What are the New York Cannabis Dispensary Security Plan Requirements?

What Your Security Plan Must Include

Your written security plan must:

• Be formally approved by the licensee
• Address theft, diversion, loss, and emergency risks
• Define staff roles and reporting responsibilities
• Explain how cannabis, cash, and restricted areas are secured
• Be updated whenever operations change

Material changes that require updates include:

• Staffing changes
• Store layout modifications
• New equipment or surveillance systems
• Access control changes

If the written plan does not match real operations, it is a violation.

Video Surveillance Requirements

Continuous video monitoring is required.

You must have 24/7 coverage of:

• All areas where cannabis is stored
• All areas where cannabis is handled or sold
• All cash-handling areas
• All entrances and exits

Footage must:

• Record continuously
• Be retained for at least 30 days
• Be stored securely
• Be accessible during inspections
• Show clear, unobstructed views

Blind spots are not permitted.

Alarm System Requirements

You must maintain a functioning alarm system.

Alarm coverage must include:

• Store perimeter
• Cannabis storage areas
• Cash storage areas
• Product access points

The alarm system must:

• Detect intrusion and tampering
• Detect unauthorized access
• Be monitored or capable of real-time alerting

Every alarm activation must generate an incident log entry documenting:

• Date and time
• Staff response
• Resolution

Unlogged alarm activations are compliance failures.

Access Control Rules

Access to secure areas must be restricted.

Only trained, authorized employees may enter cannabis storage or back-of-house areas.

Acceptable access control methods include:

• Key systems with logging
• Badge access systems
• PIN-based entry systems
• Biometric controls

Your system must log:

• Who entered
• When they entered
• When they exited

Customers may never access storage or restricted areas.

Secure Cannabis Storage Requirements

Cannabis must be stored in locked, compliant areas.

Storage must:

• Be located in restricted-access rooms or safes
• Be limited to licensed employees
• Protect against theft, diversion, and contamination
• Be aligned with your approved security plan

All storage activity must align with inventory tracking requirements.

Incident Reporting Obligations

All security incidents must be logged immediately.

Incidents include:

• Theft or diversion
• Break-ins or attempted break-ins
• Alarm activations
• Equipment failures affecting compliance
• Inventory discrepancies

Each incident log must include:

• Date and time
• Individuals involved
• Description of the event
• Corrective action taken

If reporting thresholds are exceeded, OCM must be notified.

Inventory discrepancies must also be reconciled in METRC.

What Inspectors Look For

During inspections, OCM may:

• Review your written security plan
• Check camera placement and footage quality
• Test alarm functionality
• Review access logs
• Compare incident logs to video records

Security systems must match your approved plan and actual operations.

Why This Matters

Security violations can result in:

• Fines
• License conditions
• Mandatory corrective action plans
• Increased inspection frequency
• Suspension or revocation

Your security plan is not paperwork.
It is how OCM measures whether your store is under control.

Go Here Next

• Dispensary Operations
• Inspections & Audit Preparation
• Security Systems and Monitoring Requirements
• Security and Storage Requirements

Source Material

• Inventory Storage and Secure Access
• Adult-Use Regulations (MRTA Article 4)