Valid access is not explainable access
Give the access layer its due, because it earns it. The badge, the reader, the cabinet, the log — specified correctly, installed correctly, working. When you ask “was this person allowed at this cabinet,” it answers instantly and it answers right. That is a real capability and it is worth what it cost.
That layer was built to answer one question — was this person allowed — and controlled-substance diversion does not trip it, because the person is allowed. Diversion becomes visible only when the badge record, the dispensing record, the order, the waste log, the shift roster, and the video fail to agree with each other. That is a comparison across six systems, not an alarm on one. You bought the system that says yes. The one you need is the one that says these six accounts do not reconcile.
You already make this argument to the people you protect. You tell them a camera nobody watches is a recording, not a control. Your controlled-substance camera is a recording. The move most vendors make here is to sell you the monitoring — a person to watch the feed — and that is the upsell we are not going to make, because a watched feed is not what closes a diversion case. A retrievable, timestamped record that lines up against the other five is. The recording is fine, as long as it can be correlated when someone finally asks.
A confession from our own side of the industry: access control got sold into pharmacies as a diversion answer for years, and it was never that. It keeps the wrong people out of the cabinet. It was never built to explain the right people, and calling it a diversion solution was the industry telling a story about a product it wanted to sell. The honest description of the physical layer’s job in diversion is narrow: it produces a record that a committee — pharmacy, nursing, HR, risk, and security in one seat — can correlate. It does not find the diversion. It makes the diversion findable by the people whose job that is.
So here is the self-test, and it is built so Part 1 passes and Part 2 is where you learn something. Walk to the cabinet: locked, logged, on camera — all yes, ninety seconds. Then pick last Tuesday at 2am and try to produce, on one timeline, who opened that cabinet, what was dispensed, what was ordered, what was wasted, who was on shift, and whether the video for that minute still exists. If assembling that takes an hour, an investigator has already lost. You will find the gap standing there, holding the sheet — which is the only way a finding is ever really yours.
“The account that closes a diversion case is never one system. It is six systems agreeing, or not agreeing, on one timeline — and the physical record is one of the six. Our whole job is making sure it is there, and that it lines up, when the question finally gets asked.”
Sources: Controlled-substance diversion-investigation guidance describing correlation across badge/access, automated dispensing, ordering, waste, staffing, and video records; published accounts of diversion programs as multidisciplinary committees (pharmacy, nursing, HR, employee health, risk, security, anesthesia). The physical layer’s role is scoped to correlatable record production, not detection. No diversion rates, incidence figures, or unsourced floor anecdotes are asserted. Standard references verified against the current accreditation manual at publish.
What would change this: Any change to controlled-substance recordkeeping or automated-dispensing audit requirements; DEA guidance updates; new diversion-program committee standards.
Reviewed July 2026 by the Eagle Systems healthcare practice. The systems referenced are how a facility meets the accountability the regulation creates, not a mandate; the accreditation and compliance determinations belong to the organization and its regulators. Current as of Accreditation 360 (eff. Jan 1 2026).