Security System Requirements SOP

Camera Specifications

• Resolution: Minimum 1080p (1920×1080) recommended for facial recognition
• Frame Rate: Minimum 15 fps (20-30 fps recommended for high-traffic areas)
• Recording: 24/7 continuous recording (motion-activated not acceptable)
• Retention: 90 days minimum (some states require 40-180 days)
• Color: Color recording required (not black & white)
• Timestamp: Date and time stamp on all recordings
• Night Vision: Infrared or low-light capability for 24/7 coverage

Required Camera Locations

• Entry/Exit Points: All doors (front, back, emergency exits) with clear view of faces
• Sales Floor: Point-of-sale terminals, customer service areas, product displays
• Storage Areas: Vaults, inventory rooms, limited-access areas
• Cash Handling: Safes, cash counting areas, armored car pickup zones
• Loading Docks: Receiving and shipping areas
• Parking Lots: Employee and customer parking (if required by state)
• Perimeter: Building exterior, fencing, gates

Camera Placement Best Practices

• Mount cameras 8-10 feet high to prevent tampering
• Angle cameras to capture faces (not just tops of heads)
• Eliminate blind spots (overlap camera coverage)
• Avoid backlighting (windows, bright lights in frame)
• Test camera views before final installation
• Submit camera placement diagram to state authority for approval

Recording System Requirements

• DVR/NVR: Commercial-grade digital video recorder with sufficient storage
• Storage Capacity: Calculate based on camera count, resolution, retention period
• Backup: Redundant storage (RAID, cloud backup) recommended
• Remote Access: Secure remote viewing for regulators and management
• Export Capability: Ability to export footage in standard formats (MP4, AVI)
• Audit Trail: Log all video access and exports

Alarm System Components

• Control Panel: Commercial-grade alarm panel with cellular backup
• Door/Window Sensors: Magnetic contacts on all entry points
• Motion Detectors: Passive infrared (PIR) sensors in all rooms
• Glass Break Detectors: For windows and glass doors
• Panic Buttons: At POS terminals, manager offices, back rooms
• Keypads: At main entry and employee areas for arming/disarming
• Sirens: Interior and exterior audible alarms

24/7 Monitoring Requirements

• Contract with UL-listed central monitoring station
• Cellular and/or internet communication (landline not sufficient)
• Automatic notification to monitoring station upon alarm trigger
• Monitoring station contacts designated personnel and/or law enforcement
• Response time: monitoring station must respond within 5 minutes
• Maintain current contact list with monitoring company

Law Enforcement Notification

• Some states require direct law enforcement notification (CA, CO)
• Obtain alarm permit from local police department (if required)
• Provide law enforcement with facility layout and emergency contacts
• Minimize false alarms (excessive false alarms may result in fines or permit revocation)
• Test alarm system monthly and document tests

Alarm Response Procedures

• Designate 2-3 authorized responders (managers, owners)
• Responders must be available 24/7 and within 30 minutes of facility
• Upon alarm, responder must go to facility and meet law enforcement
• Do not enter facility alone if intrusion suspected
• Document all alarm events (date, time, cause, response)
• Report alarm events to state authority if required

Limited-Access Areas

Areas where cannabis is stored, processed, or handled must be limited-access:

• Cultivation rooms (grow, veg, flower, drying, curing)
• Processing and extraction areas
• Packaging and labeling rooms
• Inventory storage and vaults
• Dispensary back-of-house (storage, cash room)
• Waste storage areas

Access Control Methods

• Electronic Locks: Keycard, badge, or biometric (fingerprint) systems
• Mechanical Locks: Commercial-grade deadbolts (minimum if electronic not feasible)
• Key Control: If using keys, maintain key log and restrict distribution
• Badge System: Issue employee badges with photos and access levels
• Visitor Management: Sign-in log for all non-employees
• Escort Policy: Visitors must be escorted at all times in limited-access areas

Access Logging & Auditing

• Electronic access systems must log all entries (who, when, where)
• Retain access logs for 90 days minimum (some states require longer)
• Review access logs weekly for unauthorized access attempts
• Immediately deactivate access for terminated employees
• Conduct quarterly access rights review (remove unnecessary access)

Visitor Access Procedures

• Maintain visitor log (name, company, purpose, time in/out, escort)
• Issue temporary visitor badges
• Verify ID for all visitors (government-issued photo ID)
• Escort visitors at all times (no unaccompanied access)
• Restrict visitor access to necessary areas only
• Retain visitor logs for 7 years

Safe & Vault Requirements

• Weight: Minimum 750 lbs OR permanently bolted to floor/wall
• Rating: TL-15 or TL-30 rating recommended (tool-resistant)
• Dual Control: Two employees required to open (separate combinations/keys)
• Location: Inside limited-access area, covered by camera
• Contents: Cash, high-value inventory (concentrates, edibles), sensitive documents
• Access Log: Maintain log of all safe openings (date, time, employees, reason)

Building Security Features

• Doors: Commercial-grade steel or solid core doors on all entry points
• Windows: Security film, bars, or shutters on accessible windows
• Walls: Reinforced walls between limited-access areas and public spaces
• Roof: Secure roof access (locked hatches, no skylights)
• Perimeter: Fencing (6-8 feet) with barbed wire or anti-climb features (if required)
• Lighting: Exterior lighting on all sides of building (motion-activated or dusk-to-dawn)

Cash Handling Security

• Cash drop safes at POS terminals (employees cannot retrieve cash)
• Limit cash in registers to $500-1,000 maximum
• Conduct cash drops every 2-4 hours during business
• Count cash in secure back room (not on sales floor)
• Use armored car service for bank deposits (recommended)
• Vary deposit times and routes (if self-transporting)
• Two employees required for cash transport

When Security Guards Are Required

• California: Cultivation facilities over 10,000 sq ft
• Nevada: All cultivation and production facilities
• Illinois: Dispensaries in high-crime areas (determined by local authority)
• Massachusetts: Optional but recommended for large facilities
• Check state and local requirements for your specific license type and location

Security Guard Qualifications

• State-licensed security guard (verify license is current)
• Background check and cannabis employee badge (if required)
• Training in cannabis industry security (recommended)
• CPR/First Aid certification (recommended)
• No firearms unless specifically licensed and approved by state authority

Security Guard Duties

• Monitor security cameras and alarm systems
• Control access to limited-access areas
• Conduct regular facility patrols (interior and exterior)
• Respond to alarms and security incidents
• Document all security events in daily log
• Assist with opening and closing procedures
• Coordinate with law enforcement during emergencies

Backup Power Requirements

• UPS (Uninterruptible Power Supply): Minimum 4 hours backup for security systems
• Coverage: Cameras, DVR/NVR, alarm panel, access control system
• Generator: Optional but recommended for extended outages
• Testing: Test backup power monthly and document results
• Maintenance: Replace UPS batteries every 3-5 years

Security System Maintenance Schedule

• Daily: Verify cameras recording, check alarm system status
• Weekly: Review camera footage quality, test panic buttons
• Monthly: Test alarm system (all sensors), test backup power
• Quarterly: Clean camera lenses, review access logs, update firmware
• Annually: Professional inspection of entire security system
• Maintain maintenance log with dates, tasks performed, and technician signatures

System Failure Response

• Notify state authority within 24 hours of security system failure
• Implement compensating controls (additional staff, temporary cameras)
• Repair system within 72 hours (or timeframe specified by state)
• Document failure, response, and repair in incident log
• Submit failure report to state authority if required