The Surprise DSCSA Audit Test

Could Your Pharmacy Survive a Surprise DSCSA Audit Tomorrow?

The best time to test DSCSA readiness is before someone else tests it for you.

Imagine an inspector, state board representative, supplier, manufacturer, auditor, or other authorized party asks your pharmacy for DSCSA records tomorrow.

Could your team respond calmly? Could more than one person find the records? Could you show supplier information, transaction data, missing-data follow-up, reconciliation activity, exception documentation, suspect-product procedures, and six-year retention?

Records somewhere vs. a working process

A surprise audit does not create the gaps.

It reveals the gaps your pharmacy did not find first.

DSCSA readiness depends on more than knowing information probably exists. A pharmacy should be able to identify its suppliers, retrieve records, explain what happened when data was missing, show reconciliation and exception activity, explain suspect-product procedures, and retrieve records over time.

The risky answer is, “The wholesaler probably has it.” The stronger answer is, “Here is the record connected to that shipment.”

Where audit readiness starts

Three areas should be immediately understandable.

Supplier relationships, transaction records, and the workflow your team follows when something does not go as planned.

Supplier and ATP readiness

Know your active suppliers, supplier accounts, locations tied to those accounts, supplier-status review, and the process for updating supplier information.

Transaction-data readiness

Be able to retrieve data connected to specific suppliers, shipments, products, locations, and dates—including EPCIS, EDI 856, ASN, portal, or other transaction documentation.

Workflow and documentation

Staff should understand missing-data follow-up, reconciliation, exception documentation, suspect-product procedures, escalation, and record retention.

Seven surprise-audit readiness checks

Could your pharmacy show the answer—not just explain it?

Work through these areas with real suppliers, real shipments, real records, and the staff members who would need to respond.

01

Can you identify your active prescription drug suppliers?

Supplier information can become messy over time as accounts, 340B relationships, locations, portals, contacts, and staff change.

  • Active suppliers
  • Supplier accounts
  • Locations tied to those accounts
  • Supplier-status review
  • A process for updating supplier information

If supplier information is unclear, the rest of the DSCSA process becomes harder to defend.

02

Can you produce transaction data?

DSCSA readiness depends on more than knowing records exist. The pharmacy should be able to retrieve transaction data connected to specific activity.

  • EPCIS records
  • EDI 856 records
  • ASN records
  • Supplier portal records
  • Other transaction documentation

Risky answer: “The wholesaler probably has it.”

Stronger answer: “Here is the record connected to that shipment.”

03

Can your team explain missing-data follow-up?

Missing or delayed transaction data can happen. The audit question is whether your pharmacy has a documented process.

  • Which supplier was involved?
  • Which shipment or product was affected?
  • What data was expected?
  • What was missing or delayed?
  • Who followed up?
  • What response was received?
  • Was the issue resolved or escalated?

A clearly documented missing-data issue is easier to explain than one handled by memory.

04

Can you show reconciliation activity?

Reconciliation helps compare received product with related shipment or transaction data. If it is part of your process, you should be able to show what was checked and what happened next.

  • The shipment involved
  • The product or packaging level checked
  • Whether the data matched
  • Whether an exception occurred
  • What action was taken
  • Where the record is retained

A surprise audit can turn informal activity into a very direct question: “Can you show it?”

05

Can you show exception documentation?

Records may be late. Product may not match. A barcode may not scan. Supplier data may be incomplete. A product may raise questions.

  • The issue
  • The supplier
  • The shipment or product involved
  • The review
  • The follow-up
  • The resolution or escalation

Exceptions are not automatically failures. Undocumented exceptions are the bigger problem.

06

Can staff explain suspect-product procedures?

If product appears suspect or potentially illegitimate, the pharmacy needs a clear procedure and trained people.

  • When to stop
  • When to quarantine product
  • Who to notify
  • Which records to review
  • How supplier or manufacturer communication is documented
  • When escalation or reporting may be required

The middle of a surprise audit is the wrong time to discover that staff are unsure what to do.

07

Can your records survive six years?

DSCSA record retention is a long-term obligation. Records need to survive staff turnover, supplier changes, email cleanup, portal changes, computer replacement, and time.

  • Where are records retained?
  • Who can access them?
  • How are records organized?
  • How are they connected to suppliers, shipments, and dates?
  • Can more than one trained person retrieve them?

Retention is not just storage. Retention is being able to find and explain the record later.

The surprise-audit self-test

Ask your team these questions today.

If any answer is no, your pharmacy has found a gap worth fixing now.

✓

Can we identify every active supplier?

✓

Can we show Authorized Trading Partner review?

✓

Can we retrieve transaction data for a recent shipment?

✓

Can we find EPCIS or EDI 856 records where applicable?

✓

Can we show missing-data follow-up?

✓

Can we document reconciliation activity?

✓

Can we show exception history?

✓

Can staff explain suspect-product procedures?

✓

Can more than one person retrieve records?

✓

Can we produce records without rebuilding the story manually?

How Advasur 360 helps pharmacies prepare

Get ready before anyone asks the hard questions.

Advasur 360 helps pharmacies organize DSCSA records and workflows so the answer can move from “we think we have that somewhere” to “here is the record, and here is what happened.”

Transaction data receipt and retention

Support for receiving, retaining, and retrieving required DSCSA transaction records.

EPCIS and EDI 856 management

Organize electronic DSCSA records connected to supplier and shipment activity.

Supplier and shipment visibility

A practical view of supplier relationships, accounts, shipments, and associated records.

Authorized Trading Partner support

Support for organizing supplier information and trading-partner review.

Reconciliation activity

Workflow support for comparing received product with shipment or transaction data.

Missing-data workflows

A clearer process for identifying, following up on, documenting, resolving, or escalating missing information.

Exception documentation

Help preserve the issue, review, follow-up, resolution, and supporting record.

Suspect-product procedures

Support for identifying, quarantining, investigating, documenting, escalating, and reporting when appropriate.

Staff training support

Practical support so more than one person understands the pharmacy's workflow.

Six-year record retention

Support for long-term retention that remains organized and explainable.

Record retrieval

Help trained staff produce records when someone asks instead of rebuilding the story.

Built by pharmacists, for pharmacists: Advasur 360 was shaped by more than a decade of focused DSCSA experience and includes white-glove support from people who understand DSCSA and pharmacy operations.

Do not wait for the audit to learn the answer

A surprise DSCSA audit should test your process—not create it.

Pick a shipment today. Find the supplier. Retrieve the transaction data. Check whether anything was missing. Review whether reconciliation or exception activity was documented. Ask someone other than the usual person to find the record.

If that simple test feels difficult, now is the time to act.

In a 30-minute Advasur 360 DSCSA Readiness Review, we can walk through your current process and help identify what needs attention before the November 27, 2027 deadline.

We can review:

  • ✓ Supplier setup
  • ✓ Transaction data receipt and retention
  • ✓ EPCIS and EDI 856 readiness
  • ✓ Missing-data workflows
  • ✓ Reconciliation activity
  • ✓ Exception documentation
  • ✓ Suspect-product procedures
  • ✓ Staff training
  • ✓ Six-year record retention
  • ✓ Record retrieval

No pressure. No scare tactics. Just a practical look at whether your pharmacy can show what happened when someone asks.

Subscribe to
Advasur 360 Insights

Practical DSCSA guidance built for pharmacy teams.

(check your email to confirm your subscription)