Tag Archives: management

Aphria, Inc. Implements Quality Management Systems

By Cannabis Industry Journal Staff
1 Comment

According to a press release published today, Aphria Inc. has implemented Rootstock Software’s cloud Enterprise Resource Planning (ERP) solutions and ComplianceQuest’s Enterprise Quality Management System (EQMS). Aphria, one of the largest cannabis companies in the world, trades on both the Toronto Stock Exchange and the New York Stock Exchange.

Rootstock’s cloud ERP software includes things like order processing, production management, supply chain management, lot and serial number trackability and traceability, compliance reporting, costing and financial management. ComplianceQuest’s EQMS software provides support for GMP compliance and can help improve efficiencies in operations. The EQMS focuses on quality and risk management across Aphria’s business platforms, from sourcing to manufacturing to supply chain management.

Aphria is using the entire EQMS platform, which includes software to handle documents, training, changes, inspections, nonconformance, corrective actions (CAPA) and customer complaints which integrates to Rootstock’s ERP. According to the press release, the company is currently working to roll-out audit, equipment, incident and supplier management functions and will be fully live with the entire quality system in the next few months.

According to Tim Purdie, chief information officer & chief information security officer of Aphria Inc., both platforms delivered on their implementation. “Grounded in the scalability of the force.com platform, CQ transformed our quality management operating capabilities overnight and we are delighted at the fully integrated partnership result,” says Purdie. “We now have fully digital real-time informatics and ability to implement change in a highly transparent manner to meet the demands of our high growth business.”

Adding that Rootstock ERP will help facilitate their company’s production, inventory and supply chain management, Purdie says both platforms will enable Aphria to be increasingly responsive to market needs. “Aphria is setting the standard as a worldwide leader in the cannabis industry through a diversified approach to innovation, corporate citizenship, strategic partnerships and global expansion,” Purdie says. “With these system implementations, we’re now technologically equipped to take our competitive advantage to new levels of market leadership.”

Soapbox

Cannabis Growers and Distributors: Your Cyber Risk is Growing Like Weeds

By Emily Selck
No Comments

Cannabis growers and distributors are “green” when it comes to cyber security. Unaware of the real risks, cannabis businesses consistently fall short of instituting some of the most basic cybersecurity protections, leaving them increasingly vulnerable to a cyber-attack.

Cannabis businesses are especially attractive to hackers because of the vast amount of personally identifiable and protected health information they’re required to collect as well as the crop trade secrets they store. With businesses growing by leaps and bounds, and more and more Americans and Canadians purchasing cannabis, cybercriminals are likely to increase their attacks on the North American market in the coming year. Arm your cannabis business with the following best practices for growers and distributors.

Distributor Risk = A Customer’s PII

Cyber risk is the greatest for cannabis distributors, required to collect personal identifiable information (PII), including driver’s licenses, credit cards, medical history and insurance information from patients. State regulatory oversight further compounds the distributor’s risk of cyber-attack. If you’re a cannabis distributor, you’ll want to make sure to:

  • Know where you retain buyer information, and understand how it can potentially be breached. Are you scanning driver’s licenses into a database, or retaining paper files? Are you keeping them in a secure area off site, or on a protected network? Make sure a member of your management team is maintaining compliance with HIPAA and state statutes and requirements for cannabis distribution.
  • Institute strong employee oversight rules. Every employee does not have to have access to every sale, or your entire database of proprietary customer information. Delegate jobs behind the sales desk. Give each employee the access they need to do their job – and that’s it.
  • Distributors have to protect grower’s R&D information too. Most cannabis distributors have access to their grower’s proprietary R&D information so they can help customers understand which products are best for different medical symptoms/needs. Make sure your employees don’t reveal too much to put your suppliers in potential risk of cyberattack.

Grower Risk = Crop Trade Secrets

For cannabis growers, the risk is specific to crop trade secrets, research and development (R&D). If you’re a cannabis grower, you’ll want to:

  • Secure your R&D process. If you’ve created a cannabis formula that reduces anxiety or pain or boosts energy, these “recipes” are your competitive advantage – your intellectual property. Consider the way you store information behind the R&D of your cannabis crops. Do you store it on electronic file, or a computer desktop? What type of credentials do people need to access it? Other industries will use a third party cloud service to store their R&D information, but with cannabis businesses that’s typically not the case. Instead, many growers maintain their own servers because they feel this risk is so great, and because their business is growing so fast, there are not yet on the cloud.
  • Limit the number of people with access to your “secret sauce.” When workers are harvesting crop, or you’re renting land from farmers and planting on it, make sure to keep proprietary information in the hands of just the few who need it – and no one else. This is especially important when sharing details with third party vendors.

Cyber coverage is now ripe for picking

Although cannabis businesses are hard to insure – for just about every type of risk – cyber insurance options for cannabis companies have recently expanded, and come down in price. If you’ve looked for cyber coverage in the past and were previously unable to secure it, now is the time to revisit the market.

Know that cyber policy underwriters will do additional due diligence, going beyond the typical policy application, and ask about the types of proprietary information you collect from customers, as well as how you store and access it at a later date. Have this knowledge at your fingertips, and be ready to talk to underwriters about it when you’re bidding for a new policy – and at renewal time.

When You Don’t Know What You Don’t Know: Debunking Cannabis Insurance Myths

By , T.J. Frost
No Comments

For all of today’s growing acceptance and legitimacy with cannabis, the reality is that today’s operators – whether growers/producers or dispensary operators – still face risks in running their businesses. If, in the old days, a customer got deathly ill from cannabis contaminated with something from somewhere during the distribution chain, oh, well. But now that there’s a legal system of checks and balances; there’s recourse when issues arise.

The problem is that the business is so new that most people don’t know what they don’t know about mitigating those risks. And that, unfortunately, extends to many in the insurance business who need to be doing a better job helping put the right protections in place.

One grower bemoaned to me at a cannabis trade show, “I sure wish I could insure my crops.” What? “You can,” I told him. His old-school ag broker didn’t know any better and didn’t do him any favors with his ignorance. But it brought home the point: We have to start treating cannabis like the real business it is.

Reviewing the existing insurance policies of today’s cannabis businesses uncovers some serious gaps in coverage that could be financially crippling if not downright dangerous should a claim be triggered. Retail dispensaries, for example, are high-cash businesses, making banking and trusted employees a must-have.Today’s cannabis businesses need to understand there will be risks but they are a lot more manageable than in the old days. 

And a close eye must be cast to lease agreements for hidden exposures, too. We know a Washington state grower that had no property insurance on its large, leased indoor growing facility. The company’s lease made its owners, not their landlord, responsible for any required building improvements. It was one of a variety of serious exposures that had to be fixed.

Today’s cannabis businesses need to understand there will be risks but they are a lot more manageable than in the old days. Rather than find themselves under-insured, they can start by learning what they probably have wrong about insurance. Dispelling three of the most common myths is a good place to start.

Myth #1: Nobody will insure a cannabis business.

Not remotely true. You can and should get coverage. Think property and casualty, product liability, EPLI and directors and officers, employee benefits and workers comp. Additionally, you should be educated on what crop coverage does and doesn’t cover. Depending on your business’ role in production and distribution, you might also consider cargo, stock throughput, auto, as noted, crime and cyber coverage. It pays to protect yourself.

Myth #2: If my business isn’t doing edibles, I don’t have to worry about product liability insurance.

The reality is that product liability may be the biggest risk the cannabis industry faces, at every level on the supply chain. There’s a liability “trickle down” effect that starts with production and distribution and sales and goes down to labeling and even how the product is branded. Especially when a product is an edible, inhalable or ingestible with many people behind it, the contractual risk transfer of product liability is an important consideration. That means the liability is pushed to all those who play any role in the supply chain, whether as a producer or a retailer or an extractor. And all your vendors must show their certificates of insurance and adequate coverage amounts. Don’t make the mistake of being so excited about this new product that you don’t check out the vendors you partner with for this protection.

Myth #3: Any loss at my operation will be covered by my landlord’s policy.

As the example I cited early illustrated, that’s unlikely. Moreover, your loss might even cause your landlord’s insurance to be nullified for having rented to a cannabis business. It’s another reason to examine your lease agreement very carefully. You want to comply with your landlord’s requirements. But you also need to be aware of any potential liabilities that may or may not be covered. Incidentally, even if your landlord’s policy offers you some protection, your interests are going to be best served through a separate, stand-alone policy for overall coverage.

These are interesting times for the burgeoning legal cannabis business. Getting smart – fast – about the risks and how to manage them will be important as the industry grows into its potential.

Cannabusiness Sustainability

Environmental Sustainability in Cultivation: Part 2

By Carl Silverberg
1 Comment

The first article of this series discussed resource management for cannabis growers. In this second piece of the series on how indoor farming has a reduced impact on the environment, we’re going to look at land use & conservation. There are really two aspects and we have to be up front and acknowledge that while our focus is on legal cannabis farming, there’s a significant illegal industry which exists and is not subject to any environmental regulation.

“Streams in Mendocino run dry during the marijuana growing season impacting Coho salmon and steelhead trout who lay their eggs in the region’s waterways.” One biologist reported seeing “dead steelhead and Coho on a regular basis in late August and September, usually due to water reduction or elimination from extensive marijuana farming.” The quotes are from an extensive article on cannabis land use by Jessica Owley in the U.C. Davis Law Review.The concept that land will stay in its natural state is a mixture of idealism and reality.

This is going to continue until it’s more profitable to go legit. For this article, we’re going to focus on the legitimate cannabis grower. On the land use side, we usually hear four main reasons for indoor growing: remaining land can stay in its natural state, fewer space usually translates to fewer waste, you conserve land and natural resources when you don’t use fossil fuels, greenhouses can be placed anywhere.

The concept that land will stay in its natural state is a mixture of idealism and reality. Just because someone only has to farm five acres of land instead of one hundred acres doesn’t necessarily mean they’re going to leave the rest in its pristine natural state. Granted the footprint for automated greenhouses is significantly less but the key is what happens to that extra space. Assuming that it will all be preserved in its natural state isn’t realistic. What is realistic is the fact that a developer may not want to build tract houses abutting a commercial greenhouse operation. If they do, likely there’s going to be more land set aside for green space than if a farm was sold outright and a series of new homes were plunked down as if it were a Monopoly board.

Combined with workforce development program funding, urban indoor farming is getting more attractive every day.That’s not the same kind of issue in urban areas where the situation is different. Despite the economic boom of the past ten years, not every neighborhood benefitted. The smart ones took creative approaches. Gotham Greens started in Greenpoint, Brooklyn and has expanded to Chicago as well. “In early 2014, Gotham Greens opened its second greenhouse, located on the rooftop of Whole Foods Market’s flagship Brooklyn store, which was the first ever commercial scale greenhouse integrated into a supermarket.”

Green City Growers in Cleveland’s Central neighborhood is another example. “Situated on a 10-acre inner-city site that was once urban blight, the greenhouse—with 3.25 acres under glass–now serves as a vibrant anchor for the surrounding neighborhood.”

The beauty of greenhouse systems even those without greenhouse software, is they can be built anywhere because the environmental concerns of potentially contaminated soil don’t exist. The federal government as well as state and local governments offer a myriad of financial assistance programs to encourage growers to develop operations in their areas. Combined with workforce development program funding, urban indoor farming is getting more attractive every day.

As for the argument that greenhouses save energy and fossil fuels, I think we can agree that it’s pretty difficult to operate a thousand-acre farm using solar power. To their credit, last year John Deere unveiled a tractor that will allow farmers to run it as a fully autonomous vehicle to groom their fields while laying out and retracting the 1 kilometer long onboard extension cord along the way. It’s a start although I’ll admit to my own problems operating an electric mower without cutting the power cord.

In a 2017 article, Kurt Benke and Bruce Tomkins stated, “Transportation costs can be eliminated due to proximity to the consumer, all-year-round production can be programmed on a demand basis, and plant-growing conditions can be optimized to maximize yield by fine-tuning temperature, humidity, and lighting conditions. Indoor farming in a controlled environment also requires much less water than outdoor farming because there is recycling of gray water and less evaporation.”

The overall trend on fossil fuel reduction was verified this week when the Department of Energy announced that renewables passed coal for the first time in U.S. history.  And on the water issue, Ms. Owley had a salient point for cannabis growers. “The federal government will not allow federal irrigation water to be used to grow marijuana anywhere, even in states where cultivation is legal.” That’s not a minor detail and it’s why outdoor farming of cannabis is going to be limited in areas where water resources and water rights are hotly debated.

Cannabusiness Sustainability

Environmental Sustainability in Cultivation: Part 1

By Carl Silverberg
4 Comments

Core values often get wrapped into buzzwords such as sustainability, locally sourced and organic. In the first part of a series of four articles exploring greenhouses and the environment, we’re going to take a look at indoor vs. outdoor farming in terms of resource management.

Full disclosure; I love the fact that I can eat fresh blueberries in February when my bushes outside are just sticks. Is there a better way to do it than trucking the berries from the farm to a distribution plant to the airport, where they’re flown from the airport to a distribution center, to the grocery store and finally to my kitchen table? That’s a lot of trucking and a lot of energy being wasted for my $3.99 pint of blueberries.The largest generation in the history of the country is demanding more locally grown, sustainable and organic food. 

If those same blueberries were grown at a local greenhouse then trucked from the greenhouse directly to the grocery store, that would save diesel fuel and a lot of carbon emissions. People who can only afford to live near a highway, a port or an airport don’t need to ask a pulmonary specialist why their family has a higher rate of COPD than a family who lives on a cul-de-sac in the suburbs.

Fact: 55% of vegetables in the U.S. are grown under cover. The same energy saving principles apply to indoor cannabis and the reasons are consumer driven and producer driven. The largest generation in the history of the country is demanding more locally grown, sustainable and organic food. They want it for themselves and they want it for their kids.

The rapid proliferation of greenhouses over the past ten years is no coincidence. Millennials are forcing changes: organic fruit and vegetables now account for almost 15% of the produce market. A CNN poll last month revealed that 8 of 10 of registered Democrats listed climate change as a “very important” priority for presidential candidates. The issue is not party I.D.; the issue is that a large chunk of Americans are saying they’re worried about the direct and indirect impacts of climate change, such as increased flooding and wildfires.

So how does the consumer side tie into the cannabis industry? Consumers like doing business with companies who share their values. The hard part is balancing consumer values with investor values, which is why many indoor growers are turning to cultivation management platforms to help them satisfy both constituencies. They get the efficiency and they get to show their customers that they are good stewards of their environment. The goal is to catch things before it’s too late to save the plants. If you do that, you save the labor it costs to fix the problem, the labor and the expense of throwing away plants and you reduce pesticide and chemical usage. When that happens, your greenhouse makes more money and shows your customers you care about their values.

The indoor change is happening rapidly because people realize that technology is driving increased revenue while core consumer values are demanding less water waste, fewer pesticides, herbicides and fertilizers.Let’s add some more facts to the indoor-outdoor argument. According to an NCBI study of lettuce growing, “hydroponic lettuce production had an estimated water demand of 20 liters/kg, while conventional lettuce production had an estimated water demand of 250 liters/kg.”  Even if the ratio is only 10:1, that’s a huge impact on a precious resource.

Looking at the pesticide issue, people often forget about the direct impact on people who farm. “Rates in the agricultural industry are the highest of any industrial sector and pesticide-related skin conditions represent between 15 and 25% of pesticide illness reports,” a 2016 article in The Journal of Cogent Medicine states. Given the recent reports about the chemicals in Roundup, do we even need to continue the conversation and talk about the effects of fertilizer?

I’ll finish up with a quote from a former grower. “The estimates I saw were in the range of between 25%-40% of produce being lost with outdoor farming while most greenhouse growers operate with a 10% loss ratio.”

The indoor change is happening rapidly because people realize that technology is driving increased revenue while core consumer values are demanding less water waste, fewer pesticides, herbicides and fertilizers. Lastly, most Americans simply have a moral aversion to seeing farms throw away food when so many other people are lined up at food banks.

HACCP

Implementing a HACCP Plan to Address Audit Concerns in the Infused Market

By Daniel Erickson
1 Comment
HACCP

The increasing appeal and public acceptance of medical and recreational cannabis has increased the focus on the possible food safety hazards of cannabis-infused products. Foodborne illnesses from edible consumption have become more commonplace, causing auditors to focus on the various stages of the supply chain to ensure that companies are identifying and mitigating risks throughout their operations. Hazard Analysis and Critical Control Points (HACCP) plans developed and monitored within a cannabis ERP software solution play an essential role in reducing common hazards in a market currently lacking federal regulation.

What are cannabis-infused products?

Cannabis infusions come in a variety of forms including edibles (food and beverages), tinctures (drops applied in the mouth), sprays (applied under the tongue), powders (dissolved into liquids) and inhalers. Manufacturing of these products resembles farm-to-fork manufacturing processes common in the food and beverage industry, in which best practices for compliance with food safety regulations have been established. Anticipated regulations in the seed-to-sale marketplace and consumer expectations are driving cannabis infused product manufacturers to adopt safety initiatives to address audit concerns.

What are auditors targeting in the cannabis space?

The cannabis auditing landscape encompasses several areas of focus to ensure companies have standard operating procedures (SOP’s) in place. These areas include:

  • Regulatory compliance – meeting state and local jurisdictional requirements
  • Storage and product release – identifying, storing and securing products properly
  • Seed-to-sale traceability –  lot numbers and plant identifiers
  • Product development – including risk analysis and release
  • Accurate labeling –  allergen statements and potency
  • Product sampling – pathogenic indicator and heavy metal testing
  • Water and air quality –  accounting for residual solvents, yeasts and mold
  • Pest control – pesticides and contamination

In addition, auditors commonly access the reliability of suppliers, quality of ingredients, sanitary handling of materials, cleanliness of facilities, product testing and cross-contamination concerns in the food and beverage industry, making these also important in cannabis manufacturers’ safety plans.

How a HACCP plan can help

HACCPWhether you are cultivating, harvesting, extracting or infusing cannabis into edible products, it is important to engage in proactive measures in hazard management, which include a HACCP plan developed by a company’s safety team. A HACCP plan provides effective procedures that protect consumers from hazards inherent in the production and distribution of cannabis-infused products – including biological, chemical and physical dangers. With the lack of federal regulation in the marketplace, it is recommended that companies adopt these best practices to reduce the severity and likelihood of compromised food safety.

Automating processes and documenting critical control points within an ERP solution prevents hazards before food safety is compromised. Parameters determined within the ERP system are utilized for identification of potential hazards before further contamination can occur. Applying best practices historically used by food and beverage manufacturers provides an enhanced level of food safety protocols to ensure quality, consistency and safety of consumables.

Hazards of cannabis products by life-cycle and production stage

Since the identification of hazards is the first step in HACCP plan development, it is important to identify potential issues at each stage. For cannabis-infused products, these include cultivation, harvesting, extraction and edibles production. Auditors expect detailed documentation of HACCP steps taken to mitigate hazards through the entire seed-to-sale process, taking into account transactions of cannabis co-products and finished goods at any stage.

Cultivation– In this stage, pesticides, pest contamination and heavy metals are of concern and should be adequately addressed. Listeria, E. coli, Salmonella and other bacteria can also be introduced during the grow cycle requiring that pathogenic indicator testing be conducted to ensure a bacteria-free environment.

Harvesting– Yeast and mold (aflatoxins) are possible during the drying and curing processes. Due to the fact that a minimal amount of moisture is optimal for prevention, testing for water activity is essential during harvesting.

Extraction – Residual solvents such as butane and ethanol are hazards to be addressed during extraction, as they are byproducts of the process and can be harmful. Each state has different allowable limits and effective testing is a necessity to prevent consumer exposure to dangerous chemical residues.

Edibles– Hazards in cannabis-infused manufacturing are similar to other food and beverage products and should be treated as such. A risk assessment should be completed for every ingredient (i.e. flour, eggs, etc.), with inherent hazards or allergens identified and a plan for addressing approved supplier lists, obtaining quality ingredients, sanitary handling of materials and cross-contamination.

GMPFollowing and documenting the HACCP plan through all of the stages is essential, including a sampling testing plan that represents the beginning, middle and end of each cannabis infused product. As the last and most important step before products are introduced to the market, finished goods testing is conducted to ensure goods are safe for consumption. All information is recorded efficiently within a streamlined ERP solution that provides real-time data to stakeholders across the organization.

Besides hazards that are specific to each stage in the manufacturing of cannabis-infused products, there are recurring common procedures throughout the seed-to-sale process that can be addressed using current Good Manufacturing Practices (cGMP’s).  cGMPs provide preventative measures for clean work environments, training, establishing SOPs, detecting product deviations and maintaining reliable testing. Ensuring that employees are knowledgeable of potential hazards throughout the stages is essential.Lacking, inadequate or undocumented training in these areas are red flags for auditors who subscribe to the philosophy of “if it isn’t documented, it didn’t happen.” Training, re-training (if necessary) and documented information contained within cannabis ERP ensures that companies are audit-ready. 

Labeling

The importance of proper labeling in the cannabis space cannot be understated as it is a key issue related to product inconsistency in the marketplace. Similar to the food and beverage industry, accurate package labeling, including ingredient and allergen statements, should reflect the product’s contents. Adequate labeling to identify cannabis products and detailed dosing information is essential as unintentional ingestion is a reportable foodborne illness. Integrating an ERP solution with quality control checks and following best practices ensures product labeling remains compliant and transparent in the marketplace.

Due to the inherent hazards of cannabis-infused products, it’s necessary for savvy cannabis companies to employ the proper tools to keep their products and consumers safe. Utilizing an ERP solution that effectively manages HACCP plans meets auditing requirements and helps to keep cannabis operations one step ahead of the competition.

Top 5 Cybersecurity Threats To The Cannabis Industry

By Lalé Bonner
No Comments

Is your cannabis business an attractive target for cyber criminals? With the influx of investment to this market and new businesses opening frequently throughout the United States, the legal cannabis industry is a prime target for cyber criminals.

Never share personal information (login and passwords, social security numbers, payment card information, etc.) over email.Cannabis industry hackers pick their targets by vulnerability, exploiting consumer or patient data to darknet black markets and forums. The impact can be devastating to both the business and their consumers. With new laws on protecting consumer and patient data on the horizon, businesses that do not adequately protect that data, could face stiff fines, in addition to losing the trust of their customers.

So, how do these attacks present themselves? Recent studies implicate employees as the “weakest link” in the cybersecurity chain due to a lack of cybersecurity best practices and training. Implementing safeguards and providing employee training is imperative to the cybersecurity health of your business.

Now, let’s identify the top 5 cybersecurity threats to the cannabis industry and some valuable tips for protecting against these criminal hacks:

PhishingPhishing is a form of cyber-attack, typically disguised as an official email from a trustworthy entity, attempting to dupe the recipient into revealing confidential information or downloading malware. Don’t take the bait! 91 percent of cyber-attacks start as phishing scams, with most of these lures being cast through fraudulent emails.

  • Tips: Do not download attachments from unknown senders!
  • Never share personal information (login and passwords, social security numbers, payment card information, etc.) over email.

Password ManagementPassword complexity is key to protecting against cyber breaches. When it comes to data hacking, 81 percent of breaches are caused by stolen or weak passwords. With a password often being the only barrier between you and a data breach, creating a complex password will dramatically decrease those password-sniffers from obtaining your sensitive information.

  • Tips: Create passwords that are at least 12 characters in length – include letters, numbers and symbols (*$%^!), and never use a default password. This will fend off brute-force attacks.
  • Change passwords every six months to a year, keeping them complicated and protected. For IT Managers, make using a password manager mandatory for all employees. (Pro-tip: LastPass is free).Be cautious with network selection as hackers set up free Wi-Fi networks that appear to be associated with an institution.

Public Wi-FiBeing able to connect in public spaces, while a modern marvel of convenience, leaves us wide open to cyber-attacks. Whether you are in an airport or café, always err on the side of caution.

  • Tips: Be cautious with network selection as hackers set up free Wi-Fi networks that appear to be associated with an institution.
  • Browse in a “private” or “incognito” window to avoid saving information. If you have a VPN, use it. If not, then do not handle any sensitive data.

BYOD: Beware of Bad Apps: Using personal devices for work has become the norm. In fact, approximately 74 percent of businesses have bring-your-own-device (BYOD) policies or plans to adopt in the future.

With these platforms providing greater access to mobile apps, comes greater responsibility on the part of the end user.

  • Tips: Password protect devices that will be used for work (and, any device in general).
  • Only download applications from a trusted, authorized app store. Do not use untrusted play apps.
  • Mobile device protection is recommended for any device being used on a business network.

Whether it is an app from an unauthorized website or a lost/stolen device that was not password protected, cyber criminals do not need much to compromise critical data.Avoid logging into a SaaS application on a public computer or public Wi-Fi network.

SaaS Selectively: Keep Sensitive Data Safe: SaaS (Software As A Service) are cloud-based software solutions and chances are you are using one of these SaaS solutions for work purposes. IT is typically responsible for implementing security controls for SaaS applications, but ultimate responsibility falls on IT and the end user jointly. Here is what you can do to help keep these solutions safe:

  • Tips: Avoid logging into a SaaS application on a public computer or public Wi-Fi network.
  • Never share your SaaS login credentials with unauthorized persons over digital format or in person. Lastly, if you need to step away, always lock your screen during an active session.

While these tips will help keep your consumer/patient data from falling into the wrong hands, always have a plan B- backup plan! Your plan B must incorporate saving important data to a backup drive daily. Most likely, there is already a backup protocol in place for your mission-critical work data; however, for sanity’s sake, back up your BYOD devices as well.

The New ISO/IEC 17025:2017: The Updated Standard

By Ravi Kanipayor, Christian Bax, Dr. George Anastasopoulos
No Comments

As state cannabis regulatory frameworks across the country continue to evolve, accreditation is becoming increasingly important. Because it provides consistent, turnkey standards and third-party verification, accreditation is quickly emerging as an important tool for regulators. For cannabis testing laboratories, this trend has been especially pronounced with the increasing number of states that require accreditation to ISO/IEC 17025.

As of 2017 there were nearly 68,000 laboratories accredited to ISO/IEC 17025, making it the single most important benchmark for testing laboratories around the world. ISO/IEC 17025:2005 specifies the general requirements for the competence to carry out tests including sampling. It covers testing performed using standard methods, non-standard methods and laboratory-developed methods. It is applicable to all organizations performing tests including cannabis labs. The standard is applicable to all labs regardless of the number of personnel or the extent of the scope of testing activities.  Developed to promote confidence in the operation of laboratories, the standard is now being used as a key prerequisite to operate as a cannabis lab in many states.

There are currently 26 states in the United States (also Canada) that require medical or adult-use cannabis to be tested as of February 2019. Of those states, 18 require cannabis testing laboratories to be accredited – with the vast majority requiring ISO/IEC 17025 accreditation. States that require testing laboratories to attain ISO/IEC 17025 accreditation represent some of the largest and most sophisticated cannabis regulatory structures in the country, including California, Colorado, Maryland, Massachusetts, Michigan, Nevada and Ohio. As a consequence, many cannabis testing laboratories are taking note of recent changes to ISO/IEC 17025 standards.

ISO/IEC 17025 was first issued in 1999 by the International Organization for Standardization. The standard was updated in 2005, and again in 2017. The most recent update keeps many of the legacy standards from 2005, but adds several components – specifically requirements for impartiality, risk assessment and assessing measurement uncertainty. The remainder of this article takes a deeper dive into these three areas of ISO/IEC 17025, and what that means for cannabis testing laboratories.Objectivity is the absence or resolution of conflicts of interest to prevent adverse influence on laboratory activities.

Impartiality

ISO/IEC 17025:2005 touched on an impartiality requirement, but only briefly. The previous standard required laboratories that belonged to organizations performing activities other than testing and/or calibration to identify potential conflicts of interest for personnel involved with testing or calibration. It further required that laboratories had policies and procedures to avoid impartiality, though that requirement was quite vague.

ISO/IEC17025:2017 emphasizes the importance of impartiality and establishes strict requirements. Under the new standard, labs are responsible for conducting laboratory activities impartially and must structure and manage all laboratory activities to prevent commercial, financial or other operational pressures from undermining impartiality. The definitions section of the standard defines impartiality as the “presence of objectivity.” Objectivity is the absence or resolution of conflicts of interest to prevent adverse influence on laboratory activities. For further elaboration, the standard provides similar terms that also convey the meaning of impartiality: lack of prejudice, neutrality, balance, fairness, open-mindedness, even-handedness, detachment, freedom from conflicts of interest and freedom from bias.

To comply with the new standard, all personnel that could influence laboratory activities must act impartially. ISO/IEC 17025:2017 also requires that laboratory management demonstrate a commitment to impartiality. However, the standard is silent on how labs must demonstrate such commitment. As a starting point, some cannabis laboratories have incorporated statements emphasizing impartiality into their employee handbooks and requiring management and employee training on identifying and avoiding conflicts of interest.

Risk Assessment

Both the 2005 and 2017 versions contain management system requirements. A major update to this is the requirement in ISO/IEC 17025:2017 that laboratory management systems incorporate actions to address risks and opportunities. The new risk-based thinking in the 2017 version reduces prescriptive requirements and incorporates performance-based requirements.

Under ISO/IEC 17025:2017, laboratories must consider risks and opportunities associated with conducting laboratory activities. This analysis includes measures that ensure that:

  • The lab’s management system is successful;
  • The lab has policies to increase opportunities to achieve its goals and purpose;
  • The lab has taken steps to prevent or reduce undesired consequences and potential failures; and
  • The lab is achieving overall improvement.

Labs must be able to demonstrate how they prevent or mitigate any risks to impartiality that they identify.To comply with ISO/IEC 17025:2017, labs must plan and implement actions to address identified risks and opportunities into management systems. They must also measure the effectiveness of such actions. Importantly, the standard requires that the extent of risk assessments must be proportional to the impact a given risk may have on the validity of the laboratory’s test results.

ISO/IEC 17025:2017 does not require that labs document a formal risk management process, though labs have discretion to develop more extensive methods and processes if desired. To meet the requirements of the standard, actions to address risks can include sharing the risk, retaining the risk by informed decision, eliminating the risk source, pinpointing and avoiding threats, taking risks in order to pursue an opportunity, and changing the likelihood or consequence of the risk.

ISO/IEC 17025:2017 references “risks” generally throughout most of the standard. However, it specifically addresses risks to a laboratory’s impartiality in section 4.1. Note, the new standard requires that labs must not only conduct activities impartially, but also actively identify risks to their impartiality. This requirement is on-going, not annually or bi-annually. Risks to impartiality include risks arising from laboratory activities, from laboratory relationships, or from relationships of laboratory personnel. Relationships based on ownership, governance, shared resources, contracts, finances, marketing, management, personnel and payment of a sales commission or other inducements to perform under pressure can threaten a laboratory’s impartiality. Labs must be able to demonstrate how they prevent or mitigate any risks to impartiality that they identify.

Assessing Measurement Uncertainty With Decision Rules

ISO/IEC 17025:2005 required (only where necessary and relevant) test result reports to include a statement of compliance/non-compliance with specifications and to identify which clauses of the specification were met or not met. Such statements were required to take into account measurement uncertainty and if measurement results and uncertainties were omitted from the statement, the lab was required to record and maintain the results for future reference.

ISO/IEC 17025:2017 requires similar statements of conformity with an added “decision rule” element. When statements of conformity to a specification or standard are provided, labs must record the decision rule it uses and consider the level of risk the decision rule will have on recording false positive or negative test results. Like the 2005 version, labs must include statements of conformity in test result reports (only if necessary and relevant- see 5.10.3.1 (b)). Now, test result reports on statements of conformity must include the decision rule that was employed. 

Moving Forward

Because many states require ISO/IEC 17025 accreditation for licensing, cannabis testing labs across the country would be well advised to closely monitor the implications of changes in ISO/IEC 17025:2017 related to impartiality, risk assessment and measurement uncertainty. If you run a cannabis testing lab, the best way to ensure compliance is education, and the best place to learn more about the new requirements is from a globally recognized accreditation body, especially if it is a signatory to the International Laboratory Accreditation Cooperation (ILAC) for testing laboratories, calibration laboratories and inspection agencies.


References

Facts & Figures

ISO/IEC 17025:2005: General requirements for the competence of testing and calibration laboratories

ISO/IEC 17025:2017: General requirements for the competence of testing and calibration laboratories 

8 Mistakes Businesses Make When Managing Product Labels: Part 1

By Rob Freeman
2 Comments

Editor’s Note: This article contains the first four common labeling mistakes that businesses can make. Click here to view the next four common labeling mistakes


Whether you’re a small business owner or a production manager of a large manufacturer, if you’ve ever experienced problems with your product labels you know it can quickly turn into a serious issue until that problem is resolved. From the time it’s applied to your product all the way to the POS (Point of Sale), labels always seem to be the least significant part of the production process- until something goes wrong. And when it does go wrong, it can create major branding issues and cost your company tens of thousands of dollars due to hefty supply chain late penalties and/or even government fines.

This article aims to provide insight as to how a company like Label Solutions Inc. helps businesses and manufacturers create new labels for their products as well as what to look for should you experience label failure at your retail locations. Topics discussed in this article do not cover all possible issues, but these common mistakes will hopefully help you better understand how creating a product label works, and how to possibly prevent your own problems in the future.

Mistake #1: Not Understanding the Importance Between the “Construction” Versus the “Artwork & Compliance” of the Label

This may seem like common sense, but it is often overlooked. Especially when dealing with fast-track projects.

Construction of the Label is the material selected and production process to produce the label. When creating a new label from the ground up, it is important to factor in how your product will be produced, necessary shipping and supply chain needs, how it is stored in inventory and how it will be presented at the POS. Understanding what environments your product will be exposed to throughout its life cycle will give you an advantage when approving substrate material, inks, and the strength of adhesive that might be necessary for your application.

The Artwork & Compliance of the Label refers to the overall design of the label, artwork, customer messaging, bar codes and regulatory requirements you need to follow in order to avoid serious government fines that might relate to your industry (Referring to agencies such as OSHA, DOT, and the FDA).In most cases the construction of the label does not apply to the compliance of the label.

Most label providers do not have the in-house expertise to offer compliance assistance. Although it is still the manufacturer who is liable for all final artwork approvals on their product, label providers that do offer advisory services can help update label content when regulatory changes are enacted. This “safety net” can save your company from extra production costs and, potentially, excessive legal time and material costs. In short, you should always review final label artwork approvals with your compliance team and/or legal expert, but it never hurts to have a “safety net” to help eliminate unnecessary orders or production delays.

In most cases the construction of the label does not apply to the compliance of the label. An exception to this statement would be industries such as the electronics industry that use UL (Underwriter Laboratories) labels that must meet UL specifications and be produced under recognized UL files. In other words, the compliance of a UL label is the construction of the label.

Best Method Approach: An excellent example of companies that understand the difference between the Construction vs. Artwork & Compliance of the label would be the compressed gas industry. Gas suppliers and distributors require long term regulatory compliant labels on their cylinders and micro-bulk tanks. These gas tanks are used in a wide variety of industries such as for manufacturing, welding, medical procedures, and specialty gas mixes for the micro-electronics industry.

The compressed gas industry requires that their labels follow strict, up-to-date OHSA and DOT compliance requirements. As for the construction of the label, it is common practice that the label remains legible on the cylinder for an average of five years. The 5-year duration is due to the millions of tanks that are in circulation throughout the US and Canada. What’s more, each label is produced to adhere to the cylinder’s metal surface during extreme outdoor weather conditions such as fluctuating temperatures, freezing rain, high winds, and direct sunlight year-round.

Mistake #2: Applying Labels Incorrectly to Your Products

Whether the label is applied to the product surface by hand or automatically with a label applicator, the label itself may not be applied level or evenly. Besides this being a major branding issue, this could also affect how the bar codes are scanned and could eventually impact your delivery times while trying to correct a batch.

Best Method Approach: There are construction alternatives that you can choose from to potentially reduce the impact of incorrect label application. For example, products with certain label adhesives allow your production team to reposition the label within a few minutes before the tack completely sets to the surface. The type of surface (cardboard, metal, plastic, glass, etc.) and the type of adhesive will determine how much time your production team will have before the tack sets.

The best practice is to apply labels prior to filling the bottles and cans as opposed to filling first and then applying the label in your production line.A good example of this best practice can be seen in the beverage market. Whether the client produces a uniquely crafted beer, or a rare ingredient infused into a new health drink, labels that are auto-applied to bottles and cans will sometimes experience equipment tension issues that need to be recalibrated. Once labels are applied off-alignment, a delayed tack setting can allow the label to be quickly repositioned by hand when needed. The best practice is to apply labels prior to filling the bottles and cans as opposed to filling first and then applying the label in your production line. The reason, excess spillage from filling can interfere with most adhesives.

This same repositionable adhesive is excellent to keep in mind for large equipment production assembly lines that apply prime (branding) labels and warning labels by hand. Even with large wide-format labels, the adhesive tack can be formulated so your employees have a few minutes to adjust, straighten, and smooth away trapped air bubbles once it has been placed on the surface. Knowing you have this option can help reduce label inventory waste, additional production material wastes and avoid delaying production time. More importantly, this option keeps your brand and your warning/instructional labels looking fresh.

Mistake #3: Not Sharing Your Production Run Schedules with Your Label ProviderSupply chain management (SCM) models are excellent examples of the best approach.

Some of Label Solutions’ largest accounts have the most efficient real-time tracking supply chain models in North America, but even they cannot avoid sudden increased orders for their products stemming from high customer demand or similar issues. It is a good problem to have, but it is a problem, nonetheless. Manufacturers utilize supply chain management tools to notify their suppliers of their monthly order forecasts, which in turn helps suppliers manage their materials and deliveries more efficiently.

On the other side of the spectrum, when small businesses share their production schedules with a supplier it means that both parties (the manufacturer and label provider) understand when to expect higher or lower order quantities each month. Label providers should back date their label production schedules, so they have the materials available to handle your busier months while ensuring on-time deliveries.

Best Method Approach: Supply chain management (SCM) models are excellent examples of the best approach. Although SCM’s are designed for scalability and real-time tracking, the benefit to you also helps your label supplier. For example, our large retail and industrial manufacturing clients notify the Label Solutions team to produce their labels according to their Supply Chain portal demand schedules. This, in turn, allows label suppliers to allocate production time and materials more efficiently for your last-minute rush orders.

Smaller companies can take a much more simplified approach (without the SCM tracking) to help their suppliers manage their orders – even if they do not use supply chain management. A simple Excel report of production runs over a 12-month time frame is ideal. If your label provider does not already practice this or similar methodology, it might be time to start looking for a more proactive label provider. If you’re unsure you want to share your information, then you might consider requiring your label provider to sign an NDA (Non-disclosure Agreement).

Mistake #4: Not Accepting Alternative Sizes of the Label to Allow for Better Pricing

If your product needs a label with, for example, a dimension of 5.25 X 6.75 inches, there might be a much better price point offered to you if you’re open to switching to a slightly different dimension label of, say, 5 X 7 inches.  Obviously, you need to make sure the new dimension would fit your product(s) and work with your production line. But, if alternate dimensions are within the scope of the project, a modified SKU could potentially cut down on cost and production time.

Best Method Approach: You might not have the time or ability to change your label if you already market that product in retail stores. But, if you are changing your branding, creating a new style of label, or releasing a completely new product, this is the ideal time to consider implementing better continuity between your products. This could include elements such as matching colors and label/packaging design.

In addition to updating your SKU’s, this might also be an opportunity for your company to consolidate multiple products onto a universal label size. By applying the same sized labels to multiple SKU’s, you can increase efficiency regarding repeated label orders, especially for label printers that use digital printers. Combine this approach with your expected annual quantity estimates and you’ll be positioned for very efficient ordering options as your company grows.


Editor’s Note: We’ll cover the next four most common labeling mistakes in Part Two coming next week. Stay tuned for more!

First Cannabis Clinical Trials All Set In UK

By Marguerite Arnold
1 Comment

Beckley Canopy Therapeutics, based in Oxford, England has raised ₤7.4 million for the purposes of cannabinoid research and drug development. The new company is a unique partnership established between Canopy Growth Corporation and the Beckley Foundation, a research institute which examines the utilization of psychotropic drugs for the treatment of physical and mental conditions.

Studies focusing on the use of cannabinoids for the treatment of opioid addiction and cancer pain will be conducted in Europe, the UK and the US.

Why Is This Significant?

Here is the first reason: the woman behind it all. Her name is Lady Amanda Feilding, Countess of Wemyss and March. Born into a landed gentry family at Beckley Park (a Tudor hunting lodge with three towers and three moats) she also has a long history of engaging and supporting scientific endeavours that use stigmatized drugs in the treatment of both intractable disease and mental illness via the use of scientific research.

In 1998, Amanda Feilding set up the Beckley Foundation, a charitable trust which initiates, directs and supports neuroscientific and clinical research into the effects of psychoactive substances. She has also co-authored over 50 scientific papers in peer-reviewed journals.

The so-called “hidden hand” behind the rebirth of psychedelic science, Fielding’s contribution to global drug policy reform has been widely acknowledged in international drug policy circles. She was named as one of the bravest men and women in the history of science in 2010 by the British Guardian.

And here is the second reason: The foundation is now partnered with Canopy Cannabis, one of the leading cannabis firms in the world, which is also working closely with Spanish opioid manufacturer Alcaliber.

In other words, this coalition is almost the mirror opposite of the approach taken by the American Sackler family, makers of Oxycontin, who have fought cannabinoids as an alternative or even transition drug in multiple state legalization campaigns. Meanwhile the death rates from overdoses have quadrupled since 1999. In 2016, opioid-related drug overdoses killed about 116 people a day (or about 42,249 for the year). It is estimated that about 11 million people in the U.S. are currently misusing or dependent on opioids.

Amanda Fielding
Image credit: Robert Funke

Beyond The Politics of The Opioid-Cannabinoid War

While opioids clearly have a role particularly in chronic pain treatment, the question now at the global scientific table is this: Are cannabinoids a substitute for longer term chronic pain management? It is a fiercely battled scientific debate that has frequently, particularly in the U.S., crossed over into political drug reform questions.

The unique partnership of Beckley and Canopy is well placed both scientifically and culturally to take on a discussion which has languished for too long in the grass of political debate and reform.

Even better, it is taking place in a country where English is the first language, but outside the U.S. and further, in a country where cannabis has now been legally reclassified as a Schedule II drug.

Do not expect, in other words, the same trials and tribulations that faced noted U.S.-based researcher Sue Sisley, to slow down research, trials or findings.

Why Is A Cultural and Scientific Reset Required?

For the past forty years, since the end of the 1970s, cannabis in particular, has been pushed into a strange scientific territory in part, because of the culture surrounding the drug. This in turn, along with the schedule I classification of cannabis, has led to not only a dearth of research, but a reluctance on the part of prescribing doctors to examine its efficacy.

In the present, this means that doctors are still (beyond insurers who demand medical evidence before approving payment) the biggest hurdles in every medical system where cannabis is becoming legal. See the debate in Canada, the UK and of course, Germany, where patients frequently report asking for a drug their doctors refuse to prescribe.

This is exactly the kind of high-placed, societally influential effort in other words, that might finally break the medical taboo at the most important remaining logjam– at the point of prescription and approval for patients.