Tag Archives: analytics

April 22, 2019

How Germany Gets Its Cannabis

By Marguerite Arnold

The German cannabis cultivation bid may be mostly done and dusted (although the last four lots are now up for legal challenge) but the drama is only intensifying on the ground in Germany. Namely, where is the cannabis being consumed on the ground now actually coming from?

For the past several years (in fact since 2016 when a Frankfurt-based start-up called Medcann imported the first Canadian medical cannabis into the German market in partnership with Canopy Growth), the conventional wisdom has been that Holland and Canada were the only two countries allowed to import medical cannabis into the country.

As is usually the case in the cannabis industry, when it comes to such things, there were also multiple and highly creative explanations about this strange state of affairs that sounded oddly exotic enough to be plausible. This is after all, the international cannabis business.

These explanations also usually referenced conventional industry “lore” including such tall tales as these two countries were not signatories to an international drug treaty (not true), to being European (nope) or even a member of the EU (also completely false).

Yet there was always something strange with such urban legends – perpetuated by insiders across the German industry. Starting with a deliberate vagueness about details. Especially as in the summer of 2017 when Tilray announced grow facilities in Portugal, and by the end of it, Canopy was moving into Spain, and later by early 2018 Denmark and more. Italybegan to appear on the radar of multiple big Canadian companies. Clearly all these big companies seemed to know something that those outside did not. See Greece. Not to mention the teeth-gnashing of the Israelis– repeatedly shut out of the German market by not being allowed to export by their own government until Christmas Day, 2018.

The mystery deepened in March in fact, as a furore rocked the German-based cannabis industry over the last weeks. Farmako, a new, Frankfurt-based distributor, not only announced that it was importing 50 tonnes of cannabis into the country– and from Poland (where production of such bulk has not even been seeded) – but then gave additional details on a Bloomberg appearance that appeared to indicate that in fact the medical cannabis they were already selling (sourced from other places) had come from Macedonia.

Certification, and most certainly paperwork are the name of the gameIn fact, no such transfer of cannabis had occurred from the Macedonian side (yet), although the firm in question at the other end of the deal was subjected to considerable harassment in the German canna-specialty press in the meantime.

The news, that occurred right at a time when Tilray is clearly training pharmacists for the German market, the first bid is concluding, Greece issues even more cultivation licenses, Canadian companies are clearing still stepping up their production game, and South Africa is also getting into the formal licensing act, with all sorts of interesting things afoot in Uruguay, also set off what appears to be an official investigation of the firms involved at the governmental level.

Insiders are tight lipped and nobody is willing to talk on record. However, the distribution firm, Farmako, has subsequently reported that in the month of March, they became the top selling cannabis specialty distributor in Germany. And since they are not out of business, it is also clear that while their PR may have been a little premature if not easily misunderstood, the broader message is very obvious.

What is also very clear at this point, in other words, is that the German door for cannabis and the international industry appears to be opening to product sourced from many places. Further by extension, the German government is in the process of recognizing foreign GMP certification processes from multiple countries all over the world as being equal to its own – at least on the cannabis front.

In fact, this has been going on relatively quietly for the past six months or so.

What Are The Standards, Certifications, and Qualifications?

A press release from January of this year, issued from an Australian firm called MCA, announced they had accepted the first letter of intent to ship to a German firm (in 2020). The company is currently accepting pre-orders as it finishes construction and achieves EU GMP certification. The same (female founded) firm was also present at the ICBC in Berlin this year in March, reporting that German demand from a universe of local distributors was already greater than they could fill. The news that their first sale went to German firm Lexamed, the controversial German wheelchair distributor who helped bring down the first German bid, was also largely unremarked upon at the time by most of the industry press and in fact, ever since.

In truth, it appears that the countries and companies that have the right to import to Germany must first have their own national GMP certification recognized as being equal to German standards – or a so-called Mutual Recognition Agreement (or MRA) must exist between the importer and exporter nations. It still means that to be really EU-GMP compliant, inspectors have to walk your cultivation floors. But first your country has to have the MRA. And that is a matter for lawyers and regulators to decide.

In the Australian case, the GMP equivalence for cannabis production apparently became reality within the last six months although no one is giving exact dates. In the case of Macedonia, this is pending, with German inspectors now apparently scheduled to begin inspecting domestic cultivation facilities within the next month to six weeks.

The biggest news, of course, which makes even more sense on the heels of Canopy’s latest “record breaking” U.S. acquisition, is that the EU and the U.S. will enter into an MRA in July that was finally agreed to in February of this year. This will also mean that cannabis “medicines” potentially even beyond CBD, produced via U.S. GMP processes, will be allowed to enter Europe if not Germany in the near future – and from the U.S. for the first time. Ahead of federal legalization in the U.S.

It also means that Israeli and American firms will be allowed to enter the European and thus German market for the first time (on the ground with product) by at latest, the third quarter of this year.

Caused By The Bid….and Likely Shorter Term Outcomes

What the events of the last several weeks make clear is that the bid is not only insufficient for demand, but the authorities are officially, if quietly recognizing the same. There are already rumours about the next cultivation tenders in Germany, and there is a high likelihood that other countries (see Poland in particular) may also follow suit shortly.

Further, the difficulties in making sure that not only countries but the companies based in the same remain compliant with EU and further German sanctified EU- GMP processes (for one) is likely to be an issue that continues to bubble. Why? It is a problem already in the broader pharmaceutical market here.

The Plusses and Minuses of The News

The first thing that is also obvious is that even Wayland cannot source the entire German market with the product it has begun to grow here no matter who ends up with the last four cultivation licenses this time around. Further, that the other winning bid firms (Aphria and Aurora as known at this point) without cultivation on the ground, are sourcing from somewhere that is also probably at this point, not even Canada. No matter how much expansion is going on in Canada, in other words, what is now entering the German market may bear a Canadian brand but could just have easily been sourced from almost anywhere in the world.

That also means that enterprising firms (see Australian MCA) can skip the Canadian introduction to the German market and sell directly to local producers before they even have crops on the ground, as well as the burgeoning German cannabis distributors across the country.

For such firms now wanting to enter the market, however, it is not all clear sailing. The events of the last few weeks clearly show that the government is watching, including reading English language industry press, and willing to pursue any firms it deems are breaking the rules on both sides of national borders.

Certification, and most certainly paperwork are the name of the game, as well as greater accuracy in company intentions (even if in the near term).

Disclaimer: Nysk, the Macedonian firm referred to in this story, is a sponsor of the MedPayRx pilot to market program

April 16, 2019

First Lab Authorized for Cannabis Testing in North Dakota

By Aaron G. Biros

No Comments

According to a press release published on April 3, Keystone State Testing (doing business as Dakota State Testing) became the first laboratory authorized to test cannabis in North Dakota. The lab also obtained their ISO 17025 accreditation for cannabis testing from the American Association of Laboratory Accreditation (A2LA), which is another first achievement for cannabis testing in the state of North Dakota.

Dr. Kelly Greenland, chief science officer at Keystone State Testing, says the North Dakota Department of Health set a high standard for the cannabis lab testing industry in the state. “Keystone State Testing is once again proud to of this monumental achievement and critical milestone in the company’s history to have met the highest levels of standards set forth by both A2LA and the North Dakota Department of Health,” says Greenland. “Keystone chose A2LA as its Accreditation Body due to their reputation in the industry, their diverse clientele, and the quality of their assessors. A2LA’s assessors have spent decades in their respective fields, which helps to ensure that Keystone is providing the best services possible to their clients, regulators and patients.”

Keystone State Testing’s ISO 17025 accreditation scope covers 11 testing methods at their facility in Fargo, North Dakota. Those methods include: Cannabinoid potency analysis, cannabinoid profile, moisture content, residual solvents, water activity, along with microbiological tests like total yeast and mold count, E. coli, Salmonella, total aerobic microbial count, among others.

April 11, 2019

Introducing the Cannabis Quality Conference & Expo

By Aaron G. Biros

1 Comment

An educational and networking event for cannabis safety and quality solutions: Innovative Publishing and Cannabis Industry Journal are pleased to present the first annual Cannabis Quality Conference & Expo (CQC). The conference will take place October 1-3, 2019, hosted at the Renaissance Schaumburg Convention Center in Schaumburg, Illinois.

The inaugural CQC will consist of two separate tracks: The Cannabis Labs track, focused on all things cannabis lab testing, and the Cannabis Quality track, focusing on quality in cannabis product manufacturing.

Sharing an exhibit hall and meeting spaces right alongside the Food Safety Consortium Conference & Expo, the CQC allows cannabis professionals to interact with senior level food quality and safety professionals, as well as regulators. Visit with exhibitors to learn about cutting-edge solutions, explore two high-level educational tracks for learning valuable industry trends, and network with industry executives to find solutions to improve quality, efficiency and cost effectiveness in a quickly evolving cannabis marketplace.

The CQC will be hosted at the Renaissance Schaumburg Convention Center in Illinois (just outside of Chicago)

With the cannabis industry in the Midwest growing at a rapid pace, the CQC offers attendees, exhibitors and sponsors unparalleled access to explore these emerging markets, their regulations, opportunities for business growth and best practices from the more established food industry.

For information on speaking opportunities and to submit an abstract, click here to view the Call for Proposals. The CQC will be accepting abstracts for consideration until June 3, 2019. For information on exhibiting, as well as additional sponsorship opportunities, contact RJ Palermo, Sales Director, rj@innovativepublishing.net, (203) 667-2212.

Take advantage of this chance to connect with cannabis industry and food safety professionals in the Greater Chicago Area. Don’t miss this opportunity to network with hundreds of industry stakeholders, get the latest on regulatory developments and see the newest technology disrupting the cannabis space.

April 8, 2019

A2LA Accredits GoodCat Analytical to ISO/IEC 17025

By Aaron G. Biros

1 Comment

According to a press release published last week, the American Association of Laboratory Accreditation (A2LA) announced the accreditation of GoodCat Analytical, LLC, a cannabis testing laboratory based in Naples, Florida. This marks the first time that A2LA has accredited a cannabis testing lab in the state.

Adam Gouker, A2LA General Manager, says this is a momentous achievement for GoodCat Analytical. “A2LA is excited to expand our cannabis accreditation program into yet another state, promoting the value of independent third-party accreditation to support quality products in the industry,” says Gouker. “We congratulate GCA Laboratories in achieving this milestone for their organization and wish them all the best as they move forward with this new endeavor.”

According to Jimmy Dodsworth, chief science officer at GoodCat Analytical, they had to develop a lot of methods on their own. “I can’t say enough about each of our staff members efforts to develop and validate each analytical method,” says Dodsworth. “The level of quality for these internally developed tests is amazing considering we started from scratch.”

Raymond Keller, owner and president of GoodCat Analytical, says A2LA’s support was an incredibly valuable resource for them. “We also need to acknowledge the tremendous guidance and support from the A2LA staff,” says Keller. “There is no doubt that they had a hand in making our lab the impressive operation it is today and know they will continue to do so moving forward.”

April 1, 2019

Soapbox

Third-Party Cannabis Safety Audits & How to Prepare in 7 Steps

By Tyler Williams

2 Comments

Unlike the food industry, the cannabis industry is still in its infancy. Which means there is not a push from retailers demanding cannabis farmers, extractors or manufacturers to get third-party audits. In fact, most grow operations supply into their own dispensaries. So why should a cannabis farmer, extractor or manufacturer get a third-party audit? Third-party audits are crucial to maintaining product safety and quality by providing a third set of eyes to verify what is working and what is not. Besides regulatory requirements and customers requiring your facility to get a third-party audit, there are numerous other benefits to receiving an audit. Some of these benefits include:

Improvement to product safety
Improvement to product quality and consistency
Meeting regulatory compliance
Eliminating potential risks and possible recalls
Marketing advantages over competitors who are not audited by a third-party
Improvement to consumer confidence and an increase to brand loyalty

How to Prepare for a Third-Party Audit

Working for a certification body, I am in the unique position to see numerous sites go through the certification process. In this position I have seen both extremes: Sites that spend 6-8 months and a lot of resources preparing for an audit, as well as sites that wait until the day before to even look at the audit standard. Unfortunately, the latter is almost always going to fail the audit. Here are seven steps for preparing for your next third-party audit.“By failing to prepare, you are preparing to fail.”– Benjamin Franklin

Start Preparing Early

Think of your third-party audit as a college exam one month away. You could start studying for the exam now and get a real understanding of the material or you could wait until the day before to start your no-sleep, energy drink-fueled, 24-hour cram session. We all know which preparation method will get a better score on the exam. Now let’s apply that same strategy to your third-party audit. Once you have decided what audit is best for your site and have those specific standards in your hand, the clock starts ticking and you should already be preparing for the audit, whether it is one month or six months away.

Get Management Commitment

It is essential to the entire cannabis safety and quality system to have commitment from top down. Without this, the site will not get the resources (people, equipment, money, time, etc.) they need to pass a third-party audit. Management commitment is so important that it is often seen as its own section in most modern audit standards. It is very easy for third-party auditors to identify when there is a lack of management commitment in a site. Therefore, if you don’t get management commitment, then you are already starting off the audit on a bad note.

Create a To-Do-List

Think of the entire audit checklist or standard as your long to-do list. Some things, like attaining a certificate of analysis (COA) from a supplier, may only need to be done annually. While other things, such as ensuring employees are following Good Manufacturing Practices (GMPs), will need to be done continuously throughout day to day operations. Go through the audit checklist and separate what needs to be done annually, semiannually, quarterly, monthly and continuously throughout day to day operations. This will give you a list with all of the frequencies of each different requirement.

Teamwork“Teamwork makes the dream work, but a vision becomes a nightmare when the leader has a big dream and a bad team.” – John C. Maxwell

The preparation of an audit should never rest on the shoulders of one person. Yet this is something I tend to see too often in both food and cannabis facilities alike. Your site should establish a cannabis safety and quality team of multidiscipline personnel that have an impact on product safety and quality. Once the team is established, various tasks from the to-do-list can be disbursed among all the members of the team. Collaboration is key to successfully preparing for a third-party audit, especially when the timelines are very stringent.

Training

Training is essential to preparing for your third-party audit. This is what closes the gaps between what the safety and quality department have developed and what your front-line employees are applying. All employees should know what part of the audit standard applies to them. Additionally, employees should be trained on interview questions that the auditor might ask them during the audit. Helping them prepare for these types of questions will help ease their nerves and allow them to answer the questions with self-assurance when it comes time to the actual audit.

Conduct Internal Audits

Conducting internal audits is not only a great way to prepare for your third-party audit, it’s a requirement. You should always use the audit checklist to observe your documents and facility to see where there are gaps. If possible, the person or team conducting the internal audit should never review their own work. Additionally, all issues or non-conformances should be noted, evaluated, corrected and closed out.

Third-Party Pre-Assessment or Mock Audit (Optional)

A third-party pre-assessment or mock audit is the closest thing you can get to an actual audit. This is where a company would come in and evaluate your site to the specific standards and give a formal report over any deficiencies found during the assessment and how to fix them. This is a great way to test your preparedness before the actual audit.

March 27, 2019

British Barristers Take On Cannabis “Novel Food” Regulation In Brussels

By Marguerite Arnold

No Comments

The first thing to understand about the significance of the British barristers now challenging the EU’s classification of hemp extracts as a novel food is that this is like jumping into the middle of an action adventure by coming in at the second act. In other words, you miss the introduction and the first couple of car chases.

That said, this action movie also features a cannabis-flavored plot. Those used to the maddening hair splitting now going on just about everywhere as the industry gains legitimacy, in other words, are familiar with the larger story line.

Here are the “CBD Cliff’s Notes.”

The structure of cannabidiol (CBD), one of 400 active compounds found in cannabis.

It is highly significant that a major British cannabis trade organization, the Cannabis Trades Association, hired a leading law firm in London to go sue the EU over its recent decision to lump all CBD extracts into the same “novel” distinction. Up until now, only CBD sourced from cannabis had fallen prey to this strange regulation. Thus, the lawsuit. No Brexit themes involved. Yet. Although that too will play a role in all of this.

What Is This Really About?

If those in the CBD business are honest with themselves, the real reason for this segmented part of the cannabis industry to even exist in the first place is the race, desire and need to actually be allowed to operate in relative regulatory peace. No matter what the battles are on the THC front. CBD has been seen as a result, pretty much since the beginning of the new age of legalization, as the “safer” political and market entry choice by those in regions such as U.S. southern states and the burgeoning, can’t-wait-to-be-off-to-the-races, market in Europe. See the new federal hemp legalization bill in the United States as Exhibit A.

However, in Europe this has run into more than a few problems since the Swiss put “low THC” or “Cannabis Lite” on the map more locally. Starting with the whole discussion about licensing in general. And then, even more confusingly, about what to actually classify the plant. Especially when it is used in food and cosmetics as opposed to “medicine.”

Specifically, where does the cannabis plant in general, let alone its individual components, really fall when it comes to regulated human consumption?

european union states — Member states of the European Union

For the time being- read last year when the industry in Spain was facing police busts over CBD cookies on the shelves at health stores- the conventional industry wisdom was that this whole furore was “just” over the use of concentrates, tinctures and other products made from cannabis-sourced CBD. However, given the noise that Austria managed to make over Christmas about the entire “licensing” issue (namely who has the right to produce, sell and package even CBD as a cannabinoid no matter where it is sourced), the EU also moved all CBD products and tinctures- even those made from good old hemp- into the novel food category.

This means in effect, that even CBD extracts produced from the hemp plant (which is actually the majority of such product in Europe) must now be regulated as a “novel food” too. Even though in poor old hemp’s case, it is certainly the case that health food nuts have been consuming the same in Europe long before (and certainly after) standing EU “novel food” regulations were put into place back in the late 90’s.

Thus, the lawsuit, launched from a country unsure of whether it will even be in the EU post-May (either the month or the current PM).

According to the EU at least for now, CBD itself is a “novel food” no matter from where it is sourced. And that, according to not only science but food history is an absolute fallacy.consumer safety, from factory to pharmacy or farm to table, is never far from the discussion

Likely Outcomes

Those who were hoping that CBD would remain unregulated in the EU should think again. It is highly likely that what will happen is that CBD production licensing is in the cards and just about everywhere. Think GMPs but with a consumer-food twist.

While indie producers might groan at the prospect of fees and licensing procedures, remember this is Europe. And consumer safety, from factory to pharmacy or farm to table, is never far from the discussion.

While this lawsuit, in other words, is likely to make the EU think more closely about regulating CBD in general, what is most likely to happen is that entire enchilada will be lumped under a regime to insure that high quality production, particularly of crops bound for consumption, is also extended to anything that ends up in either a food or cosmetic product.

CBD Producers Have To Keep Current On Regs

Given the current murkiness that exists, in other words at this point across Europe, in every country and for every CBD product, exports here from other places are still not a great idea.

There are labeling, licensing and of course, ultimately legislative issues that are all still in flux. And while the outcome of the lawsuit might eventually regulate and standardize things, the idea that a license-free CBD production industry is clearly now dead in the water.

March 26, 2019

Stratos: Quality, Expansion & Growth in Multiple Markets

By Aaron G. Biros

No Comments

Jason Neely founded Stratos in 2014, when he and a small group of people left the pharmaceutical industry in search of a new endeavor in the cannabis marketplace. The concept was straightforward: Apply pharmaceutical methodologyof production to cannabis products. Back then, Stratos offered a range of THC-infused tablets in the Colorado market.

Brenda Verghese, vice president of research & development, was one of five people on staff when Stratos launched. Now they have about 30 team members. Consumers were looking for a cannabis product that would be consistent and reliable every time, taking the guesswork out of infused products dosage. That’s where Brenda Verghese found her skillset useful.

Transitioning to the pharmaceutical industry right out of college, Verghese started her career as a chemist and worked her way up to the R&D business development sector. “I specializedin formulations and taking a product from concept to commercialization in the pharmaceutical space,” says Verghese. “Jason Neely approached me with the idea of a cannabis company and focusing on making products as effective and consistent as possible, so really bringing pharmaceutical science into the cannabis space. In the matter of 4 years we grew substantially, mainly focusing on the efficacy of products.”

Behind the scenes at packaging and labeling Image credit: Lucy Beaugard

Soon after the success of their THC products became apparent, Stratos launched a CBD line, quickly growing their portfolio to include things like tinctures and topicals as well. According to Verghese, they are hoping that what’s been established on the THC side of their business as far as reproducibility and consistency is something that consumers will also experience on the CBD side. “Quality and consistency have definitely driven our growth,” says Verghese. “That is what consumers appreciate most- the fact that every tablet, tincture or swipe of a topical product is going to be consistent and the same dose every time.” This is what speaks to their background in the pharmaceutical sciences, FDA regulation has taught the Stratos team to create really robust and consistent formulations.

Quality in manufacturing starts at the source for Stratos: their suppliers. They take a hard look at their supply of raw materials and active ingredients, making sure it meets their standards. “The supplier needs to allow us to do an initial audit and periodic audits,” says Verghese. “We require documentation to verify the purity and quality of oil. We also do internal testing upon receipt of the materials, verifying that the COAs [certificates of analysis] match their claims.”

Process validation in action at the Stratos facility
(image credit: Lucy Beaugard)

Verghese says maintaining that attention to detail as their company grows is crucial. They implement robust SOPs and in-process quality checks in addition to process testing. They test their products 5-6 times within one production batch. Much of that is thanks to Amy Davison, director of operations and compliance, and her 15 years of experience in quality and regulatory compliance in the pharmaceutical industry.

Back in August of 2018, Amy Davison wrote an article on safety and dosing accuracy for Cannabis Industry Journal. Take a look at this excerpt to get an idea of their quality controls:

Product testing alone cannot assess quality for an entire lot or batch of product; therefore, each step of the manufacturing process must be controlled through Good Manufacturing Practices (GMP). Process validation is an aspect of GMPs used by the pharmaceutical industry to create consistency in a product’s quality, safety and efficacy. There are three main stages to process validation: process design, process qualification and continued process verification. Implementing these stages ensures that quality, including dosing accuracy, is maintained for each manufactured batch of product.

Fast forward to today and Stratos is looking at expanding their CBD products line significantly. While their THC-infused products might have a stronger brand presence in Colorado, the CBD line offers substantial growth potential, given their ability to ship nationwide as well as online ordering. “We are always evaluating different markets and looking for what suits Stratos and our consumer base,”says Verghese.

March 26, 2019

Top 5 Cybersecurity Threats To The Cannabis Industry

By Lalé Bonner

No Comments

Is your cannabis business an attractive target for cyber criminals? With the influx of investment to this market and new businesses opening frequently throughout the United States, the legal cannabis industry is a prime target for cyber criminals.

Never share personal information (login and passwords, social security numbers, payment card information, etc.) over email.Cannabis industry hackers pick their targets by vulnerability, exploiting consumer or patient data to darknet black markets and forums. The impact can be devastating to both the business and their consumers. With new laws on protecting consumer and patient data on the horizon, businesses that do not adequately protect that data, could face stiff fines, in addition to losing the trust of their customers.

So, how do these attacks present themselves? Recent studies implicate employees as the “weakest link” in the cybersecurity chain due to a lack of cybersecurity best practices and training. Implementing safeguards and providing employee training is imperative to the cybersecurity health of your business.

Now, let’s identify the top 5 cybersecurity threats to the cannabis industry and some valuable tips for protecting against these criminal hacks:

Phishing: Phishing is a form of cyber-attack, typically disguised as an official email from a trustworthy entity, attempting to dupe the recipient into revealing confidential information or downloading malware. Don’t take the bait! 91 percent of cyber-attacks start as phishing scams, with most of these lures being cast through fraudulent emails.

Tips: Do not download attachments from unknown senders!
Never share personal information (login and passwords, social security numbers, payment card information, etc.) over email.

Password Management: Password complexity is key to protecting against cyber breaches. When it comes to data hacking, 81 percent of breaches are caused by stolen or weak passwords. With a password often being the only barrier between you and a data breach, creating a complex password will dramatically decrease those password-sniffers from obtaining your sensitive information.

Tips: Create passwords that are at least 12 characters in length – include letters, numbers and symbols (*$%^!), and never use a default password. This will fend off brute-force attacks.
Change passwords every six months to a year, keeping them complicated and protected. For IT Managers, make using a password manager mandatory for all employees. (Pro-tip: LastPass is free).Be cautious with network selection as hackers set up free Wi-Fi networks that appear to be associated with an institution.

Public Wi-Fi: Being able to connect in public spaces, while a modern marvel of convenience, leaves us wide open to cyber-attacks. Whether you are in an airport or café, always err on the side of caution.

Tips: Be cautious with network selection as hackers set up free Wi-Fi networks that appear to be associated with an institution.
Browse in a “private” or “incognito” window to avoid saving information. If you have a VPN, use it. If not, then do not handle any sensitive data.

BYOD: Beware of Bad Apps: Using personal devices for work has become the norm. In fact, approximately 74 percent of businesses have bring-your-own-device (BYOD) policies or plans to adopt in the future.

With these platforms providing greater access to mobile apps, comes greater responsibility on the part of the end user.

Tips: Password protect devices that will be used for work (and, any device in general).
Only download applications from a trusted, authorized app store. Do not use untrusted play apps.
Mobile device protection is recommended for any device being used on a business network.

Whether it is an app from an unauthorized website or a lost/stolen device that was not password protected, cyber criminals do not need much to compromise critical data.Avoid logging into a SaaS application on a public computer or public Wi-Fi network.

SaaS Selectively: Keep Sensitive Data Safe: SaaS (Software As A Service) are cloud-based software solutions and chances are you are using one of these SaaS solutions for work purposes. IT is typically responsible for implementing security controls for SaaS applications, but ultimate responsibility falls on IT and the end user jointly. Here is what you can do to help keep these solutions safe:

Tips: Avoid logging into a SaaS application on a public computer or public Wi-Fi network.
Never share your SaaS login credentials with unauthorized persons over digital format or in person. Lastly, if you need to step away, always lock your screen during an active session.

While these tips will help keep your consumer/patient data from falling into the wrong hands, always have a plan B- backup plan! Your plan B must incorporate saving important data to a backup drive daily. Most likely, there is already a backup protocol in place for your mission-critical work data; however, for sanity’s sake, back up your BYOD devices as well.

March 25, 2019

EVIO Labs Florida Achieves ISO17025:2017 Accreditation

By Aaron G. Biros

No Comments

EVIO Labs Florida received their ISO 17025:2005 accreditation in February of 2018. Last week, EVIO Labs Florida announced via a press release that they completed their ISO 17025:2017 accreditation and received a certification from AOAC International. The accreditation helped them to further expand their testing scope to shelf life and stability testing, the ability to detect harmful bacteria and calculate degradation in samples.

The certification that they received from AOAC helps verify their ability to conduct accurate and fair 3^rdparty testing, meeting Florida’s requirements for the market. Back when the laboratory first started in 2017, there were no requirements for lab testing cannabis products under Florida’s regulations.

Chris Martinez, co-founder and president of EVIO Labs Florida

Upon expanding to their Gainesville location in November last year and getting accredited to ISO 17025:2017 last week, EVIO Labs Florida expects the new location to be compliant and operational by April 2019, in preparation for the state’s new regulations. “Our team has worked diligently to maintain our stance as the Gold Standard in Cannabis Testing,” says Chris Martinez, co-founder and president of EVIO Lab Florida. “The ability to obtain the recent ISO 17025:2017 and AOAC certification is a testament to our dedication in maintaining public safety and product integrity in an ever-growing industry.”

Martinez is also presenting during the 2^ndAnnual Cannabis Labs Virtual Conference on April 2, where he will discuss how EVIO Labs Florida began as a laboratory and how they were able to expand to a second location and grow their market presence in Florida. Click here to register for his talk.

March 25, 2019

How a Cloud QMS Can Get Cannabis Startups ISO 9001-Certified

By Mike Hansen

1 Comment

When it comes to compliance for cannabis startups, the ISO 9000 family of standards reigns supreme. Providing the guidelines for the concepts that make up a quality management system (QMS), the ISO family is composed of five standards: ISO 9000, 9001, 9002, 9003 and 9004. Outside of ISO 9001, ISO 9000 is the most important because it creates the foundation that guides all of the other standards.

ISO 9000 is split into two sections: fundamentals and vocabulary. Fundamentals covers the basic principles of quality management and the vocabulary section is a dictionary of quality management terminology. ISO 9000 is crucial because it provides direction on proper QMS implementation that will lead to achieving an ISO 9001 certification.

While the entire ISO 9000 family is focused on quality management systems that aim to help organizations “ensure that their products and services consistently meet customer’s requirements and that quality is consistently improved,” ISO 9001 is the only standard that lists actual requirements and requires certification.Cloud-based quality management software provides the flexibility and scalability, that cannabis startups need to comply with ISO 9001

Quality Management Systems (QMS)

When conceptualizing “quality management,” it is best to think of it as an organization’s definition of how it will meet the quality requirements of customers and other stakeholders who are affected by its work. Implementing this requires an extensive alignment of company processes and procedural governance.

It’s easiest to think of a QMS as the facilitator of outlined processes that are required to fulfill ISO 9001 requirements. For example, if an organization has defined a change request process, it could use a cloud-based QMS to put that process in place. However, the benefits of a cloud-based QMS don’t have to end at ISO 9001. It can also help organizations comply with other regulations like GxP.

ISO 9001 Requirements

ISO 9001 requirements can sound very generic because they’re meant to be applied to any organization, big or small, in any industry. The key to ISO 9001 is the concept of continuous improvement, which is why specific requirements for what “quality” is are not defined. Rather, companies must create objectives and work toward improving processes to meet those objectives. That said, a certified QMS still must do the following:

Meet the requirements of other stakeholders, for example, customer requirements and regulatory standards
Ensure that employees receive training outlining the quality requirements
Determine and document the processes, their interactions and their results
Be able to produce records to prove that system requirements have been met
Constantly monitor quality management software performance
Address any risks that could result from changes
Perform internal audits and correct any issues
Continuously improve the QMS

From creation to disposal, document protocols must be clear and properly followed.With that in mind, ISO 9001’s purpose is to evaluate whether or not a QMS does a good job of managing processes while also being able to help organizations identify areas that need improvement. In simple terms, ISO 9001 helps companies who were making an excellent product most of the time, make an excellent product every time.

How can cloud quality management software help you get your ISO 9001 certification? Once you create processes that adhere to ISO 9001 quality management standards, you have to put them into practice. Enter: quality management software. But, how exactly does it help?

Optimal Time to Value

First, cloud-based software is the most cost-efficient to implement. Secondly, since a QMS needs to be accessible to every employee regardless of whether they work at HQ or on-site, cloud QMS are built to be mobile-friendly and easily accessed from any location.

Automated Document Lifecycles & Version Control

From creation to disposal, document protocols must be clear and properly followed. As up-to-date documents are an important factor in maintaining high levels of quality, the most recent versions of approved documents should be readily available while previous editions should be hidden away.

With cloud quality management software, workflows can automate the review and approval processes by automatically sharing documents with the right reviewers. Then, after the document has been approved, the changes will automatically be applied to the master document while the obsolete version is archived, helping to remove any chance of it being accidentally used after the update.

Easy Document Location & Metadata

According to ISO 9001, searching through an organization’s documents should be as easy as searching with Google. It’s an added bonus when the quality management software enables users to add custom metadata to documents. Metadata is just extra information that helps to define a document (like file size, type, date modified). With certain cloud-based QMS’, you can add custom metadata fields to make documents easier to find. For example, you can add an “expiration date” field that allows you to look up policies based on when they are set to expire.With the growing number of data breaches happening every year, it’s important to address the security components of a QMS.

Document Traceability

In order to pass any ISO 9001 audit, there needs to be a complete audit trail for every document, including active documents and the earlier archived versions. While this might seem like a big ask, cloud quality management software helps make this simple. Every single change to a document, regardless of whether it’s the current or past version, is tracked. When combined with automated workflows, you’re able to produce a precise log of every change made by every user.

Advanced User Permissions & Central File Ownership

With the growing number of data breaches happening every year, it’s important to address the security components of a QMS. Many of these issues can be resolved with user permissions, which is generally related to managing users’ editing and sharing access. The proper view, edit, and approval rights go a long way to reducing the risk of human error.

Another feature that may seem like common sense is central file ownership. When the organization owns all of its documents, there’s no need to worry that important files will be lost or deleted. With one owner, the damage that can be inflicted by malicious third-parties is also limited.

Cloud-based quality management software provides the flexibility and scalability, that cannabis startups need to comply with ISO 9001. With the cloud as a foundation, these systems will continue to be assets for the cannabis industry as it gains momentum and expands more.