The Oregon Secretary of State’s Office has released its audit of the state Liquor Control Commission’s cannabis regulation systems, identifying eight information-technology security issues and making 17 recommendations for addressing the program’s weaknesses.

The audit comes on the heels of a summit in the state held by U.S. Attorney Billy Williams with members of the industry to approach issues in the program identified by Williams, such as diversion of products out-of-state and to the illicit market.

What did the report identify as weaknesses?

  • “Data reliability issues with self-reported data in the Cannabis Tracking System (CTS) and an insufficient number of trained compliance inspectors inhibit OLCC’s ability to monitor the recreational marijuana program in Oregon.”
  • “OLCC should improve processes for ensuring the security and reliability of data in the CTS and the Marijuana Licensing System. In addition, better processes are needed to monitor vendors that host and support these applications.”
  • “OLCC has not implemented an effective IT security management program for the agency as a whole.”
  • “OLCC has not formally developed a disaster recovery plan and has not tested backup files to ensure they can be used to restore mission-critical applications and data.”

What are the agency’s recommendations?

  • “Develop and implement standards and protocols for on-site inspections and investigations.”­
  • “Evaluate the need and provide for an adequate number of trained OLCC inspectors commensurate with number of licensed marijuana businesses.”
  • “Perform risk-based on-site monitoring and inspections to ensure that licensees are reporting accurate information in the CTS and complying with applicable laws.”
  • “Develop and implement policies and procedures for effectively monitoring software of service vendors to ensure they are meeting security and hosting requirements defined in contracts and service level agreements.”
  • “Develop and implement reconciliation processes to ensure that data is appropriately transmitted by the Marijuana Licensing System (MLS) and received by the [CTS].”
  • “Establish processes for granting and reviewing access to the [MLS] and [CTS].”
  • “Implement change management processes in line with industry best practices, including measures that ensure test data remains segregated from the production environment.”
  • “Update and test OLCC’s information and security plan to ensure the plan reflects the agency’s current business and IT environment.”
  • “Establish a process to maintain an up-to-date inventory of authorized hardware and software allowed on OLCC’s network.”
  • “Develop and implement a configuration management process, including establishing configuration baselines, maintaining and up-to-date repository of configuration items, and monitoring configuration status changes to detect any unauthorized changes.”
  • “Develop and implement a process to scan for vulnerabilities on devices on network.”
  • “Develop and implement an effective antivirus solution on servers and workstations, and monitor to ensure all servers and workstations have an up-to-date antivirus solution.”
  • “Transition software off obsolete platforms. If that is not possible, ensure unsupported servers are appropriately segregated on the network.”
  • “Review physical access procedures to ensure access is appropriate, and require PINs to be periodically changed.”
  • “Develop and implement a process to remediate weaknesses identified in risk assessments and audits, and routinely evaluate and assess the agency’s security posture.”
  • “Develop a document an entity-wide disaster recovery plan.”
  • “Perform periodic tests of backups to ensure usability.”


Do you own a cannabis industry business? Create a listing in our directory and get discovered by new clients - Click Here

Tags: , | Categories: Cannabis Politics Recreational Cannabis News

Learn about cannabis businesses:

View the directory | Get featured here

  • Evergreen Gateway

    Evergreen Gateway is a cannabis banking and merchant services company. We think differently than conventional credit card processing companies due to our history of handling high-risk accounts. We are experts in the field of alternative payment options, merchant accounts, and banking. Our mission and vision are to provide needed customer support services to the cannabis industry within these areas.

  • Portable Smoke

    Portable Smoke is your online destination for purchasing portable discreet items for your smoking needs. We recognize that smoking may be a discreet and a recreational activity to participate in alone or with trusted friends. As a result, we specialize in selling grinders and bowls that you can hide right under everyone’s nose.

  • Distru

    Software built to streamline distribution and manufacturing. Distru provides inventory, order, and customer management for cannabis companies in a centralized platform.

  • Lightning Labels

    Lightning Labels uses state-of-the-art printing technology to provide affordable, full-color custom labels and stickers of all shapes and sizes. From small orders for individuals to the bulk needs of big businesses, Lightning Labels is equipped to handle and fulfill custom label and product sticker orders of all types. Best of all, like the name implies, Lightning Labels provides exceptionally quick turnaround for all your printing needs.

  • CannaSafe Solutions

    CannaSafe Solutions is the one-stop-shop for all the safety needs of your cannabis growhouse, dispensary, lab, or edibles manufacturing facility. We provide all of the safety equipment and apparel you need to protect your employees, your plants, and your business.

  • HempStaff

    HempStaff is an industry leader in Marijuana Industry Recruiting and Dispensary Training. We strive to find the perfect match for Employers and Employees in the Cannabis Industry. From Dispensary Managers and Master Growers to Cannabis Chefs and Trimmers, we find the right match for both our clients and candidates. We are currently working with marijuana business owners across America to help them locate qualified employees as well as providing Dispensary Training for the entry level employee in states with new markets.

  • LC Solutions Michigan PLLC

    LC Solutions offers clients timely accrual based bookkeeping, cost accounting strategies, planning, and consulting services. Our model supports an ongoing client relationship, helping to ensure accurate accounting records throughout the year. We are professional, patient, and creative in our approach. LC Solutions specializes 100% in serving Michigan’s Medical Cannabis industry.

  • Gehl Search Partners

    Gehl Search Partners (GSP) finds the best talent available for a wide range of positions. Our specialty is in professional recruitment within highly regulated industries such as cannabis, adult beverage, and FMCG/CPG throughout the US & Canada. Our primary focus is in sales, marketing, strategy and planning, finance, and accounting roles. We collaborate with our clients to identify, attract and onboard accomplished executives in mid level to senior level roles.

  • Hardcar

    HARDCAR is a world class asset protection and armored transportation company From ground breaking cybersecurity to robotics and custom built solutions to meet customer demand we believe in real customer satisfaction not lip service.

  • CannaPlanners

    CannaPlanners is a full service design and web agency, dedicated to normalizing the cannabis industry through professional and beautiful design services. From logos to packaging design, trade-show materials to t-shirts and hats - we've got all your creative needs covered. Our turnkey WordPress site builder allows for great-looking sites at affordable rates. Let our creative team tell your story!

  • Craft Cannabis Marketing

    We offer two decades of experience providing advertising, branding, and web design solutions to the most recognizable brands from around the globe. Simply put, we decided to take the expertise we gleaned working with big-name companies you know and love and bring it to the emerging cannabis industry. We’re more than a mere agency – we’re cannabis advocates.

  • CORE Security Solutions

    CORE Security Solutions, Inc. provides security services to a wide array of clients, including the rapidly growing cannabis industry. We are fully licensed and insured by the California Bureau of Security and Investigative Services (BSIS). We currently provide security services to several local cannabis dispensaries in the Bay Area and secure transport and delivery services for cannabis products and proceeds throughout California. Our security specialists are all licensed and our transport vehicles are equipped with secure storage and GPS tracking.

Want a job in the cannabis industry?

Sign up to apply for unlimited jobs and get discovered by companies who are hiring

Post Your Resume View all jobs

Recent Job Postings

Subscribe for daily cannabis news, announcements, and business insights.

Stay informed about the latest cannabis industry news, policy progress, and business developments.