High-Alert Medications: the ISMP List and How to Attach a Real Safeguard to Every Entry

A medication earns high-alert status not because it causes errors more often than other drugs, but because a single error with it is far more likely to kill or permanently injure a patient. The Institute for Safe Medication Practices (ISMP) publishes the reference most US hospitals build from: the List of High-Alert Medications in Acute Care Settings. It names the drug classes where ordinary vigilance is not enough and the institution has to build structural defenses — checks that catch an error before it reaches the patient, not training that asks staff to be more careful.

This page is written for patient-safety officers, pharmacy leadership, quality directors, risk managers, and P&T committee members who own a hospital’s high-alert medication program — not as clinical guidance for a specific order or patient. It covers what distinguishes ISMP’s list from an ordinary risk list, the three safeguard strategies named in the brief for this page (independent double-checks, standardized concentrations, and auto-stop orders) matched to the specific failure mode each one is built to catch, and the step ISMP itself flags as commonly skipped: turning a published national list into an institution-specific document with a documented safeguard attached to every single entry.

What “high-alert” means, and what it doesn’t

ISMP defines high-alert medications as drugs that bear a heightened risk of causing significant patient harm when used in error — not drugs with a higher raw error rate. Errors with insulin, concentrated potassium chloride, or IV opioids happen at roughly the same frequency as errors with lower-risk drugs; what differs is the consequence when one gets through. That distinction is the reason the safety strategy for this list looks different from ordinary medication-error prevention: instead of relying on a clinician catching the mistake, the program is built to make the error structurally harder to make, or to intercept it before it reaches the patient, because the cost of a miss is so much higher.

This is also distinct from a hazardous drug list (handling risk to staff — chemotherapy spill precautions, closed-system transfer devices, USP <800>) and from a look-alike/sound-alike (LASA) list, which addresses a name-confusion risk rather than a dosing/administration risk. A drug can appear on more than one list — several chemotherapy agents are both high-alert and hazardous — but the three lists exist for different reasons and call for different countermeasures. Conflating them is a common early mistake when a program is first being built.

ISMP’s List of High-Alert Medications in Acute Care Settings

ISMP maintains the acute-care list (a companion list exists for community/ambulatory settings) as a set of drug classes, plus a shorter set of specific individual medications called out by name because the class-level grouping would otherwise miss them. The classes consistently represented on the list, across its periodic revisions, include:

• Anesthetic agents, general, inhaled and IV (e.g., propofol)
• Antiarrhythmics, IV (e.g., amiodarone, lidocaine)
• Antithrombotic agents, including anticoagulants, factor Xa inhibitors, direct thrombin inhibitors, and thrombolytics
• Chemotherapeutic agents, parenteral and oral
• Concentrated electrolytes for injection (potassium chloride, potassium phosphate, hypertonic saline greater than 0.9%)
• Dextrose, hypertonic, 20% or greater
• Epidural and intrathecal medications
• Inotropic medications, IV (e.g., digoxin, milrinone)
• Insulin, subcutaneous and IV
• Moderate sedation agents, IV and oral
• Neuromuscular blocking agents
• Opioids — IV, transdermal, and oral, including patient-controlled analgesia (PCA)
• Parenteral nutrition solutions

Because the exact wording, class boundaries, and specific named drugs change between revisions, treat the list above as the stable core rather than a substitute for the current published document — pull the current PDF directly from ISMP (hosted via ECRI, see Primary sources below) before building or auditing a formulary against it, and re-pull it on whatever cadence your P&T committee reviews the formulary. The resource page hosting the current list was itself last updated January 10, 2024, though that reflects the hosting page, not necessarily the list’s own most recent content revision — confirm the revision date printed on the document itself.

Why these classes specifically — the failure mode drives the safeguard

Each entry on the list earns its place through a specific, recurring failure pattern, and that pattern is what should determine which safeguard gets attached to it — a generic “be careful” policy note does not address any of them:

• Insulin and IV opioids — narrow therapeutic index plus a common, easy-to-make error (unit-to-mL confusion, decimal placement, wrong concentration selected on an infusion pump) that produces a rapid, severe, sometimes irreversible physiologic consequence (hypoglycemic coma, respiratory depression).
• Concentrated electrolytes (KCl, hypertonic saline) — the undiluted or wrongly-diluted form is lethal if pushed or infused too fast, and the vial or bag looks unremarkable next to a correctly diluted product; the failure is a storage/selection error, not a calculation error.
• Anticoagulants and thrombolytics — a narrow window between therapeutic and hemorrhagic effect, compounded by renal function, drug interactions, and lab-result lag, so the risk accumulates silently over a course of therapy rather than showing up at the moment of administration.
• Neuromuscular blocking agents — render a patient unable to breathe or signal distress; an error (wrong patient, given outside a controlled airway setting) is catastrophic and the patient cannot self-report the problem.
• Chemotherapy — dosing is frequently individualized to body-surface-area or renal function, so a transcription or calculation error compounds an already-narrow safety margin, and many agents cause harm that is not reversible once administered.

The three core safeguard strategies, matched to the failure mode

Independent double-checks

An independent double-check requires a second clinician to derive the dose, rate, or pump setting independently — from the order, not from what the first clinician already entered — and then compare results. A check where the second person simply confirms what’s already on the screen catches almost nothing, because it inherits the first person’s error along with their conclusion; ISMP’s own guidance on this point is explicit that the value of the check depends entirely on the second calculation being performed cold. This is the right safeguard where the failure mode is a calculation or programming error that a second independent calculation would catch: insulin drip rates, heparin drip titration, chemotherapy dosing, and PCA pump programming are the classic applications. Because independent double-checks carry a real workflow cost and lose effectiveness with overuse (staff start treating them as a formality once every order requires one), most programs restrict the requirement to the highest-risk subset of orders — typically high-alert IV infusions and chemotherapy — rather than the entire high-alert list.

Standardized concentrations

Standardizing the concentrations available for high-alert IV infusions — a single approved concentration per drug per care area, built into the smart-pump drug library so the nurse selects the drug rather than entering a concentration — removes the step in the workflow where a math error most often happens. This is the right safeguard for drugs administered as a continuous infusion at a rate calculated from concentration — opioids, insulin, heparin, and vasopressors are the standard targets — because it doesn’t just reduce error likelihood, it eliminates the calculation step entirely for the most common order pattern. It does not help with a storage-selection error (the wrong vial pulled from the shelf) or a wrong-patient error, which is why it is deployed alongside, not instead of, the other two strategies.

Auto-stop (hard-stop) orders

An auto-stop order builds an expiration into the order itself — the medication stops administering, or the order requires active renewal, after a defined interval — rather than continuing indefinitely until someone remembers to reassess. This targets a different failure mode from the two above: therapy that was appropriate when started but becomes unsafe as the patient’s status changes, and nobody re-evaluates it because nothing forces the question. Anticoagulation (renal function shifts, a new interacting drug, an upcoming procedure), moderate sedation, and opioid orders for acute pain are the standard applications — a time-limited or renewal-forcing order converts “someone should have caught that” into a system behavior that happens whether or not anyone remembers to look.

Building an institution-specific list — the step most hospitals skip

The most common gap in a high-alert medication program is not omitting the ISMP list — it’s adopting it unchanged as a policy attachment, with no safeguard actually mapped to any specific entry. A national list describes categories of risk in the abstract; it does not know your formulary, your smart-pump library, your order sets, or your own near-miss history. Building the institution-specific version means, for every drug on your formulary that falls into an ISMP class:

1. Confirm it’s actually on your formulary and identify every route/form in active use (a drug can be high-alert in one form on your list and not stocked in another).
2. Pull internal event-reporting and near-miss data for that drug or class — your own history is often a better predictor of where the next error happens than the national list alone.
3. Assign at least one of the three safeguard strategies above to the entry, matched to its actual failure mode as described above — not a default “double-check everything” rule, which erodes compliance on the orders that need it most.
4. Confirm the safeguard is actually built into the system it needs to live in — the smart-pump library, the EHR order set, the auto-stop interval in the pharmacy system — not just written into a policy document nobody consults at the point of administration.
5. Route the finished list through P&T committee approval and set a review cadence tied to ISMP’s own revision schedule and to your internal event data.

Accredited hospitals are also expected to maintain a written, institution-specific high-alert medication list with defined safe-use processes as part of their medication management standards — the exact standard number and wording vary by accreditation manual edition, so confirm the current citation against your organization’s live accreditation manual rather than citing a specific standard number from this page.

Frequently asked questions

Is the ISMP high-alert list the same as a hazardous drug list?

No. High-alert status is about the consequence of an administration error to the patient. Hazardous drug status (governed separately, notably by USP <800>) is about handling risk to staff — exposure during preparation and administration. Some drugs, chemotherapy agents especially, are on both lists for different reasons, and each list calls for a different set of controls.

Do all hospitals use the identical ISMP list?

No, and they shouldn’t. ISMP publishes the national reference; each institution is expected to adapt it to its own formulary, care settings, and event history, then attach specific safeguards to each entry — that adaptation step is the actual subject of this page and the part most commonly skipped.

What’s the difference between an independent double-check and a routine verification?

A routine verification has the second person confirm what the first person already entered. An independent double-check has the second person calculate the dose, rate, or setting from the original order without seeing the first person’s result, then compare. Only the independent version reliably catches a calculation error, because a confirmation check inherits the first person’s mistake along with their answer.

Why not just require an independent double-check on every high-alert order?

Because the safeguard’s effectiveness depends on staff treating it as a genuine independent recalculation rather than a rubber stamp, and requiring it on every order — including low-complexity, low-risk ones — is the fastest way to turn it into exactly that. Most programs reserve the requirement for the subset of orders where a calculation error is the actual failure mode (infusion rates, chemotherapy dosing, PCA programming) and use standardized concentrations or auto-stop orders for the classes where those safeguards fit the risk better.

What this page could not verify

The exact category boundaries and specific named drugs on ISMP’s current list can change between revisions; this page describes the stable core of classes that has persisted across ISMP’s recent revisions rather than reproducing the current document verbatim, and the current PDF should be pulled directly from ISMP/ECRI before it is used to audit a formulary. The precise current wording and standard number of the Joint Commission medication management requirement referenced above was not independently confirmed against a specific accreditation manual edition for this page — verify it against your organization’s current manual before citing a standard number in policy.

Primary sources

• Institute for Safe Medication Practices, List of High-Alert Medications in Acute Care Settings, hosted by ECRI.
• Institute for Safe Medication Practices, ISMP List of Confused Drug Names (the related look-alike/sound-alike reference).
• See also this site’s guide to tall man lettering for the FDA and ISMP name-differentiation lists that address the LASA risk overlapping several high-alert classes.