5415.1 All medical cannabis businesses shall be required to file with their initial application and maintain a written and compliant security plan with the Board.

5415.2 A compliant security plan shall fully provide or describe the following:

(a) A statement on the type of security training provided for, and completed by, establishment personnel, which shall include conflict resolution, handling robberies and violent incidents, and medical emergencies;

(b) Procedures for handling violent incidents, other emergencies, and calling the Metropolitan Police Department;

(c) The type of security or alarm system and outdoor lighting to be used by the applicant;

(d) A site and floor plan detailing:

(1) All entrances and exits to the facility;

(2) The location of any windows, skylights, roof hatches, and outdoor lighting;

(3) The number and location of security cameras used by the business and their field of view;

(4) The location of all alarm inputs (door contacts, motion detectors, duress/hold up devices) and alarm sirens;

(5) The location of the digital video recorder and alarm control panel;

(6) Restricted and public areas; and

(7) The structure the facility is housed in, including nearby street(s), parking lots and other tenants that are within or border the facility;

(e) Security measures taken by the applicant to prevent individuals from entering the limited access area portion of the premises;

(f) Procedures for using and maintaining an incident log;

(g) Procedures for preserving a crime scene;

(h) The closing procedures after the cessation of business each day, including steps to properly store cannabis in a secure area and to prevent theft; and

(i) Procedures to prevent theft, robbery, or the diversion of medical cannabis in compliance with District law.

5415.3 A licensee shall provide either in-person or virtual training regarding its security plan to all employees and security within thirty (30) days of hire and at least once per year thereafter.

5415.4 A licensee may amend or replace an existing security plan on file with the Board by filing a new security plan that is compliant with this section.

5415.5 A licensee provided written notice that its submitted plan is deficient under this regulation shall file a corrected security plan within fifteen (15) days of receiving notice.

SOURCE: Emergency and Third Proposed Rulemaking published at 58 DCR 3299 (April 15, 2011)[EXPIRED]; as amended by Emergency and Fourth Proposed Rulemaking published at 58 DCR 7207 (August 12, 2011)[EXPIRED]; as amended by Final Rulemaking published at 58 DCR 10128, 10196 (December 2, 2011); as amended by Final Rulemaking published at 60 DCR 10061 (July 12, 2013); as amended by Final Rulemaking published at 73 DCR 002136 (February 20, 2026).