Controlled Substance Audit and Compliance
A pharmacy, hospital pharmacy or clinic holding controlled substances, keeping a paper register, facing periodic inspection, and unable to reconcile the register to physical stock without a long afternoon.
The problem
The register is the legal record, it is maintained by hand, and a discrepancy in it is a serious matter that is currently discovered late and reconstructed from memory.
In scope
- Register integrity review
- Access control assessment
- Reconciliation process design
- Discrepancy workflow
- Inspection readiness
- Remediation with retest
Out of scope
- Building the pharmacy system itself — that is the Pharmacy Retail and Dispensing Platform.
- Legal representation or advocacy in an inspection or enforcement matter.
- Interpretation of the regulations — Afivox works to the obligations the client's superintendent pharmacist states.
What this would cover
Grouped by module — open the ones you want to read.
Register review
- How the register is currently kept, its integrity, its gaps, and whether it could survive inspection today
Access inventory
- Who can physically reach controlled stock, who holds keys or codes, who can record movements, and whether those are the same people they should be; dormant access identified
Segregation of duties
- Whether the person recording movements is the person handling stock, which is the most common structural weakness
Reconciliation design
- A cadence and a workflow for counting against the register, with who counts, who verifies, and what happens when they disagree
Discrepancy workflow
- A recorded event with investigation, authorisation and outcome; never a silent adjustment, which is the failure that turns a small discrepancy into a serious finding
Storage and physical control
- Assessment against the client's stated obligations
Audit trail
- Whether movements are attributable and tamper-evident, and whether anyone reviews them
Inspection readiness
- A walkthrough of what an inspector would ask for and whether it can be produced, with gaps listed
Remediation plan
- Ranked, with effort estimates, and a retest of agreed fixes
Data model
- Not a build. Deliverables are documents: register review, access inventory, segregation analysis, reconciliation procedure, discrepancy workflow, findings register, remediation plan, retest report.
Invariants
- Not applicable — assessment engagement. The structural rule: a discrepancy is always an event with an investigation and an outcome, never an adjustment.
Offline behavior
Not applicable.
Hard trade-offs
The difficult decisions, stated plainly — not trimmed for length.
A discrepancy found during this engagement may be a regulatory matter and may implicate a named member of staff, and Afivox is not in a position to advise on either.
This must be established in the engagement letter before work begins: Afivox reports findings confidentially to the engaging authority — normally the superintendent pharmacist or the facility head — and the client takes its own legal and professional advice on what follows. A consultancy that positions itself as able to help a client manage a controlled-substance discrepancy quietly is offering something it should not.
Reconciliation only works if it actually happens at the designed cadence.
A procedure that requires a weekly count from staff who do not have the time will lapse within a month, and a lapsed procedure is worse in an inspection than an honest ad-hoc one. The cadence must be set against real staffing.
Regulatory note
[FILL: confirm applicable NDLEA, PCN and NAFDAC requirements for controlled substance record-keeping, storage and inspection with the client's superintendent pharmacist before scoping. Publish no specific regulatory claims on the website until verified.]
End state
What would be true about their day once this is running.
- The register reconciles to physical stock on a defined cadence, with counting and verification separated.
- Access to controlled stock reflects current roles.
- A discrepancy triggers a recorded investigation rather than a quiet correction.
- The facility knows what an inspector would ask for and can produce it.
Let's map how your operation actually runs.
One session. We look at what's breaking, and what we'd build around it — whether or not you hire us afterward.
Start the operations review