Cannabis security guide for California dispensaries, grows, and cannabis operators

Cannabis Security Guide for Los Angeles Operators

The Cannabis Security Guide for L.A. Operators: Dispensaries, Grows, and What DCC Actually Requires.

Cannabis businesses in California face a security problem that's more layered than most industries. There's the external threat: smash-and-grab crews hitting dispensary storefronts at 3 AM, organized theft at remote cultivation sites, armed robberies at delivery handoffs. Then there's the internal threat, which most operators underestimate: product diversion, cash skimming, and employee-facilitated access that accounts for the majority of actual losses. And underneath both of those is the regulatory layer: DCC requirements that don't go away when you're dealing with everything else.

This cannabis security guide covers all three: the real threat picture for California cannabis operators, what DCC mandates for every license type, and how the security layers that stop external and internal theft are the same ones that keep you compliant. For Valley Alarm's cannabis remote video monitoring services, see the cannabis remote video monitoring service page.

LA dispensary crime nearly doubled between 2021 and 2022 and has continued rising. LAPD data identifies Hollywood, Downtown, Van Nuys, and Larchmont as the highest-incident areas. In 2025, incidents included a North Hollywood smash-and-grab at 3:50 AM (April), a five-suspect burglary at The Woods WeHo (May), and an armed standoff in DTLA with five suspects detained (August). Every one of those dispensaries had cameras. Every one of them got footage. None of them got stopped.

The Two Threat Categories California Cannabis Operators Face

External and internal theft require different responses. A security setup that stops break-ins but ignores employee diversion is still bleeding. One that monitors employees but leaves the storefront passive after close is one smash-and-grab away from a claim. The operators who get this right treat both categories as active problems, not sequential ones.

External Theft: Organized, After-Hours, and Repeat

The pattern across 2025 LA dispensary incidents is consistent. Suspects arrive between 3 and 5 AM in a white sedan, break glass at the storefront or force a rear entry, fill bags with product and cash, and leave before law enforcement arrives. The entire sequence takes under three minutes. Passive camera systems document it completely. They don't change any part of it.

What changes the outcome is a live Intervention Specialist watching AI camera feeds in real time. When an approach is detected at the perimeter, an audio warning activates through on-site speakers. In the majority of incidents, the individual or group leaves without the attempt completing. When they don't, law enforcement is contacted with a verified, timestamped incident already on record before anyone arrives.

Physical hardening helps. Bollards, reinforced doors, shatter-resistant film, and controlled entry vestibules all raise the barrier to smash-and-grab attacks. But organized crews adapt to physical hardening faster than most operators update their security posture. The deterrent that changes their calculus isn't glass strength. It's knowing that someone is watching and will respond before they're loaded and gone.

For the full breakdown of LA's dispensary robbery pattern, the specific incidents, and what prevention-focused monitoring looks like at the storefront level, see why LA dispensaries keep getting robbed and what actually stops it.

Internal Theft: The Bigger Number Most Operators Don't Want to Look At

Industry data puts employee theft at roughly 90 percent of all cannabis business losses. The number is large enough that most operators hearing it for the first time assume it can't be right. The reason it's that high is that internal theft is slow, subtle, and doesn't look like theft from the outside until the inventory discrepancy is big enough to trigger an audit.

Product diversion logs goods as damaged or spoiled when they're being removed. Cash skimming pulls small amounts from transactions across dozens of shifts. Sweethearting runs unauthorized discounts for friends and family through the POS without triggering obvious flags. Loading dock collusion routes product out through a shipper before it's properly recorded as received. None of these look like a break-in. They accumulate over weeks and months before the pattern is visible.

The detection tools are cameras and access control, reviewed together. Camera footage shows what happened and who was present. Access control logs show whether that person was credentialed for that zone at that time. POS integration adds a third record: what transaction was entered, when, and by whom. Reviewed in parallel, those three records close the investigation gap that makes a case actionable for HR, legal, and insurance purposes.

DCC's seed-to-sale tracking requirement (Metrc in California) creates an inventory record that internal theft must work around. The operators who catch it fastest are the ones who cross-reference Metrc discrepancies with camera timestamps, not just the ones who have cameras. For detection methods, access control's role, and what makes a case prosecutable, see cannabis dispensary employee theft prevention.

What DCC Actually Requires

California's Department of Cannabis Control has specific, detailed security requirements for every license type. Most operators know the general outline. The violations that trigger fines and remediation notices come from the details most operators get wrong.

Surveillance System Requirements

DCC requires 24/7 video recording at a minimum of 15 frames per second, at a minimum resolution of 1280x720. Recording must be continuous, not motion-triggered. Timestamps must sync to NIST standards. Manual clock settings that drift are a compliance failure. Footage must be retained for 90 days minimum, accessible immediately upon DCC request via TCP/Internet connection. If your system can't deliver footage remotely on demand, you're non-compliant regardless of what else is working correctly.

Point-of-sale cameras must capture facial features with sufficient clarity to determine identity. The camera on the room housing your NVR or recording device is required. The recording system itself must be recorded. These two requirements catch more operators than any other camera placement issue.

Alarm and Monitoring Requirements

DCC requires a professionally monitored alarm system installed and maintained by a licensed security integrator. A DIY install with a Ring camera feeding a consumer monitoring app doesn't meet this standard. The alarm must be monitored, tested, and documented. Valley Alarm is a licensed C-7 and C-10 electrical contractor and alarm installation company in California. The licensing requirement exists to ensure accountability, and it's verifiable by DCC.

Access Control Requirements

All employees must wear photo identification badges (1 inch by 1.5 inches, plastic-coated, visible at all times). Limited-access areas must have controlled entry. Digital access logs must be maintained and available to DCC on request. The combination of badge requirements and access logs is what makes internal investigation possible after a loss. Without them, camera footage alone doesn't establish whether an employee was authorized to be in a restricted zone.

Records Retention

Security records must be maintained for 7 years. Surveillance video requires 90-day retention minimum. The distinction matters: your operational logs, incident reports, and access control records have a much longer retention requirement than the video itself.

For a full pre-inspection checklist, the specific DCC regulation sections most operators fail, and how to stay compliant between inspections, see how to pass a DCC security inspection the first time.

Security Guards vs. Remote Video Monitoring for Cannabis

This comparison comes up in every cannabis security conversation. DCC requires it at a specific level. Understanding exactly what's required clarifies where guards fit and where remote monitoring fits.

DCC requires a standing guard during business hours for most storefront dispensary license types. That requirement is not satisfied by remote monitoring alone. Guards have a legitimate, compliance-required role during operating hours for access control, customer management, and physical presence.

What guards can't do is cover the hours when cannabis businesses are actually most at risk. Every significant LA dispensary robbery in 2025 happened after close. A guard who works a business-hours shift goes home at 10 PM. The Gardena incident, the North Hollywood incident, the WeHo incident. All after midnight. Remote video monitoring with live Intervention Specialists covers the window guards don't.

A guard in Southern California costs $20 to $50 per hour. 24/7 coverage runs $15,000 to $30,000 per month before overtime, benefits, and turnover. Remote monitoring costs a fraction of that for the hours guards aren't present. The practical setup for most dispensaries is guards during hours (required by DCC) plus remote monitoring after close (covers the actual risk window). For the full cost breakdown and operational comparison, see security guards vs. remote monitoring for dispensaries.

Securing Remote Cannabis Grow Operations

Cultivation sites have a different security profile than dispensaries. You can't lock up an outdoor grow the way you lock a storefront. Remote locations mean longer emergency response times. The infrastructure that powers a dispensary's camera system (grid power, high-speed internet) may not be available at a cultivation site in the Antelope Valley or Ventura County hills.

DCC's security requirements don't relax for cultivation licensees. Fencing must demonstrate that areas are not readily accessible by unauthorized individuals. CPTED principles apply. Surveillance and alarm monitoring requirements are the same as for dispensaries. The difference is that the deployment has to work without the infrastructure a storefront takes for granted.

Solar-powered camera systems and mobile security trailers solve the no-power/no-internet problem for remote grows. They deploy without grid connection or conduit runs. AI-assisted motion detection filters wildlife and weather false alarms, a persistent problem at rural cultivation sites where environmental motion triggers are constant. Valley Alarm already serves cultivation clients in the Antelope Valley and Ventura County. For remote grow deployment considerations, solar-powered coverage options, and what DCC compliance looks like at a cultivation site, see securing remote cannabis grows in Southern California.

Setting Up Security for a New Dispensary

Security decisions made during the build-out phase lock in ongoing costs and compliance exposure for the life of the license. DCC's license application (Form DCC-LIC-018) requires applicants to describe their security setup in detail before approval: camera placements, monitoring procedures, alarm company information, access control specifications, badge protocols, video storage approach, and maintenance procedures.

The operator filling out that form must name their alarm company. Valley Alarm's information goes in the boxes on DCC-LIC-018 that require a licensed security integrator. The security plan that gets approved becomes the standard your system is held to at inspection. Building it correctly from the start means the inspection is a confirmation, not a surprise.

ValleyGuard cannabis remote video monitoring covers dispensaries, cultivation facilities, and delivery operations throughout Greater Los Angeles and Southern California. U.S.-based Intervention Specialists monitor AI camera feeds 24 hours a day. Valley Alarm holds California C-7 and C-10 contractor licenses and meets DCC's requirement for a professionally monitored alarm system installed by a licensed integrator.

For a step-by-step walkthrough of DCC-LIC-018, what each section requires, and how to build a security setup that answers every line item on the application, see setting up security for a new cannabis dispensary in California.

Frequently Asked Questions

What security does DCC require for a California cannabis dispensary?

DCC requires a professionally monitored alarm system installed by a licensed security integrator, 24/7 video surveillance at minimum 15 FPS and 1280x720 resolution with 90-day retention, access control with photo ID badges for all employees, and a standing security guard during business hours for most storefront dispensary license types. Footage must be accessible remotely via TCP/Internet upon DCC request. Records must be retained for 7 years, with video retained for 90 days minimum.

Does remote video monitoring satisfy DCC's security requirements?

Remote video monitoring satisfies DCC's requirement for a professionally monitored alarm system and surveillance monitoring. It does not replace the standing guard requirement during business hours for storefront dispensaries. The practical setup is guards during operating hours (DCC-required) combined with remote monitoring after close (covers the actual risk window when most dispensary break-ins occur).

What's the biggest security threat for cannabis dispensaries in Los Angeles?

External robbery is the most visible threat, with organized smash-and-grab crews targeting dispensaries in Hollywood, Downtown, Van Nuys, and WeHo after close. But internal employee theft accounts for a substantially larger share of total losses across the industry. Most California cannabis operators are dealing with both simultaneously. The security setup that addresses external break-ins (live monitoring, perimeter cameras) overlaps significantly with what catches internal diversion (access control logs, camera timestamps cross-referenced with POS records).

How quickly can security be deployed for a dispensary?

A permanent camera, monitoring, and access control system requires site assessment, installation, and DCC-compliant configuration, typically two to four weeks from start to operational. For post-incident emergency coverage or new dispensaries still in build-out, solar-powered mobile security trailers deploy in 24 to 48 hours with no infrastructure requirement.

Does Valley Alarm provide cannabis security in Los Angeles?

Yes. Valley Alarm provides ValleyGuard live video monitoring, access control, camera installation, and mobile security trailer deployment for cannabis dispensaries, cultivation facilities, and processing operations throughout Los Angeles, the San Fernando Valley, Ventura County, and surrounding areas. Valley Alarm is a licensed California security integrator that meets DCC's requirement for professionally installed and monitored alarm systems.

What does cannabis security cost?

Valley Alarm doesn't publish pricing publicly because the right setup depends on facility type, size, number of access points, monitoring requirements, and whether a guard complement is needed. A single-location dispensary in Hollywood has different requirements than a multi-site operator with cultivation and distribution licenses. The starting point is a site assessment that maps your actual coverage gaps to specific solutions. Request a consultation to talk through coverage options for your facility.

DCC compliance, external robbery, internal theft. The security setup that handles all three starts with knowing what you're actually up against.

ValleyGuard covers cannabis dispensaries and cultivation facilities throughout Southern California. Talk through a coverage plan for your operation.

Request a Consultation

Related Articles

David Turner
Scroll to Top