Cannabis Employee Badge and Access Control Audit Checklist [FREE PDF]

Cannabis facilities are required by most state cannabis control boards to implement robust employee badging and access control systems that restrict entry to licensed and credentialed personnel only. Failure to maintain proper access control records can result in license suspension, fines, or criminal referrals under the DEA Controlled Substances Act. This audit checklist helps Compliance Managers systematically verify that all badging, credentialing, and electronic access systems meet state can

  • Industry: Cannabis Dispensary
  • Frequency: Monthly
  • Estimated Time: 45-60 minutes
  • Role: Compliance Manager
  • Total Items: 35
  • Compliance: State Cannabis Regulations - Facility Security Requirements (e.g., CA BCC 5045, CO MED Rule R 1402), OSHA 29 CFR 1977.18 - Employee Access to Exposure Records, DEA 21 CFR 1301.72 - Physical Security Controls for Schedule I/II Substances, OSHA 29 CFR 1910.132 - Personal Protective Equipment and Identification, State Department of Health Requirements - Employee Licensing and Badging

Employee Badge Issuance and Records

Verify that all employee badges are properly issued, recorded, and meet state cannabis licensing requirements.

  • Does the facility maintain a complete and current log of all issued employee badges?
  • Are all active employee badges linked to a valid state-issued cannabis employee license or permit?
  • Does the badge log record the date of issuance, expiration, and any reissuance events for each badge?
  • Are badge photos current and clearly identifiable for all active employees?
  • Please upload a redacted sample of the current employee badge issuance log.

Badge Expiration and Renewal Compliance

Confirm that expired badges are promptly deactivated and renewal processes are followed per regulatory timelines.

  • Are there any active employees operating with an expired badge or expired state cannabis employee permit?
  • Does the facility have an automated or manual alert system to flag upcoming badge and permit expirations?
  • How many days in advance are employees notified of their upcoming badge or permit expiration?
  • Are expired badges immediately collected and deactivated upon expiration or employee separation?
  • Is documentation of badge deactivation or badge returns retained for the regulatory-required retention period?

Electronic Access Control System Functionality

Assess whether electronic access control systems are operational, properly configured, and logging all access events.

  • Is the electronic access control system (key card, biometric, PIN) fully operational at all restricted entry points?
  • Does the access control system generate a time-stamped log of every access event, including failed attempts?
  • Have all access control system logs from the past 30 days been reviewed for anomalies or unauthorized access attempts?
  • Is the access control system connected to an uninterruptible power supply (UPS) or backup power source?
  • When was the access control system last tested and certified as fully functional?

Restricted Area Access Permissions

Verify that access permissions are correctly assigned per employee role and that restricted areas are appropriately secured.

  • Are access permissions for each employee role reviewed and approved by an authorized compliance officer?
  • Are there any employees with access permissions exceeding the scope of their current role or job function?
  • Are vault, safe, and controlled substance storage areas secured with multi-factor authentication or dual-key access?
  • Is there visible signage at all restricted area entry points indicating that access is limited to authorized personnel?
  • Please upload a photo of a restricted area entry point showing the access control device and signage.

Terminated and Separated Employee Access Revocation

Confirm that access credentials are revoked immediately upon employee separation or termination.

  • Does the facility have a written procedure requiring immediate badge deactivation upon employee termination or resignation?
  • Have all badges for employees separated in the past 90 days been deactivated and collected?
  • Is a written record maintained for each badge deactivation event, including the date, time, and authorizing manager?
  • Are system-level credentials (POS logins, seed-to-sale software access) also revoked concurrently with badge deactivation?
  • Notes on any outstanding terminated employee access issues identified during this audit?

Camera Surveillance and Access Control Integration

Assess whether surveillance cameras are integrated with access control to capture all entry and exit events.

  • Are surveillance cameras positioned to capture all access control points, including entry, exit, and restricted area doors?
  • Is video footage from access control points retained for the minimum regulatory-required period?
  • Are camera feeds reviewed alongside access control logs when investigating anomalies or security incidents?
  • Is the surveillance system operating on a dedicated network segment separate from general business IT networks?
  • Please upload a screenshot or photo of the current camera coverage map for access control points.

Audit Documentation and Corrective Action

Capture overall audit findings, non-conformances, and corrective action plans identified during the badge and access control audit.

  • Were any access control non-conformances or violations identified during this audit?
  • Please describe all non-conformances identified and their severity (minor, major, critical)?
  • Has a corrective action plan (CAP) been initiated for each identified non-conformance?
  • What is the target completion date for all corrective actions identified in this audit?
  • Has this audit report been reviewed and signed off by the facility's designated Responsible Vendor or Compliance Manager?

Related Cannabis Compliance Checklists

Related Security Checklists

Why Use This Cannabis Employee Badge and Access Control Audit Checklist [FREE PDF]?

This cannabis employee badge and access control audit checklist [free pdf] helps cannabis dispensary teams maintain compliance and operational excellence. Designed for compliance manager professionals, this checklist covers 35 critical inspection points across 7 sections. Recommended frequency: monthly.

Ensures compliance with State Cannabis Regulations - Facility Security Requirements (e.g., CA BCC 5045, CO MED Rule R 1402), OSHA 29 CFR 1977.18 - Employee Access to Exposure Records, DEA 21 CFR 1301.72 - Physical Security Controls for Schedule I/II Substances, OSHA 29 CFR 1910.132 - Personal Protective Equipment and Identification, State Department of Health Requirements - Employee Licensing and Badging. Regulatory-aligned for audit readiness and inspection documentation.

Frequently Asked Questions

What does the Cannabis Employee Badge and Access Control Audit Checklist [FREE PDF] cover?

This checklist covers 35 inspection items across 7 sections: Employee Badge Issuance and Records, Badge Expiration and Renewal Compliance, Electronic Access Control System Functionality, Restricted Area Access Permissions, Terminated and Separated Employee Access Revocation, Camera Surveillance and Access Control Integration, Audit Documentation and Corrective Action. It is designed for cannabis dispensary operations and compliance.

How often should this checklist be completed?

This checklist should be completed monthly. Each completion takes approximately 45-60 minutes.

Who should use this Cannabis Employee Badge and Access Control Audit Checklist [FREE PDF]?

This checklist is designed for Compliance Manager professionals in the cannabis dispensary industry. It can be used for self-assessments, team audits, and regulatory compliance documentation.

Can I download this checklist as a PDF?

Yes, this checklist is available as a free PDF download. You can also use it digitally in the POPProbe mobile app for real-time data capture, photo documentation, and automatic reporting.

Browse More Checklists