ASTM D8217-20

3.1 Access control system devices are installed at strategic locations, such as all exterior entrances, administrative offices, grow rooms, processing rooms, manufacturing rooms, storage areas, transaction areas, loading dock, vaults, and locker room.

3.2 Access control system software tracks staff by recording access point ingress and egress activities while at the same time enhances the overall safety of the property.

3.3 An access control system is especially important during an emergency to determine who is on and off the property.

3.4 Individuals are permitted access after they have been subjected to background screening and issued credentials that allow for real-time monitoring and forensic analysis of employee or vendor on-site movement.

3.5 All doors should also be secured with electric strike or magnetic locks that remain locked in the event of power loss (default secured).

3.6 Limited access area door locks, unlocks, and opens through the use of a two-factor authentication consisting of at least two of the following: an access control credential (for example, badge, FOB, wireless device), personal identification number (PIN), or biometric, or combinations thereof with a keyed override system installed.

3.7 Exterior door locks should be unlocked and opened through the use of a two-factor authentication consisting of at least two of the following: an access control credential (for example, badge, FOB, wireless device), personal identification number (PIN), or biometric, or combinations thereof with a keyed override system installed.

3.8 Restricted access area, such as a vault and safe are protected by three-factor authentication consisting of at least three of the following: an access control credential (for example, badge, FOB, wireless device), personal identification number (PIN), or biometric, or combinations thereof.

3.9 Growing, processing, manufacturing, transaction, product, and currency rooms should be protected by a minimum of two-factor authentication: at least two of the following: an access control credential (for example, badge, FOB, wireless device), personal identification number (PIN), or biometric, or combinations thereof.

3.10 Product or currency, or both should be stored in a dual-locked storage container with a lock that requires two individuals to open. The dual custody classified lock programmed to require two combinations or keys to open.

1.1 This guide covers the recommended access control system for protecting resin cannabis, resin cannabis products, resin cannabis waste, currency, people, property, and assets.

1.2 Units—The values stated in inch-pound units are to be regarded as standard. The values given in parentheses are mathematical conversions to SI units that are provided for information only and are not considered standard.

1.3 This standard does not purport to address all of the safety concerns, if any, associated with its use. It is the responsibility of the user of this standard to establish appropriate safety, health, and environmental practices and determine the applicability of regulatory limitations prior to use. The recommendations herein are offered as the minimum requirement. All standards are subject to the requirements of the local Authority Having Jurisdiction (AHJ) in any given area.

1.4 This international standard was developed in accordance with internationally recognized principles on standardization established in the Decision on Principles for the Development of International Standards, Guides and Recommendations issued by the World Trade Organization Technical Barriers to Trade (TBT) Committee.