The board is responsible for approving the training policy and annual training schedule. The training policy outlines training expectations for all stakeholders, as well as consequences for stakeholders who do not complete training by the due date. A stakeholder who violates the training policy should receive disciplinary action, which impacts the performance review or leads to termination.
Onboarding training is mandatory for all new hires as part of orientation and must be completed within a reasonable timeframe after an employee is hired or third party is engaged. In addition, before engaging in higher-risk functions, stakeholders should receive job-specific training. The commercial cannabis business’s success relies on stakeholder’s awareness of policies and procedures, as well as knowledge of local and federal regulations with which they are required to comply.
All new hires must complete risk training that addresses risks relevant to their roles.
Ongoing training refreshes awareness of risks and responsibilities. The training program should have processes in place to identify stakeholder training needs, tailor training to specific responsibilities, track completion, confirm post-assessment testing, and ensure scores are within an acceptable range. The type of training and frequency of delivery depend on the stakeholder’s position and responsibilities.
Stakeholders with more specialized skills receive additional training on a frequency commensurate with the risks associated with their role. Additional training must be provided to all affected stakeholders prior to a major event occurring (such as new regulatory requirements or the roll out of new products and services) within the commercial cannabis industry or business.
The commercial cannabis business must consider training specifically for critical suppliers and vendors to ensure all applicable vendors are informed of its risk management practice. Training can be provided in many ways, including online platforms, classroom settings, conferences, seminars, videos, and expert speakers.
The board should also receive ongoing training. Training for the board should describe the consequences for failing to meet higher-risk obligations and identify business areas that present the greatest exposure to reputational, administrative, civil, and criminal risk based on the risk assessment.