High security business enviroment

mariomp

Member
Hey, a friend of mine is applying for a business operating license in a lottery type awarded environment, where the state requires full blown security system with access control, CCTV, monitoring, etc. 
Problem is that they (state agency) will not give him specifics, beyond what I'm posting below. 
Also, because of the type of business he's applying for, we can't do state search or request a copy of prior, approved applications to see what others have used/stated on successful applications.
 
I've been doing security, access control and CCTV in resi and small business environments for years, but this is the first request for something of this nature. 
 
I'm hoping to get an RFQ/IFB from someone so that I don't spend 50 hours of unbillable time designing a system that may never get off the ground if their application gets denied.
 
7.34.4.20 SECURITY REQUIREMENTS FOR LICENSED PRODUCERS: Private non-profit entities licensed to produce medical cannabis shall comply with the following requirements to ensure that production and distribution facilities are located on secure grounds. 
A. The non-profit producer shall provide and maintain in each facility a fully operational security alarm system. 
B. The non-profit producer shall conduct a monthly maintenance inspection and make all necessary repairs to ensure the proper operation of the alarm system and, in the event of an extended mechanical malfunction that exceeds an eight hour period, provide alternative security that shall include closure of the premises. 
C. The non-profit producer shall maintain documentation for a period of at least 24 months of all inspections, servicing, alterations, and upgrades performed on the security alarm system; all documentation shall be made available within 24 hours of a department representative’s request; failure to provide equipment maintenance documentation within the 24 hour period shall subject the licensed producer to the sanctions and penalties provided for in this rule; the 24 hour period shall not include holidays and weekends. 
[7.34.4.20 NMAC - Rp, 7.34.4.11 NMAC, 2/27/2015]
 
 
and then there is this:
 
E. SECURITY PLAN 
A copy of the applicant’s Security Plan must be included with the application. 
A licensee must operate in accordance with the Security Plan submitted as part of the producer’s application unless the Department approves a modification to the Security Plan in writing. 
In addition to any other requirements contained in the rules found at 7.34.4 NMAC, note that the Security Plan must include: 
1.a detailed description of the methods and device or series of devices that shall be used to provide security in production and distribution locations; 
2.a detailed description of any processes and/or controls that will be implemented to prevent the diversion, theft or loss of medical cannabis; 
3.a detailed description of the measures and procedures that the producer will follow to ensure that access to the production facility premises will be limited only to employees; 
4.a detailed description of the services to be offered by the selected security company at all production and distribution locations; and 
5.a detailed description of the process that the private entity will take to ensure that access to the production facility premises will be limited only to employees and authorized persons.
 
There are some books can guide to get the license. And you can get some help from your equipment supplier.
 
These questions don't seem too difficult.  If the friend has any knowledge of working in this space they should already know some of the basic requirements (ie if physical security is required; what types of thefts and breakins are common in the industry; etc).
 
I would think a good access control system combined with video security and strong protocols would cover the need well.  
 
Actually - rereading the original post, and please don't take this the wrong way, but it seems to me that you should pass on this job and let it fall to someone with experience in this very specific and specialized industry.  There are so many things about this business that require relevant experience - from the fact that it's a 100% cash-based business; it's a HUGE crime target both internally and externally; etc.   You might as well be dealing in jewels except for the fact that you can't employ traditional banks to protect cash.
 
If you really want to learn, you should partner with someone with relevant experience and give up any profits you might make in exchange for the opportunity to stay involved and learn more about the industry and what's required to protect it.  This would give you the knowledge without having to walk off while getting your friend/client the best solution.
 
Work2Play said:
These questions don't seem too difficult.  If the friend has any knowledge of working in this space they should already know some of the basic requirements (ie if physical security is required; what types of thefts and breakins are common in the industry; etc).
 
I would think a good access control system combined with video security and strong protocols would cover the need well.  
 
Actually - rereading the original post, and please don't take this the wrong way, but it seems to me that you should pass on this job and let it fall to someone with experience in this very specific and specialized industry.  There are so many things about this business that require relevant experience - from the fact that it's a 100% cash-based business; it's a HUGE crime target both internally and externally; etc.   You might as well be dealing in jewels except for the fact that you can't employ traditional banks to protect cash.
 
If you really want to learn, you should partner with someone with relevant experience and give up any profits you might make in exchange for the opportunity to stay involved and learn more about the industry and what's required to protect it.  This would give you the knowledge without having to walk off while getting your friend/client the best solution.
Thank you for the response, but I think you're missing the point.
Also, do you have any experience in this specific business field that you're willing to share?
 
Sorry if I came off harsh...  I see people get in over their heads and totally fail leaving the customer worse off...  Although to be fair, I've taken on my share of projects that were seriously over my head that I researched the living hell out of, gained expertise, practiced and tested my theories, then installed and knocked out of the park... so it's doable.
 
I wish I had specific experience in your target industry...  I've read articles about it and put some thought into it just out of curiosity but if I were hired to do something like this I'd be open with the client about what I do and don't know, and I'd do a crap-ton of research - and we're talking days/weeks of OCD obsession learning everything I can possibly learn; consulting with outside parties, etc.  That's just how I tackle things.
 
My advice:
Find a UL listed company that can issue UL certificates, and have them give a detailed quote.
Plan on using GSM approved equipment only.
 
You claim to have been in the industry for years, so I have a little qualifing question:
If someone with an IQ a little higher than a monkey and wearing a base ball cap went to one of your cctv customers after hours and got to one of the out door cameras and grounded all of the wires going to it,,,,,,,, would the rest of the system still function?
 
If the answer is "I don't know" or "yes" ....
9 out of 10 of the DIY systems would go down and stay down.
 
Best of luck
 
OldTimer said:
My advice:
Find a UL listed company that can issue UL certificates, and have them give a detailed quote.
Plan on using GSM approved equipment only.
 
You claim to have been in the industry for years, so I have a little qualifing question:
If someone with an IQ a little higher than a monkey and wearing a base ball cap went to one of your cctv customers after hours and got to one of the out door cameras and grounded all of the wires going to it,,,,,,,, would the rest of the system still function?
 
If the answer is "I don't know" or "yes" ....
9 out of 10 of the DIY systems would go down and stay down.
 
Best of luck
Thanks for the advice.
As for the question: did you see it in the movie as well? :)
And no, properly designed system would only affect a single channel. And with remote reboot, that could be corrected, provided the instigator didn't leave it down. 
I've shorted the wires here and there accidentally, it's nice not to have to replace the fuse each time someone (including me) does something stupid.
 
OldTimer said:
Unless your customer is contracting through the Fed Govt. I doubt they will be asking to register with the DEA.
You will be dealing with local and State authorites having jurisdiction only.
I am only suggesting guidelines. Mario, obtaining the state requirements would be key.
 
OldTimer said:
My advice:
Find a UL listed company that can issue UL certificates, and have them give a detailed quote.
Plan on using GSM approved equipment only.
 
You claim to have been in the industry for years, so I have a little qualifing question:
If someone with an IQ a little higher than a monkey and wearing a base ball cap went to one of your cctv customers after hours and got to one of the out door cameras and grounded all of the wires going to it,,,,,,,, would the rest of the system still function?
 
If the answer is "I don't know" or "yes" ....
9 out of 10 of the DIY systems would go down and stay down.
 
Best of luck
Thank you for your input, sincerely. I suggested Mario post here at CT for professional input, such as yours, specifically.
 
You haven't mentioned what State this is to be located in, so I can only guess:
From what I can see:
UL listed merchantile equipment (UL residential won't pass) GSM approved equipment is the way to go.
!00% perimitor and 100% inerior man trap.
UL Grade AA communications (check out AES radio fire grade AA)
Grade A access control
If a safe room is required, then a seperate alarm and access control 100% contained in such area
All doors secured with autolock lever (always locked possition)
You may need the use of turnstyles to limit tag behinds.
!00% cctv coverage w/back up server
Sign in proccedures that are verified and backed up.    
All non employees must be buzzed in....
 
Couple of notes:  
Alarm contracts: https://www.kirschenbaumesq.com/page/alarm-contract
 Check out the FDA requirements. That is probably where your State aquired their info.
 
Remember - Security is "people not knowing."                               
 
Really not that difficult to put it all together. Basically a UL mercantile, and probably safe/vault level requirements. You're looking at more than a basic alarm system or swipe-beep-door unlocks sort of system. 100% coverage and protection in addition to server based products with (preferably) off-site data warehousing or similar.
 
If you've only done basic or mass market systems, hate to say it, you're in over your head...I deal with DEA areas (safes and similar) and have also done DOD/DOE non-proliferation and weapons vaults.
 
 
If you are hvaing all this then for safety purpose you must have  equipmnet failure, business interruption insurance as well.
 
Back
Top