Security Operations
Cannabis dispensary access offboarding checklist

Powered by StealthAgents
Security Operations

Offboarding is a time-bound handoff. The checklist should identify the trigger, effective time, systems, asset owner, approver, and evidence that each change was completed.
List POS, compliance, email, storage, vendors, keys, devices, and shared operational accounts. The dispensary data access review helps maintain the inventory. Use the shift scheduling handoff to transfer operational ownership without sharing credentials.
Never ask someone to disclose a password. Disable or transfer access through the approved administrator path, then record completion time and exception owner.
NIST’s access control guidance offers authoritative general concepts for least privilege and role ownership.
Escalate it as an access-control exception, preserve the evidence, and move toward named credentials through the approved process.