Dispensary: Security Plan DIY Guide


The Dispensary Security Plan is a brief overview of the operations of the entire dispensary.  It essentially summarizes each aspect of operations.  

Special Notes

Note 1
The Security Plan contains a lot of specifications related to security systems and their capabilities and features.  

You can approach this in a few ways:

  1. Keep the specs in the plan and select your actual equipment later on.
  2. Keep the specs in and use the equipment and systems discussed in the plan.
  3. Replace these specifications with the actual specifications of the equipment you plan on using.

Note 2
There are a lot of specifications regarding cameras and systems.  Each state has its own requirements for minimum capabilities of security systems, especially cameras and alarm systems.  The equipment and systems contained in the Security Plan should cover your bases, but double check to make sure the specifications of equipment and systems listed in this plan meet the standards of your state.

Use Cases

Operators and their security team can use this as a guide for what policies and procedures to further develop for operations.

License applicants can use this plan in its entirety in applications when the application requires a section or exhibit solely addressing a security plan.

If the application does not have a page limit for the security plan, we suggest using the entire thing.  If the plan exceeds the page limit, adjust margins and spacing to see where you can save space to keep as much of the content as possible.


Search for each of these terms in the regulations. You're looking for pieces of each regulation that pertain to regulations pertaining to day-to-day operations. Refer to the General Sheet Editing DIY Guide for guidance on what to do with these key words.

  • Video
  • Camera
  • Surveillance
  • Access Control
  • Locked
  • Restricted
  • Access
  • Secure
  • Cash handling
  • Security
  • Emergency
  • Robbery
  • Alarm
  • Glass
  • Recording
  • Any other words you believe relate to security (if any)

Replace All

Search for each of the bolded terms in the Employee Non-compete Agreement sheet, including the brackets. Do a "replace all" and insert the pertinent information needed to replace the term.  The description underneath each bolded term below tells you what information should replace the bolded term. For instance, you would use the search feature in your document editing software to look for [Company *1] and then using the replace all feature, replace [Company *1] with your company name.

[Company *1]

Replace with the name of the company.

[State *1]

Replace with the name of the state in which your business operates or will operate

[City *1]

Replace with the name of the city in which your business operates or will operate

[Regulatory Authority *1]

Replace with the name of the department that regulates dispensaries in your state

[Alarm Company *1]

Replace with the name of the company that will install and monitor your alarm system

[State Regulation *1]

Replace with the name of your state's primary cannabis regulation

[Security Company *1]

Replace with the name of the security company you will use to provide security services for your business.  If none, edit each portion that mentions [Security Company *1] to reflect an in-house security team.

[Security System *1]

Replace with the name of the security system in its entirety.  For example, if your security company installs a security system (cameras, alarms, access control, etc.) that's made by honey well and the system has a specific name given by Honeywell, then you would write "Honeywell [System Name]."  

Alternatively, you can leave this as a general identifier and simply replace [Security System *1] with: Security System.

[Third Party Video Monitoring Center *1]

Replace with the name of the system or company you are using to store video surveillance footage off site.

[Agent ID *1]

Replace with the name of the agent ID card that your state requires all employees to have to work in a dispensary.  You do NOT have to use the word "card" at the end of the title because that word is already in place

Suggested Customizations

We suggest that you read through the sheet and make any additional edits or additions that you see fit. Here are some suggestions to get you started. The following items are in the Security plan in green lettering.  The black italicized descriptions underneath each section of green text contains the suggested edits.

Your state may have a requirement for how large the compliance signs must be and what they have to say.  If so, replace this with the signage size requirement for restricted access signs, and the exact wording that your state's regulations require.

  • 12 inches by 12 inches. The sign will state: “Do Not Enter — Restricted Access Area — Access Restricted to Authorized Personnel Only.” (this appears 3 times)


Your state may have a requirement for how large the lettering on signs must be.  If so, replace "1 inch" with your state's requirement.

  • All lettering will be 1 inch in height or greater


This is a list of signs required to be posted in the dispensary.  If your state requires additional signs, add those to this list.

  • “Customers must remove any items that obstruct individual identification, ...
  • Dispensing Organizations Registration ...
  • Hours of operation
  • “No weapons, explosives, hazardous materials ...
  • “No persons under the age of 21 ...
  • “Distribution to persons under the age of 21 is prohibited.”
  • “Transportation of cannabis or cannabis products across state lines is prohibited.”


This is a list of signs required to be in the sales area. If your state has different requirements for signage to be in the sales area of your dispensary, edit this list to match the requirements.

  • Cannabis purchase limits.
  • “Cannabis consumption can impair cognition and driving, is for adult use only, may be habit forming, and should not be used by pregnant or breastfeeding women.“
  • "Edible cannabis-infused products were produced in a kitchen that may also process common food allergens."
  • "The effects of cannabis products can vary from person to person, and it can take as long as two hours to feel the effects of some cannabis-infused products. Carefully review the portion size information and warnings contained on the product packaging before consuming”.
  • All Restricted Access Areas must be identified by the posting of a sign that is a minimum of 12 inches by 12 inches and that states, "Do Not Enter—Restricted Access Area—Authorized Personnel Only" in lettering no smaller than 1 inch in height.


Look up local fire codes and building codes that might pertain to your dispensary and insert them here if they're relevant.

  • **Insert citations for any local state or local jurisdiction building codes and fire codes that pertain to a retail facility**

Your state may require visitor logs to be kept for a number of years that differs from 5 years.  If so, replace 5 with the correct number of years that your company will keep visitor logs on record.

  • 5 years. The visitor log


Your state may have its own time limit for amount of time waste can be stored on premises.

  • more than 7 years


Your state may have a specific number of years that inventory records must be kept.  If so, adjust this to be the required number of years.

  • 3 years


You may have different names for the rooms in your facility on your floor plan. Insert those names in the document in place of this list, if so:

  • Secure storage room.
  • Vault room
  • Packaging and sale preparation area
  • Product intake area
  • Delivery port

Look up regulations pertaining to waste in the area where your dispensary is located.  If you find any that make sense to mention here, mention them.

  • any other pertinent jurisdictional or state regulations related to waste disposal


This is a common disposal system approved in states with regulated cannabis. If your state regulations describe a different waste disposal method, describe that method in place of this text in the document:

  1. Compostable mixed waste: compost, anaerobic digester, or other facility ...
  2. Non-compostable mixed waste: landfill, incinerator, or other facility with ...

(Paragraph starts with) "[Company *1] will weigh, record and enter all waste and unusable product .......... 
(Paragraph ends with) [Company *1] will fully document all disposed of cannabis in the statewide seed-to-sale tracking system, including:"

  • Product Description - A description of  ...
  • Methods - The method of ...
  • Date and Time - The date and time of ...


If your state has a different required amount of time for waste record storage insert that number of years here.

  • at least 5 years.


You may not have a bank but rather be using a secure off-site cash storage facility.  If so, change the wording of this section in the document to accurately reflect the type of facility where you cash will be stored.

  • (Paragraph starts) "As needed, the security team/security contractor will transport currency from [Company *1] to a pre‐designated bank..... (all the way through to) Any incidents during transportation will be thoroughly documented as outlined below, in Section 4, “Documenting Incidents.”" (Paragraph ends)


Your state may or may not have a reporting requirement for this situation.  If not, maintain the 7 days, or remove the statement that the state will be notified.

  • within 7 calendar days


Check record keeping number of years requirement in your state cannabis regulations

  • for 5 years


Your state may have a specific number of years that inventory records must be kept.  If so, adjust this wording in the document:

  • 3 years from


Add to the list of information that your company will report to the regulatory authority when you detect loss, theft or diversion.  Your state may require additional information and if not you may want to add additional information.

  • a. Name and address of the dispensary.
  • b. Amount and type of cannabis lost or stolen.
  • c. Circumstances surrounding the theft or loss of cannabis.
  • d. Date and time of loss or theft.
  • e. The date the loss or theft was discovered.
  • f. The person(s) who discovered the loss or theft.
  • g. The person(s) responsible for loss or theft.
  • h. Any other information the reporter believes might be helpful in establishing the cause of the loss or theft.


Your state may require a different number of years for this record storage.  If so, change this to the correct number.

  • records electronically for 5 years


If your state regulation requires that any additional records be kept, add them to this list:

  • 1) Operating procedures;
  • 2) Inventory records, policies, and procedures;
  • 3) Security records; Incident Reports; Visitor Logs
  • 4) Audit records;
  • 5) Staff training plans and completion documentation;
  • 6) Staffing plan; Employee records; and
  • 7) Business records, including but not limited to: ...


When you save the document, if using it for an application, make sure to title the document in the specific way that the application requires. If not using for an application, keep the document title as is, or change it to whatever you desire.