Drug Scheduling: While DEA Decisions Have Aligned with Recent HHS Recommendations, Both Need Comprehensive Policies

Overview

The GAO review found that under the Controlled Substances Act the Drug Enforcement Administration (DEA) must obtain scheduling recommendations from the Department of Health and Human Services (HHS), based on FDA evaluations, for certain substances; GAO assessed DEA scheduling actions from 2020 through 2025. Of 208 substances for which DEA took scheduling actions in that period, DEA considered HHS evaluations and recommendations where required for 95 substances; for the 84 substances with final rules published by December 31, 2025, DEA’s final decision aligned with HHS’s recommendation. GAO also found gaps in agency policies and procedures: DEA lacks documented roles, responsibilities, and procedures related to scheduling, FDA lacks staff procedures for evaluations and recommendations, and an MOU between FDA and NIH’s NIDA is more than 40 years old and needs updating. For contractors in pharmaceutical manufacturing, labs, medical research, regulatory consulting, and related services, this means rulemaking and agency practices around drug scheduling are active and evolving, and internal compliance, registration, and regulatory monitoring processes should be reviewed and strengthened. Action is needed now to monitor forthcoming agency actions, reassess exposure for work that touches controlled substances, and shore up governance and continuity processes that would help respond quickly to temporary or permanent scheduling changes.

Immediate Actions (This Week)

• [ ] Assign an internal lead (compliance/regulatory or contracts) to monitor DEA, FDA, and HHS rulemaking and regulatory dockets specifically related to scheduling and controlled substances.
• [ ] Inventory current contracts, projects, and products that could be affected by scheduling changes (including research pipelines, lab testing services, and supply chain elements).
• [ ] Notify contracts, legal, and operations teams about GAO findings and potential policy gaps at DEA and FDA; prepare to escalate any urgent dependency on controlled-substance status.

Short-Term Actions (30 Days)

• [ ] Review and document current organizational procedures for work involving controlled substances and identify single points of failure (key personnel or undocumented technical knowledge).
• [ ] Prepare a public-comment and stakeholder engagement playbook (roles, approval routing, draft templates) so the organization can respond rapidly to any DEA or HHS notices or proposed rules.

Long-Term Actions (90+ Days)

• [ ] Implement or update internal policies and SOPs that define roles, responsibilities, and procedures for handling scheduling risk, including continuity plans for subject-matter experts and succession of evaluations.
• [ ] Establish a recurring review cycle to reassess inventory, registrations, and contracts in light of final scheduling actions or extended temporary scheduling orders; incorporate lessons from GAO findings into training and retention plans.

Compliance Checklist

• [ ] Controlled Substances Act: Maintain tracking of applicable scheduling decisions and final rules; update internal risk registers when scheduling status changes.
• [ ] DEA Registration Requirements: Confirm that any activities requiring DEA registration (manufacture, distribution, research on controlled substances) are current and that renewal/changes are planned if scheduling status could change.
• [ ] FDA Regulatory Compliance: For products or research subject to FDA evaluations, ensure regulatory files capture relevant scientific and medical evaluations and are ready to support HHS recommendations.
• [ ] Drug Scheduling Regulations: Monitor temporary scheduling orders and final rule dockets; document impact assessments for each material scheduling action.

Resources

• Controlled Substances Act — text: TBD pending source review
• DEA guidance and rulemaking dockets — TBD pending source review
• FDA evaluation and recommendation procedures — TBD pending source review
• NIH / NIDA consultation procedures and MOU — TBD pending source review

See operational guidance: Secure Operations Guide (/insights/secure-operations-guide)

Related reading: CMMC (Cybersecurity Maturity Model Certification) Compliance Guide (/insights/cmmc-compliance-guide), CUI (Controlled Unclassified Information)-Safe CRM Guide (/insights/cui-safe-crm-guide)

How Cabrillo Club Automates This

• Cabrillo Signals War Room — Already detected this event and delivered this briefing within minutes. The War Room continuously monitors federal regulatory changes, GAO reports, and agency rulemaking so your assigned lead is alerted immediately when DEA, FDA, HHS, or NIH activity affects scheduling or controlled-substance policy. For this event the War Room captures notices, GAO findings, and any related docket activity so you do not miss temporary scheduling orders or proposed rules.
• Cabrillo Signals Match Engine — Automatically rescors your opportunity and risk pipeline when scheduling events shift the competitive landscape. The Match Engine updates match scores for active bids and pipeline opportunities that map to affected NAICS codes and market segments, flags dependencies where scheduling status may change contract performance, and reprioritizes opportunities for bid/no-bid review.
• Cabrillo Signals Intelligence Hub — Tracks affected agencies, NAICS codes, and regulatory vehicles referenced in your watchlists. Use saved searches to get alerts when follow-on solicitations, notices, or final rules appear on public dockets that match this event’s profile (pharmaceutical manufacturing, laboratory services, medical research, and regulatory compliance consulting). The Intelligence Hub also keeps a time-ordered dossier of agency MOUs, GAO reports, and related documents for easy audit and decision support.
• Proposal Studio (Proposal OS) — When an opportunity is impacted by scheduling or policy shifts, Proposal OS generates first-draft technical approaches and compliance matrices that incorporate your past performance in affected segments. It maintains a win-theme library and pre-built templates (including public-comment playbooks and regulatory response language) so you can rapidly produce compliant proposals or comments tied to DEA/FDA/HHS activity.
• Proposal Studio Workflow Tracker — Triggers a standardized 9-gate capture workflow when Signals flags an at-risk opportunity. Automatically routes regulatory and legal review tasks, tracks required supplier and registration certifications, enforces approval gates for any submission mentioning controlled substances, and generates an audit-ready package documenting decisions and compliance steps.

Call to action: log into your Cabrillo Signals War Room and Intelligence Hub to review the alert dossier for this GAO finding, then run a Match Engine rescore and create a 30-day capture in Proposal Studio Workflow Tracker to operationalize the short-term actions above.