Who can conduct an audit or certify an application?
A. Application providers must obtain a third-party audit or certification to certify that each electronic prescription and pharmacy application to be used to sign, transmit, or process controlled substances prescriptions is in compliance with DEA regulations pertaining to electronic prescriptions for controlled substances. • The application may undergo a WebTrust, SysTrust, or SAS 70 audit conducted by a person qualified to conduct such an audit. • The application may undergo an audit conducted by a Certified Information System Auditor who performs compliance audits as a regular ongoing business activity. • The application may have a certification organization whose certification has been approved by DEA verify and certify that the application meets DEA’s requirements.
