In the evolving landscape of cannabis and psilocybin regulations, security remains a cornerstone to prevent theft, diversion, and unauthorized access. These requirements are mandated by state agencies like Colorado’s Marijuana Enforcement Division (MED) and Department of Regulatory Agencies (DORA), and Oregon’s Oregon Liquor and Cannabis Commission (OLCC) and Oregon Health Authority (OHA). Below, I detail the key regulations for dispensaries, cultivation sites, and therapeutic centers, drawing from official rules and industry guides. Note that while cannabis often follows a commercial retail model with stringent surveillance, psilocybin emphasizes therapeutic safety with tailored, less commercialized security. Always consult official state resources for compliance, as rules can update.
[SSAE 16/18 Physical Security Assessment ToolEvaluate and document physical security controls for SSAE 16/18 compliance with our comprehensive assessment framework. must comply with Rules 3-220 and 3-225 of the Colorado Marijuana Code, emphasizing robust systems to protect premises and inventory. Requirements focus on surveillance, alarms, locks, and access control to deter threats and ensure traceability.
Category Key Requirements
Video Surveillance
- Continuous 24/7 recording of limited access areas, ingress/egress points, and perimeters.
- Cameras must capture clear images, including facial features of customers and employees.
- High-resolution coverage in all lighting conditions; retention for at least 90 days (on-site and backed up).
- Equipment stored in locked, secure areas; battery backup for outages.
Alarm Systems
- Professionally installed, state-of-the-art systems with round-the-clock monitoring.
- Detect unauthorized entry; include panic buttons and immediate law enforcement notification.
- Must cover all limited access areas with marijuana items.
Locks and Access Control
- Commercial-grade, non-residential locks on all ingress/egress points.
- Modern solutions like keyless entry, biometric locks, or access control systems required to prevent key duplication risks.
- Auditable access trails for compliance; secure storage for cash and products in safes or vaults.
- Outdoor/greenhouse areas must be fenced to prevent unauthorized access.
Perimeter and Interior Defenses
- Permanent walls, doors, and fencing around premises.
- Safety glass, polycarbonate panels, or window films to resist break-ins.
- Motion detectors and glass break sensors integrated with alarms.
Other Mandates
- 24/7 video surveillance with 90-day retention. - Environmental standards integrated with security (e.g., locked refrigerated storage). - In Denver, cash and products must be locked in safes, including refrigerated items. Violations can lead to fines or license revocation.
Recent updates from HB25-1209 streamline regulations but maintain these security baselines.
Colorado Psilocybin Healing Center Security Regulations
Under the Natural Medicine Act (Proposition 122), psilocybin healing centers focus on supervised sessions with security tailored to therapeutic settings. Requirements are outlined in Rule 8025, with reduced mandates for micro-healing centers (storing ≤750mg total psilocin). No retail sales; emphasis on safe storage and facility plans.
Category Key Requirements
Storage and Secure Facilities
- Psilocybin must be stored securely on-site; micro-centers limited to 750mg (≈10g dried mushrooms), standard centers unlimited above that threshold.
- Detailed security plans required for licensing, including surveillance and access controls.
- Facilities must comply with zoning (≥1,000 feet from schools/childcare); site maps/diagrams for verification.
Surveillance and Monitoring
- Surveillance as per state regulations (e.g., covering ingress/egress and limited access areas).
- Reduced requirements for micro-centers; standard centers follow full protocols similar to medical facilities.
Access Controls and Safety
- “Authorized Personnel Only” signage for restricted areas.
- Secure outdoor administration areas (if applicable) with hazard-free boundaries and verification.
- Proof of property control (deed/lease) and security plans submitted pre-operation.
- No operations from private residences; comply with local zoning.
Other Mandates
- Display licenses, safe transportation info, and complaint procedures.
- Report adverse events; integrate with VA/federal programs per 2025 Working Group. Low-risk exposure monitoring shows minimal issues in regulated settings.
Licenses issued since early 2025; costs and waitlists reflect growing demand.
Oregon Cannabis Security Regulations
Oregon’s recreational marijuana licensees follow OAR Chapter 845, Division 25 (e.g., 845-025-1400 to 1460), requiring comprehensive security to safeguard premises and prevent diversion. Focus on high-tech surveillance, alarms, and physical barriers; violations categorized I-III.
Category Key Requirements
Video Surveillance
- 24/7 continuous recording at min. 1280x720 px, 10 fps; clear images within 15 ft of ingress/egress, limited access, sales, and waste areas.
- Cover all perimeters, high-risk zones; battery backup (1 hour); off-site backups (30 days min.); on-site retention 90 days.
- Date/time embedded; failure notifications within 1 hour; no activities in uncovered areas.
Alarm Systems
- Fully operational, detecting unauthorized entry; at least two panic buttons (including portable); immediate law enforcement/security notification.
- Exemption if representative on-site 24/7 when closed.
Locks and Access Control
- Commercial-grade, non-residential locks on all external doors/gates; steel doors/frames for storage areas.
- Limited access areas enclosed; unique credentials (cards, biometrics) with multi-factor authentication; daily visitor logs (2-year retention).
- Secure delivery vehicles with lockboxes; GPS tracking.
Perimeter and Interior Defenses
- Permanent walls/doors; high-intensity lighting (motion-activated); safety glass/polycarbonate for resistance.
- Glass break/motion detectors; TL-rated safes/vaults for products/cash.
- Waste secured, held 3 days under camera before disposal.
Other Mandates
- Approved security plans pre-inspection; waivers for alternatives.
- No minors/under 21 access; CTS tracking for inventory.
- 2025 updates from SB 907 verify property ownership but maintain security.
Requirements vary by license type (e.g., retail vs. cultivation).
Oregon Psilocybin Service Center Security Regulations
Under ORS 475A and OAR 333-333, psilocybin service centers prioritize client safety in therapeutic models, with rules updated in 2025 (e.g., temporary amendments to OAR 333-333-4300 for hours). No take-home; focus on monitored sessions and confidential storage.
Category Key Requirements
Physical Security and Safety
- Emergency plans for evacuation, medical issues, and power outages; notify OHA of changes.
- Hazard-free administration areas (temperature-controlled indoors; marked boundaries outdoors).
- Accessible restrooms (escorted if off-site); waste disposal per laws (products rendered unusable on-site or transferred).
- Emergency repairs notified to OHA within 5 days; no subletting.
Surveillance and Monitoring
- Fully operational video system, but no equipment in administration areas.
- Recordings of sessions only with consent (portable devices; 5-year retention; free viewing).
- Continuous client monitoring by facilitators (backup within 15 min).
Storage
- Products in locked, enclosed limited access areas (steel door/frame, commercial lock) or locked safes.
- Refrigerated storage temperature-controlled; adequate safeguards against theft/diversion.
Access Controls
- Identification badges for staff/visitors; accompany visitors; daily logs (2 years).
- No under-21 on premises (except repairs); license reps present during sessions.
- ID verification for clients (21+); no client product removal.
- Secure records (5 years; prevent unauthorized access); weapons policies if allowed.
Other Mandates
- Limited access areas identified; transfers only by licensees.
- Data privacy for client info; 2025 SB 303 requires aggregated demographic reporting. Temporary uses limited to 6 AM–11:59 PM.
cannabisrisk.diy ## Sign up for Canna Secure
Protecting Cannabis Businesses from Breaches & Audit Failures
Subscribe
.nc-loop-dots-4-24-icon-o{--animation-duration:0.8s}
.nc-loop-dots-4-24-icon-o *{opacity:.4;transform:scale(.75);animation:nc-loop-dots-4-anim var(--animation-duration) infinite}
.nc-loop-dots-4-24-icon-o :nth-child(1){transform-origin:4px 12px;animation-delay:-.3s;animation-delay:calc(var(--animation-duration)/-2.666)}
.nc-loop-dots-4-24-icon-o :nth-child(2){transform-origin:12px 12px;animation-delay:-.15s;animation-delay:calc(var(--animation-duration)/-5.333)}
.nc-loop-dots-4-24-icon-o :nth-child(3){transform-origin:20px 12px}
@keyframes nc-loop-dots-4-anim{0%,100%{opacity:.4;transform:scale(.75)}50%{opacity:1;transform:scale(1)}}
Email sent! Check your inbox to complete your signup.
No spam. Unsubscribe anytime.
