Security Systems and Monitoring Requirements

What security systems does a dispensary need to be approved in New York?

Every dispensary must have a full commercial security system in place before OCM will allow operations to begin. Security is a condition of licensure and is reviewed during application, pre-opening inspections, routine inspections, and investigations.

These rules exist to:

  • Prevent diversion
  • Protect staff and customers
  • Ensure cannabis inventory is monitored and traceable at all times

Video Surveillance Requirements

Where Cameras Must Cover

OCM requires continuous video coverage of all areas where:

  • Cannabis is stored
  • Cannabis is received, handled, or packaged
  • Sales occur
  • Cash is stored or handled
  • Employees enter or exit
  • Customers enter or exit
  • The vault or secure storage room is located
  • Any restricted-access area exists
  • Any exterior area where cannabis is moved in or out

If OCM or law enforcement cannot see an area on video, it is considered unmonitored, which is a violation.

Camera Performance Standards

Cameras must:

  • Record continuously, 24 hours a day
  • Capture images clear enough to identify people and activity
  • Have sufficient lighting to show all movement
  • Be positioned to eliminate blind spots in required areas

Video Retention

Operators must:

  • Retain video recordings for at least 60 days
  • Store footage on a secure system
  • Provide OCM with an unaltered copy immediately upon request

Alarm System Requirements

Required Alarm Features

Your alarm system must:

  • Detect unauthorized entry into the premises
  • Detect unauthorized entry into the vault or secure storage room
  • Notify law enforcement or a central monitoring station when triggered
  • Include panic buttons if required by local fire or building authorities

Backup Power

Security alarms and surveillance systems must:

  • Remain fully operational during a power outage
  • Function for a minimum of 8 hours without external power

Restricted Access and Internal Controls

Secured Internal Areas

Access must be strictly controlled for:

  • Vault or secure storage rooms
  • Back-of-house areas
  • Product handling rooms
  • Delivery intake areas
  • Cash storage or cash-counting rooms

Doors must be equipped with:

  • Electronic access controls
  • Keycards, PINs, or biometric access
  • Entry logs showing who entered, when, and for how long

Employee Access Rules

Operators must ensure:

  • Only authorized employees access cannabis or cash
  • Access permissions align with job duties
  • Visitors are escorted at all times
  • Contractors are logged, supervised, and restricted

On-Site Storage Security

Vault and Secure Storage

Cannabis inventory must be stored in:

  • A locked room or vault designed for secure storage
  • An area constructed with solid walls or reinforced materials
  • A space that is alarmed and recorded at all times

Cannabis may not be stored:

  • On the sales floor overnight
  • In any unmonitored or unsecured area

Transport and Product Intake

Deliveries and intake must occur:

  • In monitored areas
  • Away from public view
  • Under continuous camera coverage

Unmonitored intake or unloading is treated as a security failure.

Daily Monitoring and Incident Requirements

Required Daily Oversight

Operators must confirm daily that:

  • All cameras are functioning
  • Alarm systems are active and monitored
  • Access logs are intact
  • No blind spots or obstructions exist
  • Recording and storage systems are working properly

Incident Reporting

If a security incident occurs, including:

  • Theft
  • Product loss
  • System failure
  • Tampering

Operators must:

  • Document the incident
  • Notify OCM as required
  • Retain all related video footage

What Inspectors Look For

During inspections, OCM commonly checks for:

  • Missing or improperly positioned cameras
  • Poor camera resolution or lighting
  • Lack of backup power
  • Unmonitored alarm systems
  • Unsecured interior doors
  • Missing or incomplete access logs
  • Propped doors
  • Inventory in public or unmonitored areas

Any of these can result in violations.

Why This Matters

Security failures are treated as diversion risks.

Common consequences include:

  • Failed inspections
  • Corrective action requirements
  • Stop-sale orders
  • Increased inspection frequency
  • License suspension or revocation

A compliant security system protects your license, staff, and inventory.

Related Pages

Source Material