Resources
Below are a list of resources that can assist you in your Information Security efforts in the Cannabis industry, and beyond. Got a resource you want to recommend? Contact us!
Last Updated: November 7, 2022
General Websites
Cannabis ISAO – An Information Sharing & Analysis Organization that helps in the facilitation of information sharing in the Cannabis Industry with relation to physical and digital threats.
National Association of Cannabis Businesses (NACB) – A national organization of Cannabis Businesses that works toward identifying, creating, and implementing best practices for the industry. Consider reviewing their Cybersecurity Standard and Cybersecurity Checklist!
Syntax Bearror – A general Information Security site that includes talks from the author around different topics. They also host a YouTube show weekly about Information Security news.
Information Security Frameworks
CIS Top 18 Controls – The Center for Internet Security’s page refencing the 18 Critical Security Controls they define are essential for most every business. A great foundation before approaching more comprehensive frameworks.
NIST CSF Framework – The National Institute of Science and Technology’s Cybersecurity Framework (CSF) which is used by US Federal and State agencies in defining and setting up their Information Security programs. It is more comprehensive than the CIS Top 18.
United States Privacy Laws
- General Resource – ConsumerPrivacyAct.com
- California Consumer Privacy Act (CCPA)
- California Privacy Rights Act (CPRA)
- Connecticut Personal Data Privacy and Online Monitoring Act
- Illinois Biometric Information Privacy Act (BIPA)
- Utah Consumer Privacy Act
- US-EU Data Protection Framework
- Virginia Consumer Data Protection Act (CDPA)
- Washington Privacy Act (WPA)
Regulators in the United States
Below is a list of Cannabis regulators within the United States.
- Alabama Medical Cannabis Commission
- Alaska Department of Commerce, Community, and Economic Development
- Arizona Department of Health Services
- Arkansas Bureau of Cannabis Control
- California Bureau of Cannabis Control
- Colorado Department of Revenue
- Connecticut Department of Consumer Protection
- Delaware Office of Marijuana Control Commissioner
- Eastern Band of Cherokee Indians Cannabis Commission
- Florida Department of Health Office of Medical Marijuana Use
- Georgia Access to Medical Cannabis Commission
- Illinois Department of Financial and Professional Regulation
- Iowa Medical Cannabidiol Board
- Maine Office of Marijuana Policy
- Maryland Medical Cannabis Commission
- Massachusetts Cannabis Control Commission
- Michigan Cannabis Regulatory Agency
- Minnesota Department of Health
- Montana Department of Revenue
- Nevada Cannabis Compliance Board
- New Jersey Cannabis Regulatory Commission
- New Mexico Cannabis Control Division
- New York Office of Cannabis Management
- Ohio Medical Marijuana Control Program
- Oklahoma Medical Marijuana Authority
- Oregon Liquor Control Commission
- Pennsylvania Department of Health
- Puyallup Tribal Cannabis Committee, Puyallup Tribe, Washington
- Rhode Island Office of Cannabis Regulation
- Saint Regis Mohawk Tribe Cannabis Control Board
- Squaxin Island Tribe, Washington
- Suquamish Tribe
- Swinomish Development Authority
- Tulalip Tribal Cannabis Agency, Tulalip Tribes of Washington
- Vermont Cannabis Control Board
- Virginia Cannabis Control Authority
- Washington State Liquor and Cannabis Board
- West Virginia Department of Health and Human Resources