Tag Archives: network

Facing Cybersecurity Risk? Here are 6 Ways to Minimize it.

By Brian J. Schnese
No Comments

The cannabis industry is the latest target for cybercriminals. Why? Because many cannabis operations employ less than 100 workers and few are equipped with sophisticated IT systems and knowledgeable on-staff IT personnel, so they are often easier to exploit.

Add the all-cash nature of the business, along with the large amounts of protected health data and personally identifiable information medical dispensaries may store and the industry’s shift toward operational automation to increase yields and lower labor costs and you’ve got an industry that’s extremely vulnerable and a prime target for cyber extortion.

Safeguard your corporate networks and internet connections by encrypting information and using a firewall.

Take the cannabis businesses in Ontario that lost millions after a local distributor was hit by a cyberattack and was incapable to process or deliver orders to local retailers. In another cyberattack, hackers stole $3.6 million that an Australian medicinal cannabis firm intended to send to an overseas contractor.

A still prevalent tactic is for hackers to target workers with email-based phishing scams that enable the installation of malware or ransomware to obtain protected health information to sell or lists of high-profile clients to extort.

While there’s a lot to fear and be on the alert for, there’s also a lot that cannabis businesses can do to both reduce their risk of an attack and proactively protect themselves.

Six hallmarks of a strong cyber-defense program:

  1. Assess the risk. One place to start building a comprehensive approach to cybersecurity is to conduct an appropriate cyber vulnerability or risk assessment of your cannabis business. This exercise can reveal gaps, but it also helps prioritize your effort and develop a vision for your goal state.
  2. Train and test. Train employees on the importance of cybersecurity. Make sure employees undergo phishing training and conduct refresher courses at least annually. Then, test them. Are employees retaining the information shared in training? Send simulated phishing emails and track performance to determine if training hits the mark.
  3. Secure the perimeter. Safeguard your corporate networks and internet connections by encrypting information and using a firewall. If your employees work remotely, consider use of a Virtual Private Network (VPN) to allow them to safely connect to your network from out of the office.
  4. Engage protective tools. In addition to using antivirus software and keeping all software updated and patched, multifactor authentication (MFA) and endpoint detection and response (EDR) are crucial for maintaining a secure network. Most carriers require MFA for remote network access, on email, and to protect privileged user accounts. EDR monitoring of devices connecting to the network is also increasingly a minimum requirement for insurance coverage.
  5. Develop a backup strategy. A solid data backup strategy makes companies less susceptible to ransomware attacks by allowing organizations to restore operations. Perform frequent backups — every day if possible — and consider leveraging cloud solutions along with storing backups in an immutable state off-site or off-network.
  6. Build an incident response plan. Cannabis companies should have a plan for responding to an attack, a system for validating what happened and the resources to remediate the issue.

What if a breach occurs?

Even with a great incident response plan in place, the road to recovery from a cyberattack is a complex and rapidly evolving landscape. Should we communicate with the threat actor? Should we pay the ransom demand? How do we capture forensic evidence? What are the laws guiding notification of impacted employees or clients?  When an organization has armed itself with a cyber insurance policy, they not only transfer much of their risk, but they often gain access to a carrier panel of specialized response providers that include breach coaches, forensic investigations firms and privacy attorneys.

In addition to leveraging the specialized post-breach expertise offered by carriers, insureds should also consider familiarizing themselves with and leveraging any pre-breach resources provided, which often include no-cost external vulnerability scans, employee awareness training and discounted technical security solutions.

Cannabis Quality Conference & Expo logo

Cannabis Quality Conference Dates, Location Announced

By Cannabis Industry Journal Staff
No Comments
Cannabis Quality Conference & Expo logo

EDGARTOWN, MA, Feb. 21, 2022 – Innovative Publishing Company, Inc., the publisher of Cannabis Industry Journal, has announced the return to in-person events with the Cannabis Quality Conference & Expo (CQC), taking place October 17-19, 2022 at the Hilton in Parsippany, New Jersey. Presented by Cannabis Industry Journal, the CQC is a business-to-business conference and expo where cannabis industry leaders and stakeholders meet to build the future of the cannabis marketplace.

“Cannabis markets in New Jersey, New York, Connecticut, Pennsylvania and Massachusetts are all beginning to get off the ground,” says Aaron Biros, editor of Cannabis Industry Journal and director of the Cannabis Quality Conference. “Taking place in a pivotal year for the cannabis industry and in a location surrounded by new market opportunities, the CQC will deliver hands-on education, networking and business discussions. The venue setting, just a short train ride from New York City and Newark International Airport, coupled with highly focused content, creates a unique business meeting environment.”

The 2022 program will have three separate tracks of educational presentations and panel discussions, focused on Regulations & Policy, Safety & Quality and Business & Operations.

Due to safety protocols and venue restrictions, limited space is available for sponsors and attendees. The CQC is a hybrid event, meaning attendees will have the option to either attend in-person in New Jersey, or attend remotely via the virtual platform. Registration is now open. Click here to stay up to date on lodging, early bird pricing, keynote announcements and more.

The CQC is co-located with the Food Safety Consortium, which will take place immediately following the CQC, October 19-21, 2022. For sponsorship and exhibit inquiries, contact RJ Palermo, Director of Sales, and Chelsea Patterson, Account Executive.

About Cannabis Industry Journal

Cannabis Industry Journal is a digital media community for cannabis industry professionals. We inform, educate and connect cannabis growers, extractors, processors, infused products manufacturers, dispensaries, laboratories, suppliers, vendors and regulators with original, in-depth features and reports, curated industry news and user-contributed content, and live and virtual events that offer knowledge, perspectives, strategies and resources to facilitate an informed, legalized and safe cannabis marketplace.

About the Cannabis Quality Conference & Expo

The Cannabis Quality Conference & Expo is an educational and networking event for the cannabis industry that has cannabis safety, quality and regulatory compliance as the foundation of the educational content of the program. With a unique focus on science, technology, safety and compliance, the “CQC” enables attendees to engage in conversations that are critical for advancing careers and organizations alike. Delegates visit with exhibitors to learn about cutting-edge solutions, explore three high-level educational tracks for learning valuable industry trends, and network with industry executives to find solutions to improve quality, efficiency and cost effectiveness in the evolving cannabis industry.

Social Responsibility and Supporting BIPOC in Cannabis: A Q&A with Ernest Toney, Founder of BIPOCANN

By Cannabis Industry Journal Staff
No Comments

The drug war has harmed communities of color since its inception. For decades and decades, BIPOC (Black, Indigenous, and other People of Color) have been nearly six times more likely to be arrested for drug use than White Americans, despite similar rates of use.

Over the years that legalized cannabis has proliferated across the country, the same trends of market consolidation have emerged in every state that has legalized the plant. BIPOC communities already impacted by the drug war have less access to capital and therefore less access to the cannabis industry. Cannabis market consolidation has always led to white people taking a greater market share while BIPOC communities are left behind.

The legal cannabis industry currently lacks representation of BIPOC executives, business owners, and professionals. Ernest Toney, former global marketing and partnerships manager at Marijuana Business Daily, wants to change that. He founded the BIPOC Cannabis Business Network – a membership community that is working to make the cannabis industry more accessible and profitable for BIPOC professionals and business owners.

BIPOCANN is a place to meet cannabis industry leaders, a place to exchange goods, services and ideas that promote BIPOC economic growth in cannabis, an innovation hub for unique voices and perspectives, and it’s all BIPOC-owned and managed.

In this interview, we sit down with Ernest Toney to hear about BIPOCANN and ask him some questions about what the future of the cannabis industry could look like.

Cannabis Industry Journal: Tell me about your background- how did you get involved in the cannabis industry?

Ernest Toney: I grew up in Virginia and went to James Madison University where I studied kinesiology, and sports management in graduate school. That led me to pursue a career in sports administration, beginning as a sales and marketing director for a large YMCA in the southwest, followed by a stint as a sales consultant for the Arizona Diamondbacks in Major League Baseball. Immediately prior to joining the cannabis industry, I worked at USA Ultimate – the national governing body for the niche sport of ultimate (frisbee) in the United States. During that time, I managed and scaled adult programs and events across the country. A big part of my job required collaborating with national stakeholders and creating and enforcing policies to grow the sport by making it more accessible to diverse demographics. We also worked hard to increase the commercial visibility of the sport through mainstream media, including ESPN, with gender equity being a major focus area. It was cool because looking back, I learned a lot of things during that five-year period that is directly applicable to the work I’m doing to support the cannabis industry.

Ernest Toney, founder of BIPOCANN

But my interest in the cannabis industry became strong when I moved to Denver in 2011, a year before Amendment 64 passed. When Colorado became the first adult use cannabis market in the USA, it was an exciting time. I have always been curious about economics and how policies can impact people’s lives. I was interested in what was going to happen when the new market opened.

Early on, I followed the industry trends very closely. Living in downtown Denver, I saw firsthand the effects the cannabis industry was having on day-to-day life, like increased tourism, a housing market boom, a lot of new start-ups, dispensaries opening everywhere. It was just something I knew I wanted to learn more about.

Around 2016, I started making industry connections, but didn’t pursue opportunities until a few years later. Eventually, I was hired in 2018 by MJBizDaily to focus on new business initiatives. Some of my past successes with scaling programs, national and international event management, and community-building aligned with what they were looking for.

I started as the company’s first international marketing manager. In that role, I was responsible for driving marketing campaigns to increase the company’s global readership, event registrations, and business conference presence in foreign markets. After the first year, I transitioned to identify and manage marketing partnerships for the company – which included international and domestic media, event, and affiliate partnerships within and outside of cannabis.

I felt compelled to make a change amidst the social unrest this summer. I was doing my own protesting and volunteer advocacy in Denver, but started to see more broadly, in the cannabis industry, that cannabis executives and companies were bringing attention to the fact that the War On Drugs has been problematic for minorities and communities of color. There was greater talk about social equity programs and how they are not as effective as they should be. There was greater attention to the fact that over 40,000 people are still incarcerated for the plant that others are profiting from – and that the people behind bars are predominantly coming from communities of color. I was in a position that afforded me the opportunity to see what the composition of the global cannabis industry looked like, and I  could see minority representation was lacking in business ownership, leadership positions, and more.

I thought – what is the best way for me to use my talents, insights, and knowledge to affect and change this narrative? Ultimately, I decided to start my own business. Not only was this an opportunity for me to “walk the walk,” being a black man starting a business in this industry where there is a lack of black ownership, but more importantly I was uniquely positioned to be able to educate and let people know about the opportunities to be a part of the booming industry. So, I did some brainstorming and came up with a company, which is called BIPOCANN and it stands for connecting BIPOC communities to the cannabis industry.

The work I have been doing for the last quarter includes directly recruiting people into the industry. If you are curious and want to learn more about the industry, then BIPOCANN can be the entry point. We figure out what your goals are and use the network and our resources to get you connected and figure out where you want to go. Likewise, if you are a service provider, like a graphic designer, accountant, marketer or business owner for example, that sees opportunities for your business to play a role and support it from an ancillary standpoint, BIPOCANN can be an entry point for you too.

The other component to it is working with existing businesses who are trying to make the industry more accessible. I work with existing companies and brands to create platforms that amplify voices and make BIPOC folks more visible, seen and heard within the cannabis industry. We are also helping businesses increase their profitability through diversification tactics and marketing tactics that contribute to their bottom line.

CIJ: Tell me about BIPOCANN- what is it, what are your goals with this project and how has it been received so far?

Ernest: The prohibition of cannabis has disproportionately impacted communities of color in the Americas. I alluded to this earlier, but there are more than 40,000 people behind bars in the U.S. for cannabis possession and use. There’s evidence suggesting that Black Americans are up to six times more likely to get arrested for cannabis use than White Americans despite use rates being the same. And when you look at the makeup of the professional industry, there is poor representation of business ownership by people of color. The Cannabis Impact Fund references that only 4.3% of dispensaries are Black or Latinx-owned. These problems intersect in a lot of ways.

BIPOCANN is a small business working to make the cannabis industry more accessible and profitable for BIPOC professionals and business owners. Now, I know that one company cannot change 100 years of cannabis prohibition and how policy works. But if you want to make this industry more accessible, inclusive, and profitable for those who do not have the access then there are a lot of levers to pull. Policy is one. But BIPOCANN is using more direct strategies. We actively recruit people to come in and be a part of this industry, through employment, entrepreneurship, consulting, and collaborations.

We have also created the BIPOC Cannabis Business Network, a community where members can exchange services, network, and collaborate. It’s all about creating more opportunities for BIPOC professionals and business owners, and it’s a safe space to share your experiences and to ideate. Similar to your Cannabis Quality Virtual Conference, where there was a dedicated space for BIPOC folks to be seen and heard and tell their story through your virtual panels, we use our resources and network to help advocates for equity and access be seen, heard, and find opportunities to thrive as a business owner or professional.

CIJ: How do you hope BIPOCANN will be embraced by the cannabis community?

Ernest: I think it has been received well in its first quarter of business. We have had opportunities to share our story across a lot of platforms, including multiple cannabis industry conferences, podcasts, and interviews with varied media outlets. We are in startup mode, so currently we are about building a brand, being seen, and helping people understand what we are trying to achieve. We are working towards that right now. We have had some success and folks are supporting our vision and goals.

I am hoping the cannabis industry will look at BIPOCANN as another important resource within the social equity, business development, and networking landscape. I don’t want to be seen as a competitor to the organizations and individuals who have been doing similar work in this space, for much longer, but as an ally. Some of our approaches to bring new people into the industry will include strategically aligning communities and markets where we have strong ties – such as state governments, national nonprofits, and global cannabis networks.

CIJ: Where do you see the cannabis industry making progress with respect to diversity and including people of color?

Ernest: When I look at the types of conversations  and coverage the industry is having, even compared to last year, it seems like more conferences, media entities, brands, and individual leaders are tuned in and trying to figure out how they can contribute to making this industry better, more equitable and more accessible. I am seeing a lot of more attention, attempts to understand where the gaps are and what to do about it.

When I take a step back to think of all the virtual conferences that have made dedicated conference tracks or even entire programs – like the National Association of Cannabis Business’ Social Equity Conference, the Emerge Canna Conference, the Cannabis Sustainability Symposium, and the Cannabis Industry Journal’s post-election social justice panel – or weekly segments from Black leaders like Dasheeda Dawson (She Blaze) and Tahir Johnson (The Cannabis Diversity Report) — those are good signs. They are creating opportunities for voices representing underserved communities in cannabis to share their perspectives and be advocates for change.

But there is still much to do and that includes greater education about the realities, histories, and challenges BIPOC and other minority communities are facing. Going back to the NACB, they recently drafted a social equity standard for state legislatures to use as a baseline for crafting policies and provisions for social equity programs. That and resources from organizations like the Minority Cannabis Business Association, Supernova Women, Cannaclusive, Minorities for Medical Marijuana, and the Massachusetts Recreational Consumer Council, for example are some useful resources for the industry.

Wana Brands is also continuing to do good work, and it was exciting to see them become the first sponsor of the inaugural Black CannaConference by the Black CannaBusiness Magazine. That was a great example of an industry leader using their dollars, marketing resources, and company values to support an event specifically dedicated to creating, developing, and enhancing Black entrepreneurs and businesses in the cannabis industry.

“It is hard to know what even a year from now will look like.”On the policy front, we just saw on election day cannabis having a ton of success at the polls, passing in every single state where there was a ballot measure.

Arizona did a good job with having social equity provisions directly included in the language on their ballot measure. I think for the states that have yet to draft a social equity program, they can look at what has worked well in some other states and also look at what has not worked well, like loopholes that invite predatory behaviors.

I’m excited to see that Governor Ralph Northam and the Virginia Marijuana Legalization Working Group are already identifying the best ways to make a recreational market a beneficial and sustainable one, and tackling how to incorporate social equity, racial equity, and economic equity into a future legalization bill. I am looking forward to learning more after an upcoming meeting with a Working Group member. Eventually, I hope to contribute towards any social equity efforts that will benefit my home state and hometown (a high poverty community that has been at the crossroads of America’s major civil rights movements, with a correctional facility that houses an inmate population equivalent to nearly 10% of the town population).

CIJ: Where do you see the industry moving in the next five years?

Ernest: Ha-ha! It is hard to know what even a year from now will look like.

Just this week the United Nations rescheduled cannabis, which is a big deal! We also saw the U.S. House of Representatives pass the MORE Act. We are inching closer towards federal legalization in the US and I think it will happen within that five-year timeframe, and it will be contentious. There will be compromises on things some folks don’t want compromises on, there will be more big money influencing the outcomes of the industry, and there will be unforeseen or unintended consequences to whatever the federal legislation looks like. I recently moderated a panel of social equity license holders, who felt that federal legalization would harm the disproportionately impacted areas (by the War on Drugs) even more! Their preference was to see cannabis de-scheduled and remain under state control.

I think federal legalization will bring another wave of major mergers and acquisitions, similar to what the Canadian market experienced in 2019, benefiting big business over small business. “We need folks who are educated and informed about these matters to be at the policymaking level to have a fighting chance.”

CIJ: Do you think we can change that?

Ernest: There are so many things at play. The legislators need to have diverse perspectives and representation from the folks in the industry, especially people of color who can speak to the impact that a century of prohibition policies have had on their communities. Those voices and stories need to be heard, but that type of representation is grossly lacking on Capitol Hill…which is all the more reason we need leaders from the aforementioned communities to have a seat at the table when decisions are made.

I say that because a lot of time there are unforeseen consequences when policies are created, so decision makers at the federal level can learn from those of us already doing the work on the local level. I recently had a conversation with a former journalist and colleague who is currently in a cannabis regulatory role. We were talking about how policy and operations intersect with social equity. He made the points that “many markets implement license caps, which are intended to prevent oversaturation of cannabis business (the idea being that density of outlets impacts use rates, and particularly youth use rates); in theory, that’s a good policy – but it comes with very real consequences for social equity applicants (because those licenses often go to the wealthiest applicants).  License caps also artificially inflate the cost of those licenses (for a transfer of ownership), which also harms social equity applicants. Lotteries are also generally the result of policy and usually have disastrous results for the social equity applicant.”

So yeah – the rare opportunity to define a new industry that doesn’t just do business as usual, that can right its historical wrongs, and that will reward the communities that have been most harmed by cannabis enforcement, is now. And we need folks who are educated and informed about these matters to be at the policymaking level to have a fighting chance. The optimist in me says “we can do it!” The pessimist in me reminds me that it is 2020 and people still believe the Earth is flat. I’ll keep pushing for change, but I also won’t be surprised if this perfect opportunity to get it right goes wrong.

CIJ: How can people get involved in BIPOCANN?

Ernest: The best way to get involved is to visit www.bipocann.com and support our efforts by becoming an individual member or business member. Not only does that give you the opportunity to connect directly with other members in our business network, but it gives you the chance to be the first to be notified about the latest projects, events, and opportunities we’re working on to change the industry, how we can. By joining, you also directly support BIPOCANN’s goals, contribute to the operating budget of a black-owned business in cannabis, and support the nonprofit partners who we allocate a percentage of monthly sales towards.

You can also get involved by subscribing to our monthly newsletter through the website or by following our social media accounts @bipocann. We are also available for speaking, media, or consulting projects that support social equity, diversity, and inclusion in cannabis. For those types of inquiries, please contact ernest@bipocann.com.

Will Australia’s Cannabis Program Follow Canada’s Lead?

By Marguerite Arnold
No Comments

The news is intriguing in a world overwhelmed with pandemic news. THC Global, a Canadian-Aussie company now raising money and signing global deals, has just bought a “clinic network” of 30 prescribing physicians that will be able to supply up to 6,000 Australian patients this year.

In doing so, this entity is clearly beginning to establish a pattern of expansion in a new medical market not seen so far outside of Canada. Namely being able to obtain the all-important prescription for one’s brand at the doctor or prescriber’s office which is affiliated with a certain producer. Pharmacies and dispensaries downstream have no discretion for any other product to sell if the brand is written right on the prescription itself.

And this marks a new step in an industry frustrated with the high prices and high levels of red tape in other international environments where more widespread medical cannabis reform has come.

The Situation in Germany
Germany represents, so far at least, the destination market of choice for Canadian cannabis firms (for the last several years at least). This is for several very sound business reasons (at least in theory).

german flag
Photo: Ian McWilliams, Flickr

The German medical market is the largest in Europe. Health reforms which swept the country at the time of reunification also created a system that is in its own way a hybrid of the more European (and British) NHS and American healthcare. Namely, 90% of the German population is on the system, but it is tied to employment and income. Freelancers, even of the German kind, must use private healthcare as must all non-passport foreigners. If you make over a certain amount of money (about $65,000), you must also pay for private healthcare. As the cannabis revolution rolls forward, many cannabis patients are caught in changing rules and a great reluctance by public health insurers to allow fast entry of any new drug, including this one. This is based on “science” but also cost.

Bottom line? Yes, the market is lucrative and growing, and yes, cannabis is covered under public health insurance, but the ability of any producers to be able to maintain a reliable, steady market of “prescribers” is highly limited. Furthermore, unlike anywhere else in the world, pharmacists play an outsized role in the process – namely because there are no chains (more than four brick and mortar outlets are verboten). Prices and availability vary widely across the country.

There are also no “online” drug stores where patients can send prescriptions in the sense that this vertical has developed in other countries.

Hospital dispensation is, for all the obvious reasons, highly expensive and generally prohibitive for the long term, if not serving much larger numbers of patients.

The Problem in the UK
Like Germany, the UK decided to launch medical “cannabis” – or at least cannabinoid-related drugs under the purview of the NHS, but there are several issues with this.

Epidiolex-GWThe problems start with the fact that the system remains a monopoly for one British company, GW Pharmaceuticals. The medication produced by them, including Sativex and Epidiolex is expensive and does not work for many patients that it is produced “on label” for (such as MS or childhood epilepsy).

And then of course, the largest group of cannabis patients anywhere (chronic pain) have been explicitly excluded from the list of conditions cannabis can be prescribed for under public health guidelines in the UK. This, like Germany, has created a highly expensive system where those patients who obtain the drug on a regular (and legal basis) have to have both private healthcare and obtain help through private clinics. While there are several chain clinics now forming in the UK, this is not the same thing as “buying” patients in the thousands – the model seen in Canada from the beginning of 2014.

The market has a lot of potential, in other words, but like Germany, via very different paths to market than seen in Canada, in particular.

Why Is Canada Different?
The development of the medical market came through federal change in the law around the turn of the century. Namely, after patients won the right to grow for themselves, via Supreme Court legal challenge, patient collectives gradually formed to grow and sell cannabis that was more “professionally” cultivated. This, in turn, became the right of private companies and indeed household names in the Canadian market saw buying patient pools as their path to financing on the equity markets as of 2014.

This is not widely popular within the industry. Indeed, the last legal challenge mounted by the industry to ban non-profit patient collectives fell apart in 2016 – the year that the larger Canadian companies began to look abroad to Europe.

It is also undoubtedly why, beyond the red tape they face in Germany and the UK if not across Europe, Canadian firms are looking to hybridize a model which worked well for them at least in the early days of capitalization of the private industry. And maybe Australia will be “it.” Stay tuned.

Introducing the Cannabis Quality Conference & Expo

By Aaron G. Biros
1 Comment

An educational and networking event for cannabis safety and quality solutions: Innovative Publishing and Cannabis Industry Journal are pleased to present the first annual Cannabis Quality Conference & Expo (CQC). The conference will take place October 1-3, 2019, hosted at the Renaissance Schaumburg Convention Center in Schaumburg, Illinois.

The inaugural CQC will consist of two separate tracks: The Cannabis Labs track, focused on all things cannabis lab testing, and the Cannabis Quality track, focusing on quality in cannabis product manufacturing.

Sharing an exhibit hall and meeting spaces right alongside the Food Safety Consortium Conference & Expo, the CQC allows cannabis professionals to interact with senior level food quality and safety professionals, as well as regulators. Visit with exhibitors to learn about cutting-edge solutions, explore two high-level educational tracks for learning valuable industry trends, and network with industry executives to find solutions to improve quality, efficiency and cost effectiveness in a quickly evolving cannabis marketplace.

The CQC will be hosted at the Renaissance Schaumburg Convention Center in Illinois (just outside of Chicago)

With the cannabis industry in the Midwest growing at a rapid pace, the CQC offers attendees, exhibitors and sponsors unparalleled access to explore these emerging markets, their regulations, opportunities for business growth and best practices from the more established food industry.

For information on speaking opportunities and to submit an abstract, click here to view the Call for Proposals. The CQC will be accepting abstracts for consideration until June 3, 2019. For information on exhibiting, as well as additional sponsorship opportunities, contact RJ Palermo, Sales Director, rj@innovativepublishing.net, (203) 667-2212.

Take advantage of this chance to connect with cannabis industry and food safety professionals in the Greater Chicago Area. Don’t miss this opportunity to network with hundreds of industry stakeholders, get the latest on regulatory developments and see the newest technology disrupting the cannabis space.

Top 5 Cybersecurity Threats To The Cannabis Industry

By Lalé Bonner
No Comments

Is your cannabis business an attractive target for cyber criminals? With the influx of investment to this market and new businesses opening frequently throughout the United States, the legal cannabis industry is a prime target for cyber criminals.

Never share personal information (login and passwords, social security numbers, payment card information, etc.) over email.Cannabis industry hackers pick their targets by vulnerability, exploiting consumer or patient data to darknet black markets and forums. The impact can be devastating to both the business and their consumers. With new laws on protecting consumer and patient data on the horizon, businesses that do not adequately protect that data, could face stiff fines, in addition to losing the trust of their customers.

So, how do these attacks present themselves? Recent studies implicate employees as the “weakest link” in the cybersecurity chain due to a lack of cybersecurity best practices and training. Implementing safeguards and providing employee training is imperative to the cybersecurity health of your business.

Now, let’s identify the top 5 cybersecurity threats to the cannabis industry and some valuable tips for protecting against these criminal hacks:

PhishingPhishing is a form of cyber-attack, typically disguised as an official email from a trustworthy entity, attempting to dupe the recipient into revealing confidential information or downloading malware. Don’t take the bait! 91 percent of cyber-attacks start as phishing scams, with most of these lures being cast through fraudulent emails.

  • Tips: Do not download attachments from unknown senders!
  • Never share personal information (login and passwords, social security numbers, payment card information, etc.) over email.

Password ManagementPassword complexity is key to protecting against cyber breaches. When it comes to data hacking, 81 percent of breaches are caused by stolen or weak passwords. With a password often being the only barrier between you and a data breach, creating a complex password will dramatically decrease those password-sniffers from obtaining your sensitive information.

  • Tips: Create passwords that are at least 12 characters in length – include letters, numbers and symbols (*$%^!), and never use a default password. This will fend off brute-force attacks.
  • Change passwords every six months to a year, keeping them complicated and protected. For IT Managers, make using a password manager mandatory for all employees. (Pro-tip: LastPass is free).Be cautious with network selection as hackers set up free Wi-Fi networks that appear to be associated with an institution.

Public Wi-FiBeing able to connect in public spaces, while a modern marvel of convenience, leaves us wide open to cyber-attacks. Whether you are in an airport or café, always err on the side of caution.

  • Tips: Be cautious with network selection as hackers set up free Wi-Fi networks that appear to be associated with an institution.
  • Browse in a “private” or “incognito” window to avoid saving information. If you have a VPN, use it. If not, then do not handle any sensitive data.

BYOD: Beware of Bad Apps: Using personal devices for work has become the norm. In fact, approximately 74 percent of businesses have bring-your-own-device (BYOD) policies or plans to adopt in the future.

With these platforms providing greater access to mobile apps, comes greater responsibility on the part of the end user.

  • Tips: Password protect devices that will be used for work (and, any device in general).
  • Only download applications from a trusted, authorized app store. Do not use untrusted play apps.
  • Mobile device protection is recommended for any device being used on a business network.

Whether it is an app from an unauthorized website or a lost/stolen device that was not password protected, cyber criminals do not need much to compromise critical data.Avoid logging into a SaaS application on a public computer or public Wi-Fi network.

SaaS Selectively: Keep Sensitive Data Safe: SaaS (Software As A Service) are cloud-based software solutions and chances are you are using one of these SaaS solutions for work purposes. IT is typically responsible for implementing security controls for SaaS applications, but ultimate responsibility falls on IT and the end user jointly. Here is what you can do to help keep these solutions safe:

  • Tips: Avoid logging into a SaaS application on a public computer or public Wi-Fi network.
  • Never share your SaaS login credentials with unauthorized persons over digital format or in person. Lastly, if you need to step away, always lock your screen during an active session.

While these tips will help keep your consumer/patient data from falling into the wrong hands, always have a plan B- backup plan! Your plan B must incorporate saving important data to a backup drive daily. Most likely, there is already a backup protocol in place for your mission-critical work data; however, for sanity’s sake, back up your BYOD devices as well.

Blockchain Controversies Continue To Rock The Cannabis Industry

By Marguerite Arnold
2 Comments

Disclaimer: Marguerite Arnold is the founder of MedPayRx, a blockchained ecosystem that does not use utility tokens, and that is currently going to pilot in Europe designed to eliminate such risks.


As reported here in Cannabis Industry Journal last year in a three part series, there are considerable dangers of utilizing blockchain in the cannabis industry (as well as other industry sectors) that directly affect all commercial operators as well as consumers of both the recreational and medical kind. These remain largely unsolved.

These include regulatory and compliance issues in every direction, starting with banking and securities law, but also include privacy and consumer protections. They also fly in the face of regulations imposed by governments to control inflation, set prices for medications and food, and prevent monopolies.

Beyond that, they also pose considerable if so far unexamined liabilities for businesses operating in this space (including uncontrollable volatility in basic business operations) that very much impact the basic cost of doing business.As of the beginning of this year, however, the situation is back in the news. 

The Skinny On Paragon
As of November last year, the company was sanctioned by the SEC in a precedent setting case on the issue of whether “utility tokens” are securities or not. In fact, the SEC found that Paragon illegally marketed and distributed digital securities under the false pretension that they were not securities. Paragon, in turn, reached a settlement with the SEC that it would return any funds received by investors prior to October 15, 2017 and pay a fine to the SEC.

As of the beginning of this year, however, the situation is back in the news. Because of the settlement agreement, it appears that a pump and dump group operating through the exchange YoBit managed to raise the token briefly from about $.10 a token to $10 in an effort to raise the cost of compensation from Paragon. This absurd rally was completely unsustainable, and as a result, fell back to $0.3 per token (albeit tripled the price of the token). But the fact that it happened at all is illustrative of the extreme risk now faced by the industry itself from this kind of tech and financial model.

Why? It means that all users (token holders) of such an ecosystem and for any purpose, would be directly exposed to such risks in the future. And on literally an hour-by-hour basis.

Utility tokens in other words, as defined by all such models (and Paragon is far from the only one), are used not only for investment in such businesses, but then bought downstream, via exchanges, by people who wish to transact in the network itself. And that is the real danger to businesses themselves by adopting such models.

Problem 1 – Utility Tokens Are Securities

The biggest issue at the heart of this conversation is this: Tokens are recognized now as securities, and further still operating in a world where pump and dump on the exchanges is a major liability for all who buy the tokens for any purpose. This means for example, that anyone who must buy a system cybercoin to transact within a blockchained ecosystem (from consumer to business manager overseeing international distribution of their product from the commercial end) would face unprecedented volatility that does not exist by using regulated currencies. Good old dollars and euros for example do not pose this kind of existential risk to businesses themselves.

In the Paragon case directly, for example, owning Paragon crypto means that monthly rent at the incubator would fluctuate in cost based on the unregulated cost of the coin, not a prenegotiated rental agreement in regular currency for space (which is far less volatile). In the current environment, such space just tripled in price.

Beyond that, no consumer in California, for example, would want to have to face the added cost of buying a hyped token (at artificially raised prices) before they can access the newest, coolest strain of bud.

Such systems in other words, are NOT just a fancy form of a digital payment solution (like Paypal). What they do dramatically increases the risk of price volatility in all business operations (also called “cost of goods sold” or COG), andto the end user while also directly exposing all to such risk at every point of production, processing and sales.

Why?Latency issues are also a major issue.

Because the cost of conducting normal, basic business operations would be directly exposed to speculating investors. Even local businesses, in other words, would be completely vulnerable to not just the fluctuations domestically or even internationally caused by doing business in multiple jurisdictions and traditional currency risk, but have direct and unprecedented exposure to a much less regulated and far more volatile price environment globally. And further one that affects literally the entire manufacturing and distribution process.

Problem 2 – Network Congestion

Latency issues are also a major issue. This is a bit more technical and complicated, but is one of the bigger reasons why most blockchain technology and solutions are still incapable of dealing with commercial industry requirements. Much less keep regulated industries in any space, in compliance.

Here is one way to think of the problem. If you have many users on a blockchain network all at once, speed of transaction goes way down and associated costs go way up.

The tokenized asset in other words, has to compete not only with people buying the token as an investment, but those using them to buy goods and services on the commercial side AND the industry processing taking place behind the scenes to fulfil and track product. This has been easy to see with Bitcoin in particular, but is not limited to the same.

Further, prioritization on a network itself (and the costs involved to overcome them, also paid in tokens) then unfairly creates a monopoly environment because of the added costs involved to speed up otherwise normally processed and critical operations. The biggest boys on the block(chain) win. Always. That is antithetical to anti-trust law.

Problem 4 – Undermining Basic Government Regulations On Cost Of Purchase

Here is the biggest conundrum, particularly facing the international cannabis industry now in the process of exporting across international borders. Governments (particularly in Europe) routinely set prices on medicine (in particular), for large contractual purchases and to insure the continued survival of public healthcare (which in Europe and the UK covers most people). See the German cultivation bid for cannabis as a prime example. The government is forcing the industry to submit prices via competitive bid that are expected to come in somewhere between 1-1.5 euro per gram. This in turn will affect not only domestically grown but imported cannabis – and from all points on the globe as the industry opens up.

That process is impossible in an environment where the cost of production itself would be (in a price volatile blockchained delivery system) inherently unpredictable and unstable because the price of production and distribution is itself a speculated upon commodity that can vary, literally, at the speed of a pump and dumped token, sold on any unregulated exchange, anywhere in the world. And as a result, is also illegal.

Soleil control panel

IoT & Environmental Controls: urban-gro Launches Soleil Technologies Portfolio

By Aaron G. Biros
No Comments
Soleil control panel

Back in November of 2017, urban-gro announced the development of their Soleil Technologies platform, the first technology line for cannabis growers utilizing Internet-of-Things (IoT). Today, urban-gro is announcing that line is now officially available.

Soleil control panel
Screenshot of the data you’d see on the Soleil control panel

The technology portfolio, aimed at larger, commercial-scale growers, is essentially a network of monitors, sensors and controls that give cultivators real-time data on things like temperature, humidity, light, barometric pressure and other key factors. The idea of using IoT and hypersensitive monitoring is not new to horticulture, food or agriculture, but this is certainly a very new development for the cannabis growing space.

sensor
Substrate sensors, used for monitoring Ph, soil moisture & electrical conductivity.

According to Brad Nattrass, chief executive officer and co-founder of urban-gro, it’s technology like this that’ll help growers control microclimates, helping them make the minor adjustments needed to ultimately improve yield and quality. “As ROI and optimized yields become increasingly important for commercial cultivators, the need for technologies that deliver rich granular data and real-time insights becomes critical,” says Nattrass. “With the ability to comprehensively sense, monitor, and control the microclimates throughout your facility in real-time, cultivators will be able to make proactive decisions to maximize yields.”

heat map
The heat map allows you to find problem microclimates throughout the grow space.

One of the more exciting aspects of this platform is the integration of sensors, and controls with automation. With the system monitoring and controlling fertigation, lighting and climate, it can detect when conditions are not ideal, which gives a cultivator valuable insights for directing pest management or HVAC decisions, according to Dan Droller, vice president of corporate development with urban-gro. “As we add more data, for example, adding alerts for when temperatures falls or humidity spikes can tell a grower to be on the lookout for powdery mildew,” says Droller. “We saw a corner of a bench get hot in the system’s monitoring, based on predefined alerts, which told us a bench fan was broken.” Hooking up a lot of these nodes and sensors with IoT and their platform allows the grower to get real-time monitoring on the entire operation, from anywhere with an Internet connection.

soleil visuals
Figures in the system, showing temperature/time, humidity/time and light voltage

Droller says using more and more sensors creates super high-density data, which translates to being able to see a problem quickly and regroup on the fly. “Cannabis growers need to maintain ideal conditions, usually they do that with a handful of sensors right now,” says Droller. “They get peace of mind based on two or three sensors sending data points back. Our technology scales to the plant and bench level, connecting all of the aggregate data in one automated system.”

In the future, urban-gro is anticipating this will lay the groundwork for using artificial intelligence to learn when controls need to be adjusted based on the monitoring. Droller hopes to see the data from environmental conditions mapped with yield and by strain type, which could allow for ultra-precise breeding based on environmental conditions. “As we add more and more data and develop the platform further, we can deliver some elements of AI in the future, with increased controls and more scientific data,” says Droller.

urban-gro Launches Cannabis Industry’s First Line Of IoT Solutions

By Aaron G. Biros
No Comments

Last week at the MJBizCon, a major cannabis industry event held annually in Las Vegas, urban-gro launched the first technology line for cannabis growers utilizing Internet-of-Things (IoT). urban-gro, a cultivation technology company for commercial-scale growers, announced the launch of announced Soleil® Technologies, an integrated portfolio of hardware, software, and services that uses IoT.

“The solution suite includes per-plant sensing, environmental monitoring, machine diagnostics, fertigation management, lighting controls, inventory management, and seed-to-sale tracking,” reads the press release. IoT is essentially a network of devices embedded with sensors and software that allow the devices to connect and exchange data. IoT devices are used extensively in the food industry, including for integrated pest management, restaurant food safety and management and tracking product conditions such as temperature and humidity throughout the supply chain, among other uses.

Soleil consists of three primary lines:

  • Soleil 360 is the cloud-based software-as-a-service (SASS) platform that integrates all Soleil solutions.
  • Soleil Sense is the brand for all of urban-gro’s low-power wireless sensors that deliver data with the scale, precision and resolution needed for analytics and machine learning.
  • Soleil Controls is urban-gro’s product set for climate and irrigation controls, lighting systems, and other focused controls.

The core, low-power sensor that makes this unique was licensed from Edyza, a wireless innovator that specializes in low-power wireless grids that scale. urban-gro then developed on top of that sensor, including its cloud-based management, analytics, what the sensors detect and cover, etc., to make it ideal for cannabis growers.

According to Brad Nattrass, urban-gro’s chief executive officer, finding an IoT solution that can easily scale was a key goal for their business. “When evaluating the most advanced market-ready sensor technology available, it was crucial that we deliver a solution that can easily scale to thousands of sensors in order to satisfy the needs of large-scale commercial cultivators,” says Nattrass. “The introduction of Soleil demonstrates urban-gro’s commitment to going beyond simply supplying equipment, to truly serving our clients as an ongoing technological innovator and advisor, enabling cultivators to leverage today’s more advanced technologies to rise above the competition.”

“Cultivators will be able to monitor substrate moisture and EC (electrical conductivity) levels on a per plant basis, as well as track key environmental metrics like temperature, humidity, air movement, and probability of infestation,” reads the press release. “With multiple device options, cultivators can choose between several deployment options.” With the data hosted on the cloud, users can access it through web browsers, Android and iOS devices.

According to Jay Nichols, a representative of urban-gro, they have hired (and is hiring) code developers, product developers, etc. in order to expand this unit. Plant sensors are just one piece of the system, with the goal to automate the entire cultivation process, including controlling lights, pest management, irrigation and fertigation. They say it will be available in late Q1/early Q2.