15.03.330 Additional Security Requirements

(a) In addition to the requirements listed above in this section, each manufacturing facility and dispensing facility shall have a back-up alarm system approved by the Authority that shall detect unauthorized entry during times when no employees are present at the facility and that shall be provided by a company supplying commercial grade equipment.

(b) A registered entity shall limit access to any surveillance areas solely to persons that are essential to surveillance operations, law enforcement agencies, security system service employees, the Authority or the Authority's authorized representative, and others when approved by the Authority. A registered entity shall make available to the Authority or the Authority's authorized representative, upon request, a current list of authorized employees and service employees who have access to any surveillance room. A manufacturing facility and dispensing facility shall keep all on-site surveillance rooms locked and shall not use such rooms for any other function.

(c) A registered entity shall keep illuminated the outside perimeter of any manufacturing facility and dispensing facility that is operated under the registered entity's license.

(d) All video recordings shall allow for the exporting of still images in an industry standard image format (including .jpeg, .bmp, and .gif). Exported video shall have the ability to be archived in a proprietary format that ensures authentication of the video and guarantees that no alteration of the recorded image has taken place. Exported video shall also have the ability to be saved in an industry standard file format that can be played on a standard computer operating system. A registered entity shall erase all recordings prior to disposal or sale of the facility.

(e) A registered entity shall keep all security equipment in full operating order and shall test such equipment no less than semi-annually at each manufacturing facility and dispensing facility that is operated under the registered entity's registration. Records of security tests must be maintained for five years and made available to the Authority upon request.

(f) The manufacturing facility of the registered entity must be securely locked and protected from unauthorized entry at all times.

(1) The registered entity shall be responsible for ensuring the integrity of the security of the manufacturing facility and the maintenance of sanitary operations when permitting access to the facility.

(2) The manufacturing facility shall maintain a visitor log of all persons other than registered entity employees or emergency personnel responding to an emergency that access any secured areas, which shall include the name of the visitor, date, time and purpose of the visit. The visitor log shall be available to the Authority at all times during operating hours and upon request.