and alerts

ISMP Targeted Medication Safety Best Practices
monthly
The requirement

A formal monthly process where an interdisciplinary team reviews medication risks and errors reported by external organisations, assesses whether the same failure could occur locally, and determines action.

What you need in place

A standing agenda item, a named team, and a decision record for each alert reviewed: applicable or not, action taken, owner, date.

What proves it

Committee minutes showing each alert, the local assessment, and the disposition.

What surveyors look for

Not directly surveyed; strong evidence of a functioning safety program.

Where it fails
  • Alerts are circulated by email and read rather than formally assessed
  • No record of the ones judged not applicable, which are the ones that matter later
OwnerMedication safety officer
Reports toMedication safety committee
Cyclemonthly

An antibiotic stewardship program with an appointed leader

CMS 42 CFR 482.42TJC antimicrobial stewardshipISMP CDC Core Elements
continuous
The requirement

An active hospital wide antibiotic stewardship program, with leaders appointed by the governing body who are qualified through education, training or experience. A pharmacist is explicitly eligible to be named a program leader.

What you need in place

Appointed leadership documented by the governing body, a multidisciplinary committee, prospective audit and feedback, an antibiogram, and antimicrobial use reporting.

What proves it

The governing body appointment, committee minutes, the current antibiogram, and use and resistance reporting.

What surveyors look for

Whether the appointment is documented by the governing body, which is the piece most often missing even where the program is strong.

Staffing note

CMS estimated roughly 0.4 FTE physician and 1.0 FTE clinical pharmacist for a hospital of about 124 beds. Useful when arguing for the position.

Where it fails
  • The program is real but the governing body appointment was never recorded
  • Only process measures are reported and no outcome measure exists
OwnerAntimicrobial stewardship pharmacist and physician leader
Reports toInfection prevention, P&T and the governing body
Cyclecontinuous

Organised leadership for opioid stewardship and pain management

TJC leadership standard on opioid stewardshipTJC pain assessment and management performance goalPDMP varies
continuous
The requirement

Leadership defines goals and metrics for pain management and opioid prescribing, allocates resources, and promotes accountability across the disciplines involved. Non pharmacologic modalities, staff education, consultation services, PDMP access and monitoring equipment must be available.

What you need in place

A stewardship committee with a physician champion, multimodal pathways in the default order sets, prescribing review by service line, naloxone criteria, and a metric set.

What proves it

The metric set with targets, committee minutes, and the education record.

What surveyors look for

That leadership defined the metrics, which makes the metric set the committee's real product rather than a byproduct.

Where it fails
  • Prescribing volume is measured and pain control is not, so the program succeeds by undertreating
  • Policy changed and the EHR default quantity did not
OwnerPhysician champion with pharmacy providing data and protocols
Reports toMedical Executive and quality
Cyclecontinuous

Pharmaceutical waste determination and disposal

EPA 40 CFR 266 subpart PEPA RCRA waste determinationBoard state environmental authority
continuous
The requirement

Pharmaceutical waste is characterised as hazardous or non hazardous, segregated accordingly, and disposed of through compliant channels. Sewering of hazardous waste pharmaceuticals is prohibited.

What you need in place

A waste determination covering the formulary, segregation containers and signage at every generation point, staff training, and a qualified disposal vendor with manifests.

What proves it

The waste determination, vendor manifests, training records, and the generator status determination.

What surveyors look for

Rarely surveyed by health accreditors and inspected directly by environmental authorities. Findings are usually systemic, because the practice ran unchanged for years.

Where it fails
  • The waste determination was done at formulary state years ago and never refreshed
  • Nursing units segregate correctly and the operating room does not
  • Generator status changed and nobody recalculated
OwnerDirector of pharmacy with facilities and environmental services
Reports toSafety committee
Cyclecontinuous

Facility and personnel licensure current and posted

Board variesDEA 21 CFR 1301
annual
The requirement

The pharmacy licence, the DEA registration, and every pharmacist and technician licence are current. Most states name a pharmacist in charge with personal accountability and require notification when that person changes.

What you need in place

A licence register with expiry dates and lead time alarms, and a defined process for change of pharmacist in charge that starts before the change, not after.

What proves it

The licence register, current certificates, and change of PIC notifications.

What surveyors look for

Expiry dates and whether the posted licence matches the named PIC.

Where it fails
  • There is no grace period in most states and someone works a shift unlicensed
  • Change of PIC notification filed late, which is a finding against the individual
OwnerPharmacist in charge
Reports toHuman resources and compliance
Cycleannual

What comes around, and when

The same requirements sorted by cycle. Continuous obligations are the program; the dated ones are what gets missed.

continuous
  • A pharmacist reviews every order before the first dose
  • Order review and medication access when the pharmacy is closed
  • A controlled substance diversion prevention program
  • Sterile compounding under USP 797
  • Hazardous drug handling under USP 800
  • A formulary system established by the medical staff
  • Medication errors and adverse drug reactions reach the prescriber and QAPI
  • An antibiotic stewardship program with an appointed leader
  • Organised leadership for opioid stewardship and pain management
  • Pharmaceutical waste determination and disposal
monthly
  • Monthly review of externally reported errors and alerts
annual
  • Facility and personnel licensure current and posted
biennial
  • Biennial controlled substance inventory
  • ISMP Targeted Medication Safety Best Practices gap analysis
triggered
  • Reporting theft or significant loss of controlled substances
Free field card

The Patient Work-Up Sequence card.

One page, print it and tape it up: the eight-step reading order behind the four-second glance, plus the never-miss routine.

One click gets you off the list. Your address is never sold or shared.