A dispensary has to protect people, product, cash, and its license at the same time. That makes security an operating discipline, not simply a person stationed at the door. The strongest plan connects controlled access, trained observation, documented opening and closing routines, and a clear response when something falls outside the normal process.

Call (833) 272-7247 to discuss cannabis dispensary security with ASAP Security Guards.

From there, operators can assess what their site actually needs: where public access ends, how visitors and staff move through the premises, which controls protect cash and inventory, and how armed or unarmed coverage fits the risk. The goal is a layered plan that is practical for daily operations and precise enough to guide decisions during an incident.

What Cannabis Dispensary Security Should Accomplish in California

Effective cannabis dispensary security is a layered operating system, not simply a guard at the front door. Its purpose is to help protect people, control movement, support accurate documentation, and reduce opportunities for unauthorized access or theft. Each layer should work with the dispensary’s license conditions, physical layout, staffing model, and local operating environment.

Start with the premises itself. California retailers operate through licensed storefront dispensaries or delivery operations. The licensed location should have clear boundaries between public areas, employee areas, and spaces used to store or handle cannabis. California Business and Professions Code section 26070 describes requirements related to licensed commercial cannabis activity and premises. Operators should review the current statute and Department of Cannabis Control guidance when designing or changing their site plan.

That review is important because this article provides operational guidance, not legal advice. California requirements can change, and a city or county may impose conditions that are more restrictive than the state baseline. Confirm current requirements with the DCC, the local licensing authority, qualified counsel, and your insurer before treating a procedure as a compliance requirement.

Control who enters, where they go, and why

Access control begins before a customer reaches the sales counter. Retail staff should consistently verify age using an acceptable government-issued photo ID, military ID, or passport, as described in the DCC’s retail guidance. Security personnel can support the process by observing entry points, identifying unusual behavior, and escalating questions to trained staff without turning a routine interaction into a confrontation. Read the California DCC retail guidance for the current state-level explanation of retail operations and customer age verification.

Non-public areas require a higher level of discipline. Use controlled doors, accountable keys or credentials, visitor awareness, and a clear rule that vendors and other nonemployees do not wander unaccompanied through restricted spaces. A visitor log can record identity, company, purpose, entry time, exit time, and the employee responsible for the visit. These practices create a usable record and help employees notice when activity does not match the day’s schedule. Confirm the exact visitor and escort requirements that apply to your license and jurisdiction with the DCC and local authorities.

Make security visible, documented, and coordinated

Deterrence should be professional and proportionate. A visible, well-briefed guard can reinforce access procedures, help manage queues, notice emerging issues, and guide staff toward de-escalation. The guard should document meaningful exceptions, preserve relevant information, and coordinate with management and law enforcement when an incident warrants it. Security personnel do not replace emergency services or law enforcement.

California retail hours generally fall between 6:00 a.m. and 10:00 p.m., but local rules may set a narrower window. Align opening and closing procedures with the hours actually authorized for the site. Verify that credentials, alarms, cameras, cash and inventory handoffs, and exception reports are addressed at each transition. The goal is a repeatable process that protects staff and customers while giving the operator a clear record for follow-up.

How to Control Access and Manage Visitors

Access control begins with a clear distinction between areas open to customers and areas reserved for authorized personnel. The sales floor may be public during operating hours, while product storage, cash-handling areas, offices, receiving spaces, and surveillance equipment rooms should be treated as non-public. Mark those boundaries, keep doors secured, and make sure employees know who may enter each area and why.

Visitor awareness is a practical daily discipline. Require vendors, contractors, maintenance workers, inspectors, and other nonemployees to identify themselves before entering restricted areas. A sign-in and sign-out process can record the visitor’s name, company, arrival time, destination, host, and departure time. The record should be reviewed when a shift changes or an unusual event occurs. These controls also create a useful timeline if management later needs to investigate missing inventory, a damaged door, or an equipment issue.

Nonemployee escort practices and visitor documentation may be addressed differently by state and local rules. Treat them as verification points, not as assumptions about legal compliance. California operators should confirm current requirements with the Department of Cannabis Control, local authorities, counsel, and their insurer. San Francisco’s official security-plan guidance, for example, asks operators to explain how nonemployees enter cannabis storage areas and who is responsible for video access and system checks. That local guidance is useful when building questions for a site review, but it should not be presented as a statewide rule.

Build employee accountability into the routine

Employees should use individually assigned badges, keys, codes, or other credentials whenever the facility’s systems support them. Avoid shared credentials, remove access promptly when someone changes roles or leaves, and keep a simple process for reporting lost badges or keys. Supervisors can compare access records with schedules and visitor logs without turning every variance into an accusation. The objective is to identify gaps early and preserve a reliable record of who was authorized to be where.

Vendors deserve the same attention as visitors, particularly when they service cameras, alarms, point-of-sale equipment, refrigeration, or building systems. Confirm the work order, identify the assigned employee host, limit the route to the required area, and document any equipment taken offline. If a camera or alarm must be disabled, record when it happened, who approved it, and when normal operation was restored.

A guard can reinforce these routines through visible access control, professional visitor screening, and factual activity reporting. For a broader look at access control and loss-prevention practices in the region, see Southern California retail security. The strongest approach combines clear boundaries, trained employees, controlled credentials, escorted visitors, and documented exceptions rather than relying on any single measure.

Opening, Closing, Cash, and Inventory Controls

Opening and closing routines turn cannabis dispensary security from a visible presence into a repeatable operating system. The exact checklist should be adapted to the retailer’s approved plan and current Department of Cannabis Control (DCC) and local requirements. California retail hours generally fall within 6:00 a.m. to 10:00 p.m., but local rules may be more restrictive. Managers should confirm the hours that apply to their location with the DCC and local authorities.

1. Open the site deliberately. The opening employee or assigned guard should approach the property using the approved arrival procedure. Check for signs of forced entry or unusual activity, and avoid entering if the site appears compromised. After the area is assessed, verify exterior doors, limited-access doors, and other entry points. Locks for restricted areas should match the retailer’s approved security plan and risk assessment, rather than being assumed to satisfy a legal requirement.
2. Check cameras, alarms, and communications. Confirm that cameras covering entrances, storage, point-of-sale areas, and other designated zones are operating and recording according to the approved plan. Check alarm status, panic or duress communication, lighting, radios, and contact information. Record any outage or blind spot as an exception, notify the responsible manager, and follow the documented escalation process instead of silently opening with a known gap.
3. Account for keys and credentials. Use a key and credential log that identifies who has access, when access was issued, and when it was returned or revoked. Do not share credentials or leave keys unattended. Review access changes after staffing transitions, vendor visits, maintenance work, or suspected compromise. This simple handoff creates an auditable record of who could enter sensitive areas.
4. Complete cash and inventory handoffs. Two authorized employees, or the personnel designated in the retailer’s plan, should verify cash drawers, secure storage transfers, receiving records, and inventory counts. Record discrepancies promptly with the time, location, and people involved. A documented process for loss prevention for inventory can help separate routine shrinkage review from an urgent exception requiring management attention. Avoid discussing cash movements where customers or unauthorized staff can overhear.
5. Run the operating-day checks. During business hours, maintain awareness at public and non-public boundaries, keep receiving and storage access controlled, and document unusual activity, equipment failures, or incomplete handoffs. Guards should support deterrence, observation, and reporting while coordinating with management and emergency services when appropriate. They do not replace law enforcement or authorize staff to take unnecessary risks.
6. Close in a controlled sequence. Reconcile point-of-sale cash and inventory records, secure products and sensitive materials, and confirm that visitors, vendors, and nonessential personnel have left. Review the day’s exception log, camera and alarm status, key and credential returns, and unresolved maintenance issues. Check doors and restricted areas again, then document the person responsible for the final lockup.
7. Complete the overnight transition. Pass the closing report to the manager, overnight guard, patrol team, or monitoring contact. Include open incidents, expected vendors, alarm instructions, camera issues, access changes, and any follow-up due the next morning. If the site needs coverage outside retail hours, 24-hour security coverage can provide a defined overnight handoff and response structure. The goal is continuity, not a vague assumption that someone else is watching the property.

Review the checklist after an incident, layout change, staffing change, or update to DCC or local guidance. A procedure that is clear, assigned, and documented is easier to train, test, and improve.

Call (833) 272-7247 to review opening, closing, and overnight coverage needs.

What to Do When an Incident Happens

When an incident occurs, the first priority is the safety of staff, customers, guards, and first responders. A clear response should reduce confusion without encouraging employees or guards to take risks beyond their training or lawful authority. Use calm communication, create distance when possible, and focus on de-escalation. If there is an immediate threat, injury, fire, weapon, or active crime, contact emergency services and follow the direction of responding authorities. Security personnel should coordinate with law enforcement, not replace it.

Once people are safe, protect the scene. Avoid moving objects, cleaning damaged areas, or allowing unnecessary access until management or law enforcement confirms that the area can be released. Preserve relevant video, access records, alarm notifications, point-of-sale information, and visitor logs. If your system allows it, note the cameras or areas that may contain useful footage and prevent routine overwriting according to your established retention process.

Call (833) 272-7247 for a practical incident-response and reporting review.

Notify the right people in the right order

Use a written escalation tree that identifies who should be contacted, by whom, and under what conditions. Depending on the event, that may include the store manager, corporate security contact, property management, the alarm provider, the insurer, and local law enforcement. The notification should include the location, time, people involved, immediate safety status, actions already taken, and whether emergency services are responding. Avoid speculation about motive, fault, or the final value of a loss.

A disciplined dispatch process can support this handoff. ASAP’s documented sequence is dispatcher assessment, nearest-unit deployment, client notification, incident logging with photos in the Daily Activity Reporting system, and follow-up reporting. GPS-enabled reporting can also help verify a guard’s location, time, and service activity. These records complement, but do not replace, official reports, video evidence, or required notifications.

Write a factual, useful report

Complete the report as soon as practical while details are fresh. Record objective observations, including the date, time, exact location, people present, descriptions of conduct, statements clearly identified as statements, visible damage, actions taken, witnesses, responding agencies, and the disposition of the scene. Separate what was personally observed from what someone else reported. Include photographs only when it is safe and authorized to take them, and preserve the original files with their time and location information when available. For more on documenting retail loss events, see this loss prevention guide.

Reporting obligations can depend on the jurisdiction and the type of incident. For example, San Francisco’s security-plan guidance says notice to the San Francisco Police Department and the Office of Cannabis is required within 24 hours after theft or another legal violation. That is local San Francisco guidance, not an automatic statewide deadline. Confirm current requirements with the California Department of Cannabis Control, local authorities, counsel, and your insurer. Treat the response plan as an operating procedure that is reviewed and practiced, not as a guarantee that every incident will be avoided.

Should a Dispensary Use Armed or Unarmed Guards?

There is no universal answer for a dispensary. Armed versus unarmed coverage should follow a documented risk assessment, not an assumption that more visible force is automatically better. The right deployment should protect people, support lawful operations, and fit the site’s policies, insurance requirements, and applicable rules.

Inputs for the decision

Start with the threat history. Review reported thefts, trespassing, threats, violence, suspicious activity, and recurring conflicts, while distinguishing verified incidents from general concern. Then examine the physical layout. A compact storefront with one controlled entrance presents different observation and response needs than a larger site with receiving areas, multiple exits, parking exposure, or separated storage.

Cash and inventory exposure also matter. Consider when cash is handled, how products move between restricted and public areas, delivery and receiving schedules, and whether staffing changes after closing. Hours are another input. Business-hours coverage may address customer flow, while opening, closing, overnight, or event-specific coverage may require a different post plan. Local conditions, neighboring activity, employee concerns, insurer expectations, and the dispensary’s own use-of-force and escalation policies should be documented before choosing a guard type.

Credentials and coordination

When armed coverage is considered, confirm applicable Bureau of Security and Investigative Services (BSIS) requirements with BSIS, qualified counsel, and the licensing or insurance professionals advising the business. Armed assignments require applicable BSIS firearm credentials. Do not treat a guard’s weapon as a substitute for training, post orders, communication, or law enforcement. Guards should work within lawful authority, prioritize de-escalation and staff safety, and coordinate with emergency services when appropriate.

For operators evaluating armed security in San Diego, the practical next step is a site-specific assessment. Compare the actual threat profile, layout, hours, exposure, policies, and jurisdictional considerations, then document why the selected coverage is proportionate. A dispensary may also use a mixed plan, such as unarmed customer-facing coverage with a defined escalation and response arrangement, when that better fits the documented risks.

How Technology and Human Coverage Work Together

Technology can extend a dispensary’s awareness, but it works best as part of a coordinated security plan. Cameras can help teams observe entrances, sales areas, storage locations, and other defined zones. Alarms can signal an unexpected opening, movement, or system event. Remote monitoring can add another layer by allowing trained personnel to review alerts and communicate with the site. These tools support faster awareness, but they do not create a complete response by themselves.

Remote monitoring is supplemental, not a universal replacement for an on-site guard. A camera may show an unfamiliar person near a restricted door, while a trained professional can assess the situation. Follow the site’s escalation procedure, communicate with staff, and coordinate the next step. The right balance depends on the facility layout, operating hours, staffing model, cash and inventory exposure, prior incidents, and local conditions. Operators should also confirm that any technology remains functional, appropriately positioned, and accessible to authorized personnel.

Connect alerts to a clear human response

A useful technology stack has defined ownership. The dispensary should know who receives alarms, who can review video, who contacts management, and when emergency services are appropriate. A security provider can coordinate with the client and emergency services through a 24/7 human dispatch process. That dispatcher can assess the alert, help determine the nearest available response, notify the designated client contact, and ensure the event is documented. Guards coordinate with law enforcement rather than attempting to replace it.

This layered approach also supports proactive retail security. Visible personnel can reinforce access control and visitor awareness while cameras and alarms improve the information available to the team. Together, these controls help separate routine activity from an exception that needs attention.

Make documentation part of the system

Coverage should be measurable, not merely assumed. GPS-enabled Daily Activity Reports can record a guard’s location, time, and service activity. Photo and time-stamped documentation can provide a clear record of patrols, conditions observed, handoffs, and exceptions. This information helps managers identify missed checks, recurring vulnerabilities, or changes that warrant a revised post order. It also gives the dispensary and provider a common operating record for follow-up.

Before selecting a provider, ask how cameras, alarms, dispatch, guard activity, and reporting will connect in practice. A strong plan defines responsibilities, tests the communication path, reviews reports, and updates procedures when the site or risk profile changes. Technology supplies useful signals. Human judgment, disciplined procedures, and documented accountability turn those signals into meaningful coverage.

California Cannabis Dispensary Security Checklist

Use this cannabis dispensary security checklist as an operational review, not as a substitute for legal advice. California requirements can change, and local jurisdictions may impose additional rules. Review current guidance from the California Department of Cannabis Control and the applicable California statute. Confirm site-specific obligations with the DCC, local authorities, qualified counsel, licensing professionals, and your insurer.

Before opening

• Confirm the licensed premises, public and non-public boundaries, employee access points, and restricted storage areas.
• Assign responsibility for keys, access credentials, visitor records, camera checks, alarm checks, and escalation decisions.
• Review employee procedures for identification checks, vendor access, deliveries, cash handling, and inventory handoffs.
• Test communication channels and make sure staff know when to contact management, emergency services, or a security provider.

During daily operations

• Keep entrances, customer flow, and restricted areas observable. Watch for tailgating, unusual loitering, forced-access indicators, or attempts to bypass procedures.
• Document exceptions promptly, including access issues, equipment faults, suspicious activity, injuries, and inventory discrepancies.
• Use consistent handoff procedures for cash and inventory. Limit access to authorized personnel and reconcile records according to company policy.
• Keep staff focused on de-escalation and safety. Guards provide deterrence, access control, and reporting, but they do not replace law enforcement.

At closing

• Confirm customers and unauthorized visitors have left, then secure doors, restricted areas, storage, keys, and credentials.
• Complete cash and inventory handoffs, review exceptions, and verify that cameras, alarms, and communication systems are operating as expected.
• Record the closing check and clearly communicate unresolved issues to the manager or overnight coverage team.

After an incident

• Prioritize immediate safety, request emergency services when appropriate, and avoid confrontation or actions that could compromise evidence.
• Notify management, preserve relevant video and records, document times and observations factually, and follow the site’s incident-reporting process.
• Check jurisdiction-specific reporting rules. For example, San Francisco guidance addresses notice after theft or another legal violation, but that local guidance should not be treated as a statewide rule.

Periodic review

• Reassess staffing, patrol visibility, access permissions, lighting, camera coverage, alarm response, and overnight risk after layout, hours, personnel, or local conditions change.
• Run refresher training and review reports for recurring exceptions, then update procedures with counsel and relevant authorities when requirements change.

Call (833) 272-7247 to review your dispensary security coverage before opening.

Frequently Asked Questions

What does a security guard do at a cannabis dispensary?

A guard can support controlled entry, visitor awareness, visible deterrence, incident documentation, and orderly response when concerns arise. The role should be defined by site procedures, including when to contact management, emergency services, or law enforcement. Guards coordinate with law enforcement and do not replace it.

How does remote monitoring work for a California dispensary?

Remote monitoring uses cameras, alarms, and related sensors watched by off-site personnel who can assess alerts and notify designated contacts or emergency services. It is best treated as a supplemental layer, not a universal replacement for on-site staff, access controls, and documented opening and closing procedures.

Should a dispensary use armed or unarmed guards?

That decision depends on the site layout, operating hours, cash and inventory exposure, local conditions, client policy, and applicable law. Unarmed guards may fit access control, visitor management, reporting, and visible deterrence. Armed coverage may be considered when a documented threat assessment supports it, with applicable BSIS credentials and clearly defined responsibilities.

What should staff do after a security incident?

Prioritize immediate safety, use de-escalation when appropriate, and contact emergency services for an active or urgent threat. Then notify management, preserve relevant evidence, record factual details, and complete the required follow-up. Reporting duties can vary by jurisdiction. For example, San Francisco guidance addresses notice after theft or another legal violation. Operators should confirm current requirements with the California Department of Cannabis Control, local authorities, counsel, and insurers.

Ready to Strengthen Your Dispensary Security Plan?

A risk-based review can help connect access control, visitor procedures, incident response, and guard coverage to your Southern California location. Call (833) 272-7247 to discuss your cannabis dispensary security plan with ASAP Security Guards. The team can help you evaluate practical next steps for your facility and operating procedures.