USP 797 Revised: What Changed and What It Means for Your 503A Pharmacy

The New CSP Classification System

The revised chapter replaces the previous three-tier risk-level framework — Low Risk, Medium Risk, and High Risk — with three new categories: Category 1, Category 2, and Category 3. This is the foundational change that cascades through nearly every other requirement in the chapter. The key structural shift: the old framework was driven by process complexity and starting material sterility. The new framework is BUD-driven — the question now is how long the preparation needs to remain in use, and that answer determines the controls required.

What the old three tiers were

Under the previous USP 797 (in effect through November 2023), a CSP's risk category was determined by the complexity of the process and the sterility of the starting materials:

• Low Risk: Simple compounding involving sterile starting materials, closed-system transfers, and no more than three additive entries. BUDs: up to 48 hours at room temperature, 14 days refrigerated, 45 days frozen.
• Medium Risk: Multiple sterile products combined, batch compounding, more complex manipulation. BUDs: up to 30 hours at room temperature, 9 days refrigerated, 45 days frozen.
• High Risk: Non-sterile starting materials, bulk drug powder reconstitution, or processes where sterility could not be assumed at the start. BUDs: up to 24 hours at room temperature, 3 days refrigerated, 45 days frozen.

Category 1: short-dated preparations

Category 1 CSPs are assigned a BUD of no more than 12 hours at controlled room temperature or 24 hours refrigerated (Table 12). Sterility testing is not required. Category 1 preparations can be made in an unclassified segregated compounding area (SCA) — without the full ISO-classified cleanroom suite that Category 2 requires — provided specified conditions are met. The limited BUD itself limits risk. This category covers immediate-use and short-dated CSPs where the time window is inherently protective.

Category 2: extended BUDs with full infrastructure

Category 2 CSPs are preparations assigned a BUD beyond the Category 1 limits. These require a full ISO 5/7/8 cleanroom suite (ISO 5 primary engineering control within an ISO 7 buffer room with an ISO 8 ante-area), a formal environmental monitoring program, documented personnel competency, and sterility and endotoxin testing when batch quantities meet or exceed the thresholds defined in the chapter. Allowable BUDs are defined in Table 13 and depend on whether starting components are sterile, whether the preparation is aseptically processed or terminally sterilized, and whether a passing sterility test was performed.

Importantly, both sterile and non-sterile starting materials fall within Category 2 — there is no separate reduced tier for preparations made from bulk powders under the 2023 revision. Preparations from non-sterile starting materials are Category 2 CSPs, subject to all Category 2 controls in full.

Category 3: the highest tier, the longest allowable BUDs

Category 3 CSPs require all Category 2 controls plus a set of additional, more stringent requirements — in exchange for access to the longest BUDs in the chapter (Table 14). The additional Category 3 requirements include:

• Sterility testing performed on every batch — not only when a batch threshold is reached
• Endotoxin testing required when applicable
• Personnel qualification every 3 months (compared to every 6 months for Category 1 and Category 2)
• Sterile garbing for all personnel in the compounding area
• Sporicidal disinfection performed at least weekly
• Environmental monitoring at increased frequency — surface sampling weekly and at end of each batch in the primary engineering control
• A stability determination to support the extended BUD

Category 3 BUDs reach up to 90 days at room temperature, 120 days refrigerated, or 180 days frozen for terminally sterilized preparations. Those numbers come with corresponding documentation requirements that go significantly beyond what Category 2 demands.

Where did "High Risk" go?

Preparations made from non-sterile starting materials — the former High Risk category — do not have a standalone tier under the 2023 revision. They fall within Category 2 (or Category 3 if extended BUDs are desired), with all applicable controls in full. If your old SOPs assigned "High Risk" BUDs of 12h/24h and treated that as a conservative compliant approach, those preparations need to be reclassified under the Category 1/2/3 framework, because the old category designations no longer appear in the enforceable chapter.

Practical implication: If your pharmacy has been assigning extended BUDs without a formal sterility testing protocol in place, you are no longer compliant. The Category 2 BUD table is not a default — it is a ceiling you can only reach with documentation. Every BUD above the Category 1 limits requires a path of evidence.

Beyond-Use Dating: What the New Tables Actually Say

The old BUD table — risk-level tiers with fixed 12h/24h/3d/9d/14d/45d windows — is gone. The 2023 revision provides three separate BUD tables keyed to the three categories. BUD selection is no longer a judgment call about ingredient risk; it is a table lookup where the row you qualify for depends on your process, your starting materials, and your testing status.

Table 12 — Category 1

Category 1 BUDs are fixed regardless of starting material sterility or testing performed:

• Controlled room temperature: ≤12 hours
• Refrigerated: ≤24 hours

No sterility test can extend these limits. If a preparation needs a longer BUD, it must qualify under Category 2 or Category 3.

Table 13 — Category 2

Category 2 BUDs vary based on whether starting components are sterile, whether the preparation is aseptically processed or terminally sterilized, and whether a passing sterility test was performed. The allowable BUDs by row:

• Aseptically processed, non-sterile starting components, no sterility testing: 1 day CRT · 4 days refrigerated · 45 days frozen
• Aseptically processed, sterile starting components only, no sterility testing: 4 days CRT · 10 days refrigerated · 45 days frozen
• Aseptically processed, sterility testing performed and passed: 30 days CRT · 45 days refrigerated · 60 days frozen
• Terminally sterilized, no sterility testing: 14 days CRT · 28 days refrigerated · 45 days frozen
• Terminally sterilized, sterility testing performed and passed: 45 days CRT · 60 days refrigerated · 90 days frozen

The rows matter. A pharmacy preparing from non-sterile bulk powders without a sterility test is in the first row — capped at 1 day CRT. Using sterile-only components without testing gets you to 4/10/45. Running a passing sterility test on an aseptically processed batch unlocks 30/45/60. None of these are interchangeable, and none are defaults.

Table 14 — Category 3

Category 3 BUDs are available only when all Category 3 controls are in place, including sterility testing on every batch:

• Aseptically processed, sterility testing performed and passed: 60 days CRT · 90 days refrigerated · 120 days frozen
• Terminally sterilized, sterility testing performed and passed: 90 days CRT · 120 days refrigerated · 180 days frozen

The 180-day frozen BUD for terminally sterilized Category 3 preparations is the longest BUD available under the chapter. It requires the full Category 3 infrastructure — sterility testing every batch, weekly sporicidal disinfection, quarterly personnel qualification, increased EM frequency, and a stability determination. No preparation reaches Table 14 without that documentation in place.

What to review in your pharmacy: Pull every formulation on your master formulation record list and check the assigned BUD against the appropriate table. BUDs derived from old risk-level logic need to be reassigned under the new framework, with the basis for the new assignment documented in the record. This is a SOP revision, a training event, and a labeling workflow update. It requires a formal change control event with documentation — it cannot be handled as a footnote.

Environmental Monitoring: More Rigorous, More Documented

The revised chapter's environmental monitoring requirements are significantly more prescriptive than the previous version. The shift is not just in what is required, but in how granularly you must document it.

Frequency

The minimum viable EM program requires surface and air sampling at defined intervals — and the chapter sets different minimums for surface and air. For Category 1 and Category 2 operations, surface sampling of all classified areas is required at least monthly, while volumetric active air sampling is required at least every 6 months in each classified area. Category 3 operations require surface sampling at least weekly (plus end-of-batch sampling inside the PEC) and air sampling at least monthly (preceded by a baseline within 30 days of starting Category 3 compounding). "As needed" is no longer sufficient documentation for an inspection. Your sampling schedule must be written, followed, and evidenced with dated records.

Alert and action levels

The revised chapter provides specific colony-forming unit thresholds for surface and air sampling at each ISO classification level (Tables 7 and 8). You must establish your own alert and action levels in writing — which may be more stringent than the USP defaults if your data warrants it — and you must document what happens when either level is exceeded. The chapter itself does not mandate that compounding stop on an action level hit, but it does require that the cause be investigated, that corrective action be taken and documented, and that follow-up data confirm the action was effective. Many pharmacies operationalize this by pausing the affected area until follow-up sampling clears — but the regulatory requirement is investigate-and-correct, not stop-the-line.

Corrective action documentation

When a sample exceeds your action level, the chapter now explicitly requires a documented investigation, corrective action, and follow-up sampling. The finding cannot simply be recorded and filed — it must be investigated. Inspectors will ask for the corrective action record. A binder of results without corresponding investigations for any exceedances is a gap that will be identified on review.

Trending

The revised chapter expects that you are trending your EM data over time. A collection of individual sample results is not the same as a trending program. You need a defined process for reviewing results across sampling periods and responding to upward drift before exceedances occur. If your EM results are consistently at 80% of your alert level, a trending program surfaces that; a binder of individual results does not.

Personnel Competency: What Has to Be Documented Now

The revised chapter is considerably more explicit about what personnel competency means and how it must be demonstrated. Training records that say "completed garbing training" are no longer sufficient on their own.

Garbing competency

Personnel must demonstrate competency in the garbing procedure through direct observation, not just training sign-off. The chapter specifies gloved fingertip testing and media fill testing for those performing sterile compounding, with defined frequency for each. Initial competency and ongoing re-qualification are both required — this is not a one-time event.

Initial garbing competency requires three successful evaluations on three separate occasions, each consisting of a visual observation plus gloved fingertip and thumb sampling after garbing. After initial qualification, the garbing competency evaluation must be repeated every 6 months for personnel compounding Category 1 and Category 2 CSPs, and every 3 months for personnel compounding Category 3 CSPs. Personnel with direct oversight responsibility who do not compound must complete the same evaluation every 12 months.

Gloved fingertip testing

Zero CFU on gloved fingertips is the requirement before compounding. Documentation must include who was tested, when, by whom, and the result. A training record that says "passed garbing competency" without the corresponding fingertip test record is insufficient for inspection purposes. Each test event is a discrete record. If a person tests positive — meaning any growth — the chapter specifies what must happen before they return to compounding.

Media fills (aseptic manipulation competency)

Personnel who compound Category 1, Category 2, or Category 3 CSPs must complete an aseptic manipulation competency evaluation — which includes a media fill plus gloved fingertip and thumb sampling on both hands plus surface sampling of the direct compounding area — that represents the worst-case compounding activity they perform. The required cadence is every 6 months for personnel compounding Category 1 and Category 2 CSPs, and every 3 months for personnel compounding Category 3 CSPs. Personnel with direct oversight responsibility who do not compound must complete an aseptic manipulation competency evaluation annually. A media fill performed under conditions less challenging than what a compounder actually does in practice does not satisfy the requirement — the fill must simulate the most difficult and challenging aseptic compounding procedures encountered by that person.

Training records

The chapter now expects that training on each revised chapter is documented. If USP 797 was revised and your staff received training on the new requirements, that training event needs a record: who attended, what was covered, when it was held, and attestation that the attendees understood the material. A verbal briefing with no documentation does not constitute a training record under this framework.

What Your Pharmacy Needs to Review

Based on the scope of the 2023 revisions, the following areas require direct attention. These are not suggestions — each represents a documented obligation under the revised chapter.

• SOPs: Every SOP that references USP 797 requirements — garbing procedures, environmental monitoring, BUD assignment, media fill, gloved fingertip testing — needs to be reviewed against the revised chapter and updated where requirements have changed. SOP currency is one of the first things inspectors verify, and the chapter itself requires SOPs to be reviewed at least every 12 months. An SOP that still references the Low/Medium/High Risk framework, that has not been updated since the revised chapter became official, or that lacks a documented review within the last 12 months is a documentation gap.
• Master formulation records: BUD assignments on every sterile formulation need to be audited against the new table. Any preparation currently assigned a BUD that was derived from old risk-level logic needs to be reassigned under the new framework, with the basis for the new assignment documented in the record.
• Environmental monitoring program: Your sampling map, sampling schedule, alert and action levels, and corrective action procedures all need to reflect the revised requirements. If your current program was built against the previous chapter, it likely does not meet the new specificity — particularly around trending and the formalization of corrective action documentation.
• Competency records: Audit your personnel files. Do you have documented gloved fingertip test results for every compounder? Media fill records at the required intervals? Observation-based garbing competency sign-offs that are distinct from training records? If any of these are missing or cannot be produced for an inspector, closing those gaps is the highest-priority compliance action.

One More Thing: State Adoption Varies

The revised USP 797 chapter became officially in effect on February 1, 2025 — the originally announced November 1, 2023 effective date was delayed by an appeals process. (USP 795, by contrast, became official on its originally announced date of November 1, 2023.) USP chapter adoption by individual state Boards of Pharmacy is not automatic or uniform. Some states adopted the revised chapter by reference on the official date. Others are still enforcing the previous version. A handful have pending rulemaking or have issued guidance indicating their position on adoption timing.

This matters because your compliance obligation is determined by the chapter your state has adopted — not necessarily by the most recent USP publication. Know your state's adoption status before deciding which BUD table governs your practice. Your state Board of Pharmacy's website or a direct inquiry to your compliance counsel are the authoritative sources.

When in doubt, apply the more stringent standard and document why. If you are operating under the revised chapter voluntarily in a state that has not yet formally adopted it, that is a defensible position — and it means you are already prepared when your state does adopt. The reverse is not true: assuming the old chapter still applies without confirming your state's position creates exposure if adoption has occurred without your awareness.

References

All compliance content in this article is sourced directly from the official text of USP 〈797〉 Pharmaceutical Compounding — Sterile Preparations (official as of February 1, 2025). Specific section and table references:

• §1.5 CSP Categories — three-category framework (Category 1, Category 2, Category 3) and their qualifying conditions
• §2.1 Demonstrating Knowledge and Competency of Core Skills — initial + at-least-every-12-months core competency
• §2.2 Demonstrating Competency in Garbing and Hand Hygiene — three initial successful garbing evaluations; ongoing every 6 months (Cat 1/2) or every 3 months (Cat 3)
• §2.3 Competency Testing in Aseptic Manipulation — media fill + post-GFT + surface sampling; every 6 months (Cat 1/2) or every 3 months (Cat 3)
• §3.3 Garbing Requirements — additional Cat 3 garbing requirements (sterile garb, covered face/neck)
• §4.2 Facility Design and Environmental Controls — ISO 5/7/8 cleanroom suite requirements
• §5 Certification and Recertification — at-least-every-6-months recertification of classified areas
• §6.2.1, §6.3.1 Environmental Monitoring — air sampling (every 6 months Cat 1/2; monthly Cat 3) and surface sampling (monthly Cat 1/2; weekly + end-of-batch Cat 3)
• §7 / Table 10 — cleaning, disinfection, and sporicidal disinfectant frequencies (sporicidal monthly Cat 1/2 vs. weekly Cat 3)
• §14.3 Establishing a BUD for a CSP / Tables 12, 13, 14 — category-specific BUD ceilings
• §14.4 Additional Requirements for Category 3 CSPs — sterility testing every batch, stability data, increased EM frequency
• §17 SOPs — initial review and at-least-every-12-months SOP review
• Tables 1, 7, 8 — GFT action levels (after garbing >0; after media-fill >3) and EM action levels by ISO class

Official text and current revision status are maintained at uspnf.com. This article is practical guidance, not legal or regulatory advice — consult your State Board of Pharmacy and qualified counsel for compliance determinations specific to your operations.

Related reading

Continue with these companion guides

• USP 795, 797, and 800: A Practical Overview for 503A Pharmacies — How the three chapters interact across non-sterile, sterile, and hazardous-drug compounding.
• Environmental Monitoring for 503A Sterile Compounders — Full action level tables (USP 797 Tables 7 and 8) and the five most common EM inspection deficiencies.
• How to Prepare for a State Board Inspection — 30-day inspection-preparation checklist mapped to USP 797 documentation requirements.
• Compounding Pharmacy Compliance Glossary — Definitions for BUD, CSP categories, CFU, C-PEC, ISO classifications, and every other USP term used in this article.