Ohio Administrative Code › Title 3796:3 - Processors › Chapter 3796:3-2 - Operations › Section 3796:3-2-05 - Processor security

Current through all regulations passed and filed through July 1, 2024
(A)
								The department
			 shall determine the appropriate storage and security requirements for all
			 processor facilities, and may require additional safeguards to ensure the
			 security of medical marijuana. A processor shall comply with the security plan
			 submitted as part of its processor provisional license application. At a
			 minimum, the processor shall:
(1)
									Install an adequate security alarm system around the
			 perimeter of the facility to prevent and detect diversion, theft, or loss of
			 medical marijuana, utilizing commercial grade equipment;
(2)
									Maintain or
			 construct fencing and gates that surround the facility to prevent unauthorized
			 entry to the facility or unauthorized access to waste disposal containers
			 located outside the facility;
(3)
									Utilize a video
			 surveillance recording system installed by a vendor that is approved by the
			 department and that meets the standards required by the department to prevent
			 and detect diversion, theft, or loss of medical marijuana;
(4)
									Maintain all
			 security system equipment and video surveillance systems in a secure location
			 so as to prevent theft, loss, destruction, or alterations:
(a)
										A processor shall
			 limit access to surveillance areas to type 1 key employees that are essential
			 to surveillance operations, law enforcement agencies, security system service
			 employees, the department, and others when approved by the department;
			 and
(b)
										A processor shall make available to the department,
			 upon request, a current list of type 1 key employees and contractors who have
			 access to the surveillance room. A processor shall keep all on-site
			 surveillance rooms locked and shall not use such rooms for any other
			 functions.
(5)
									Keep all approved safes, vaults, or any other approved
			 equipment or areas used for processing or storing of plant material, medical
			 marijuana extract, and medical marijuana products securely locked and protected
			 from unauthorized access;
(6)
									Ensure the outside perimeter of the facility is
			 well-lit and in accordance with the processor's plan in its license
			 application;
(7)
									Restrict access to any area within the facility
			 containing plant material, medical marijuana extract, or medical marijuana
			 products to all persons except licensed employees and agents or an individual
			 permitted to access the facility under the supervision of a licensed employee
			 or agent in accordance with the visitor authorization procedures set forth in
			 rule
			 3796:5-2-01
			 of the Administrative Code;
(8)
									Limit the use of
			 combination numbers, passwords, or electronic or biometric security systems to
			 licensed, authorized employees, and prevent the sharing of any
			 employee-specific access credentials; and
(9)
									Not allow keys to
			 be left in the locks and not store or place keys or badges in a location
			 accessible to persons other than licensed, authorized
			 employees.