In November 2006, CMS changed its requirement for security of medications, stating that nonscheduled drugs must be stored in a secure area and locked when appropriate. All schedule II through V drugs must be locked in a secure area. CMS defined a “secure area” as one in which medications are stored to prevent “unmonitored access by unauthorized individuals.”