Every applicant and licensee shall develop and implement a security plan. At a minimum, the security plan shall include a description of the security measures to be taken to: (a) Prevent access to the manufacturing premises by unauthorized personnel and protect the physical safety of employees. This includes, but is not limited to: (1) Establishing physical barriers to secure perimeter access and all points of entry into a manufacturing premises (such as locking primary entrances with commercialgrade, non-residential door locks, or providing fencing around the grounds, driveway, and any secondary entrances including windows, roofs, or ventilation systems); (2) Installing a security alarm system to notify and record incident(s) where physical barriers have been breached; (3) Establishing an identification and sign-in/sign-out procedure for authorized personnel, suppliers, and/or visitors; (4) Maintaining the premises such that visibility and security monitoring of the premises is possible; and (5) Establishing procedures for the investigation of suspicious activities. (b) Prevent against theft or loss of cannabis and cannabis products. This includes but is not limited to: (1) Establishing an inventory system to track cannabis and cannabis products and the personnel responsible for processing it throughout the manufacturing process; (2) Limiting access of personnel within the premises to those areas necessary to complete job duties, and to those time-frames specifically scheduled for completion of job duties; (3) Supervising tasks or processes with high potential for diversion (including the loading and unloading of cannabis transportation vehicles); and (4) Providing designated areas in which personnel may store and access personal items.
(c) Secure and back up electronic records in a manner that prevents unauthorized access and that ensures the integrity of the records is maintained. Authority: Sections 26012; 26013; and 26130, Business and Professions Code. Reference: 26011.5; and 26051.5, Business and Professions Code. §40205. Video Surveillance. (a) At a minimum, licensed premises shall have a digital video surveillance system with a minimum camera resolution of 1280 × 720 pixels. The video surveillance system shall be able to effectively and clearly record images of the area under surveillance. (b) The video surveillance system shall be accessible via remote access by the licensee. (c) To the extent reasonably possible, all video surveillance cameras shall be installed in a manner that prevents intentional obstruction, tampering with, and/or disabling. (d) Areas that shall be recorded on the video surveillance system include the following: (1) Areas where cannabis or cannabis products are weighed, packed, stored, quarantined, loaded and/or unloaded for transportation, prepared, or moved within the premises; (2) Limited-access areas; (3) Security rooms; (4) Areas containing surveillance-system storage devices shall contain at least one camera to record the access points to such an area; and (5) The interior and exterior of all entrances and exits to the premises. (e) The surveillance system shall record continuously 24 hours per day and at a minimum speed of 15 frames per second. (f) All recording and monitoring equipment shall be located in secure rooms or areas of the premises in an access-controlled environment. (g) All surveillance recordings shall be kept on the licensee’s recording device for a
minimum of 90 days. (h) All video surveillance recordings are subject to inspection by the Department and shall be copied and sent, or otherwise provided, to the Department upon request. (i) The video recordings shall display the current date and time of recorded events. Time is to be measured in accordance with the U.S. National Institute of Standards and Technology standards. The displayed date and time shall not significantly obstruct the view of recorded images.