Ohio has legalized recreational cannabis. Click HERE to learn more about cannabis business opportunities in Ohio.

Access Control

Cannaspire knows the security of your business depends on controlling access to all areas. Choosing an access control system can require hours spent piecing together an assortment of software and hardware devices. Let our security consultants help streamline the process of selecting the right components for your business and construct a truly comprehensive and fully-integrated access control system that’s right for your specific needs.

Managing personnel traffic within your facility is vital. For instance, a dispensary vault or grow room should only be accessed by authorized staff. Using access control systems, you can control which employees are allowed to enter secure areas such as your drying rooms, security room, and safe area(s) at designated times.

Whether you want to secure access to a room, a dispensary, a growing warehouse, or an infused product manufacturing floor our security consultants are ready to help keep you and your assets secure.

Why Cannabis Businesses Need Access Control

Access control for cannabis businesses is more than simply a keypad or keycard system used to keep unauthorized people out of sensitive or restricted areas. Access control systems can now be used to manage different levels of employee and administrative access to protect valuable information and products. There are many reasons your cannabis facility may need to develop an access control system, including physical security, data security, and regulatory compliance.

Physical Security

Restricting access to areas of your cannabis facility can be crucial to physical security measures, inhibiting unlawful entry to the premises and theft from secure locations like grow rooms and product storage areas. This risk is comprised of both external and internal threats, as illicit marijuana sales are a prominent motivator of theft from cannabis businesses. Your facility will need to be secure from would-be robbers, as well as employees who may attempt to abscond with valuable products. Along with physically securing doors, your business will be provided with notifications and alarms alerting you to every entry or breach that occurs in your facility. Paired with one or more armed or unarmed security guards, an access control system will manage and monitor anyone who may enter or exit your most secure areas at any time.

Data/Information Security

Businesses in the cannabis industry often deal with sensitive information, such as transportation routes for product and cash transactions, medical patient information, and security control information for the facility itself. If any of these are compromised, it could spell disaster for even an established business, so be sure to protect both you and your customer’s valuable information. By ensuring that your data is secure, you can also give your business additional protection against cyber threats and litigation long-term.

Regulatory Compliance

Although regulations vary between states, any facility that houses cannabis products will be subject to a number of access control requirements. Without meeting these compliance standards, you will not be able to operate a cannabis business in your state, so maintaining good standing is crucial to success. Entry and exit from all secure locations must be recorded and available to law enforcement and compliance officers upon request. A secured access point is required between any area where customers or patients are allowed and the storage area for marijuana products. The secure space helps to prevent inventory losses and security breaches from external and internal theft along with satisfying the regulatory needs in your state.

Types of Access Control Systems

Local Host Access Control

The traditional method of access control, locally hosting your access control system, requires the installation of all equipment, servers, and software at your facility, rather than offsite like more modern options. While this system offers less flexibility, it is an option for an organization that desires to handle all aspects of their access control in-house.

Other types of access control:

Mobile Device and Smartphone-Based Access Control

Cloud-Based Access Control 

IoT-Based Access Control

Access Control Methods

Depending on the unique needs of your organization, access control management can take a number of forms, which the following methodologies will each be able to accommodate.

Role-Based Access Control (RBAC)

Role-based access control systems designate access based on pre-established employee roles. In the case of a dispensary, different access roles would be given to management, dispensary technicians, security personnel, and delivery staff. Each employee group has their own access card or keycode, along with their own levels of access to different locations within the facility. This model allows administrators to easily manage access levels uniformly across an organization.

Discretionary Access Control (DAC)

Discretionary access control systems allow employees, who are granted access to areas or information by an administrator, to extend those permissions to other groups or individuals if necessary. This allows for the easiest flow of information and requires the least oversight but inhibits the overall system security. These permissions can be limited or eliminated through the use of a mandatory access control system.

Mandatory Access Control (MAC)

Mandatory access control systems give the administrative user complete control over restrictions and allowances for individual employees. While this gives businesses the greatest confidentiality and control over individual access levels for employees and auxiliary staff, it also requires the greatest amount of attention and maintenance.

Access Control Process

Authorizing a New Profile

To begin the process of developing your access control system, you will first need to authorize the creation of any access profiles for employees. You must determine a set of permissions for this new profile, dictating where that employee can and cannot access. If using an RBAC model, you can do this by assigning the new profile to a premade role (let’s use a dispensary technician at an adult-use or medical dispensary for this example). The new dispensary technician may have access to the product storage and main retail areas, but will not be able to enter the security office. Cannaspire can work with your business to create comprehensive sets of employee privileges.

Authenticating Profile

Once an employee is assigned access privileges, they will need to provide their credentials to unlock secure locations. This may be in the form of a keycard, PIN, mobile phone application, or a device unique to your organization.

Granting Access

As soon as the employee’s credentials are authenticated by your access control system, the door will record the activity and unlock, granting access. If the profile is not validated, this will trigger an alert and the door will remain locked.

Managing Profiles

As your organization grows and changes over time, you may need to manage the existing profiles of employees, add new employees, or remove terminated employees. Administrators will be able to make these changes, as well as adjust access privileges to individuals who assume new responsibilities and need access to new areas.

Monitoring Profiles

Your access control system records every validation, entry, and exit of your secured areas, giving your organization the ability to monitor employee behavior. Your organization will also be able to identify any possible issues with the system and adjust accordingly in real-time to prevent any lapses in the security of your business.

Let us help you minimize your access vulnerabilities today.

We ensure the compliance of your security system by providing you with a custom security floor plan for submission to your state’s regulatory commission