ASTM D8218-20

Standard Guide for Intrusion Detection System (IDS)

SIGNIFICANCE AND USE
3.1 The intrusion detection system (IDS) safeguards various areas considered critical to operations. Intrusion detection devices include but are not limited to, door or window contact alarms that are activated when the device is separated, such as opening; and motion detection technology that uses a passive infrared to survey the area and sounds an audible notification alarm when a person or object moves into the protected space. Also included are glass-break detectors that use an audio sensor to pick up the actual frequency of broken glass. If the glass-break detector “hears” broken glass, an alarm is activated. If any of the devices are triggered when the system is armed, an alert is sent to a 24-h monitoring area for notification.
SCOPE
1.1 This guide covers the recommended intrusion detection system (IDS) for protecting resin cannabis, resin cannabis products, resin cannabis waste, currency, people, property, and assets.  
1.2 Units—The values stated in inch-pound units are to be regarded as standard. The values given in parentheses are mathematical conversions to SI units that are provided for information only and are not considered standard.  
1.3 This standard does not purport to address all of the safety concerns, if any, associated with its use. It is the responsibility of the user of this standard to establish appropriate safety, health, and environmental practices and determine the applicability of regulatory limitations prior to use.  
1.4 This international standard was developed in accordance with internationally recognized principles on standardization established in the Decision on Principles for the Development of International Standards, Guides and Recommendations issued by the World Trade Organization Technical Barriers to Trade (TBT) Committee.

General Information

• Status: Published
• Publication Date: 31-Jan-2020
• ICS: 11.120.99 - Other standards related to pharmaceutics
• ICS: 13.310 - Protection against crime
• ICS: 65.020.20 - Plant growing
• Technical Committee: D37 - Cannabis
• Drafting Committee: D37.05 - Security and Transportation

Relations

• Referred By: ASTM D8320-21 - Standard Practice for Implementing an Information Security Program in a Cannabis Operation
• Effective Date: 01-Feb-2020

Overview

ASTM D8218-20: Standard Guide for Intrusion Detection System (IDS), developed by ASTM International, provides guidance for implementing effective intrusion detection systems to protect resin cannabis, cannabis products and waste, currency, people, property, and other critical assets. This standard establishes best practices for design, installation, management, maintenance, and recordkeeping related to IDS, reflecting industry and regulatory needs for security, especially in sectors where high-value or sensitive materials are present.

By following this standard, organizations can ensure robust monitoring and notification protocols, improved asset protection, and compliance with applicable safety, health, and environmental regulations.

Key Topics

• IDS Technology and Components
  Covers recommended technologies such as motion detection (using passive infrared sensors), door/window contact alarms, glass-break detectors, perimeter alarms, and advanced features like duress and panic alarms.

• Monitoring Protocols
  Describes the requirements for 24/7 on-site or off-site monitoring, notification methods (audible alarms, text, phone, email), and the procedures for alarm activation and response.

• Access Control and Security
  Outlines two-factor authentication measures for alarm control rooms and secure storage of IDS records, leveraging badges, PINs, wireless devices, or biometrics.

• System Maintenance and Recordkeeping
  Emphasizes monthly inspections, detailed maintenance logs, failure notification procedures, and secure, auditable records retention-including long-term data storage and retrieval protocols to meet compliance requirements.

• Power and Redundancy
  Specifies requirements for uninterruptible power supplies (UPS) to ensure IDS functionality during power outages, with auxiliary power able to support operations for at least 48 hours.

• IDS Data Management
  Details digital recording and secure storage practices, including controlled access to data, audit trails, and methods for sharing records with regulatory or law enforcement agencies as necessary.

Applications

Implementing ASTM D8218-20 enables organizations-particularly those operating in the cannabis industry or managing high-value assets-to:

• Protect facilities, products (including resin cannabis and currency), and personnel from unauthorized access, theft, and tampering.
• Ensure compliance with state and local regulations concerning security systems and monitoring in high-risk or regulated environments.
• Improve response times to potential security breaches through automated, layered notification protocols and clearly defined roles and procedures for responding to alarms.
• Securely manage and retain intrusion detection data for regulatory audits, investigations, or legal proceedings, supporting transparency and accountability.
• Maintain operational continuity and asset protection through redundancy and thorough documentation, reinforcing resilience against power failures or equipment malfunctions.
• Reduce liability and operational risk by demonstrating adherence to international best practices in IDS deployment, maintenance, and monitoring.

Related Standards

Organizations implementing ASTM D8218-20 may also reference the following related standards for comprehensive security and compliance:

• ASTM D37 Standards – Additional security and transportation standards addressing specific requirements for cannabis operations.
• UL 2050 – Standard for National Industrial Security Systems for the protection of classified materials.
• NFPA 731 – Standard for the Installation of Electronic Premises Security Systems.
• ISO/IEC 27001 – Information security management systems standard that can complement digital IDS data management.
• Local and State Regulatory Requirements – Security directives for cannabis facilities, depending on jurisdiction.

Adopting ASTM D8218-20 helps organizations build a resilient, compliant security infrastructure, safeguarding people, property, and regulated products through proven best practices for intrusion detection systems.

Standards Content (Sample)

This international standard was developed in accordance with internationally recognized principles on standardization established in the Decision on Principles for the
Development of International Standards, Guides and Recommendations issued by the World Trade Organization Technical Barriers to Trade (TBT) Committee.
Designation: D8218 − 20
Standard Guide for
Intrusion Detection System (IDS)
This standard is issued under the fixed designation D8218; the number immediately following the designation indicates the year of
original adoption or, in the case of revision, the year of last revision. A number in parentheses indicates the year of last reapproval. A
superscript epsilon (´) indicates an editorial change since the last revision or reapproval.
1. Scope 2.1.7 Internet protocol, IP, n—data sent over the Internet or
other network.
1.1 This guide covers the recommended intrusion detection
system (IDS) for protecting resin cannabis, resin cannabis
2.1.8 intrusion detection system, IDS, n—motion detection,
products, resin cannabis waste, currency, people, property, and
door and window contact alarm, and glass-break sensor.
assets.
2.1.9 motion detection, n—passive infrared to survey the
1.2 Units—The values stated in inch-pound units are to be
area and sounds an audible notification alarm when a person or
regarded as standard. The values given in parentheses are
object moves into the protected space.
mathematical conversions to SI units that are provided for
2.1.10 panic alarm, n—keypad code, button, or device for
information only and are not considered standard.
use in a life-threatening or emergency situation that shall be
1.3 This standard does not purport to address all of the
manually activated in any emergency when security, police, or
safety concerns, if any, associated with its use. It is the
fire response is needed.
responsibility of the user of this standard to establish appro-
2.1.11 perimeter alarm, n—outdoor alarms including fence
priate safety, health, and environmental practices and deter-
mine the applicability of regulatory limitations prior to use. detection, underground cable, microwave and infrared sensors.
1.4 This international standard was developed in accor-
2.1.12 two-factor authentication, n—at least two of the
dance with internationally recognized principles on standard-
following: an access control credential (for example, badge,
ization established in the Decision on Principles for the
FOB, wireless device), personal identification number (PIN),
Development of International Standards, Guides and Recom-
or biometric, or combinations thereof.
mendations issued by the World Trade Organization Technical
2.1.13 uninterruptible power supply, UPS, n—ensure con-
Barriers to Trade (TBT) Committee.
tinuous operation of the IDS using a surge protector with a
2. Terminology built-in backup battery.
2.1 Definitions of Terms Specific to This Standard:
3. Significance and Use
2.1.1 beam alarm, n—electronic device that detects any
interruption to the signal between a transmitter and receiver.
3.1 The intrusion detection system (IDS) safeguards various
2.1.2 contact alarm, n—activated when the device is areas considered critical to operations. Intrusion detection
devices include but are not limited to, door or window contact
separated, such as opening.
alarms that are activated when the device is separated, such as
2.1.3 duress code, n—code that, when entered, generates a
opening; and motion detection technology that uses a passive
silent alarm signal indicating that a person is being forced to
infrared to survey the area and sounds an audible notification
turn off the alarm, also known as a holdup alarm.
alarm when a person or object moves into the protected space.
2.1.4 failure notification, n—provides an audible, text, or
Also included are glass-break detectors that use an audio
visual notification of any failure in the systems.
sensor to pick up the actual frequency of broken glass. If the
2.1.5 glass break, n—audio sensor to pick up the actual
glass-break detector “hears” broken glass, an alarm is acti-
frequency of broken glass.
vated. If any of the devices are triggered when the system is
2.1.6 holdup alarm, n—device activated to signal a robbery
armed, an alert is sent to a 24-h monitoring area for notifica-
in progress, which shall generate a silent alarm.
tion.
4. Summary of Guide
This guide is under the jurisdiction ofASTM Committee D37 on Cannabis and
4.1 The following intrusion detection system (IDS)
is the direct responsibility of Subcommittee D37.05 on Security and Transportation.
technologies, equipment, capabilities, and procedures are in-
Current edition approved Feb. 1, 2020. Published February 2020. DOI: 10.1520/
D8218-20. dustry best-practice-based.
Copyright © ASTM International, 100 Barr Harbor Drive, PO Box C700, West Conshohocken, PA 19428-2959. United States
D8218 − 20
4.1.1 An on- or off-site monitoring station designed to 5.2 A complete index and guide to the hardware, software,
manage and monitor all intrusion detection information, along devices, technical documentation, monitors, and controls
with receiving and sending notifications of all alarm activa- should be available either in hardcopy or electronic form.
tions.
5.2.1 This guide should include a map of the alarm
4.1.2 Using intrusion detection technology, select personnel
locations, direction of coverage, device numbers, and operating
with designated backups are able to monitor and assign
instructions for the intrusion detection equipment.
appropriate access.
4.1.3 The IDS should have the following capabilities among
6. Maintenance Requirements
others: motion detection, door and window contact alarms,
6.1 The IDS should be maintained in good working order at
glass-break sensors, and perimeter alarms.
all times.
4.1.4 A duress code, when entered, generates a silent alarm
signal indicating when a person is being forced to turn off the
6.2 Conduct and document monthly maintenance inspec-
alarm. Also known as a holdup alarm, it can be activated to
tions to ensure that any repairs, alterations, or upgrades are
signal a robbery in progress, which will generate a silent alarm.
made for proper operation of the system.
4.1.5 A panic alarm code, button, or device for use in a
6.3 Designated personnel oversee the functioning of the
life-threatening or emergency situation that will be activated in
system and need to report immediately any malfunctioning or
any emergency when security, police, or fire response is needed
technical problems.
and personnel cannot use any other form of communication to
request assistance. A panic alarm will generate an audible
6.4 The system conducts a self-test when set and identifies
security alarm signal in the facility and can also notify law
attempted sabotage of the system.
enforcement.
6.5 All security equipment is inspected, tested, and docu-
4.1.6 A notification system for alarm activations, including
mented at regular intervals, not to exceed 30 calendar days
audible alarms, telephone, cell phone, text message, and
from the previous inspection, and tested to ensure the systems
e-mail, can notify monitoring personnel, law enforcement,
remain functional.
public safety, or emergency services agencies.
4.1.7 An electronic, mechanical, or another device capable 6.6 All maintenance records shall be maintained for a period
of being programmed to send a prerecorded voice message, of time in compliance with applicable regulatory standards.
when activated over a telephone line, radi
...