Cannabis controls readiness

Cannabis controls need evidence before pressure.

Practical finance, inventory, cash, and reporting-control readiness for cannabis companies preparing for audit, lender review, investor diligence, M&A, uplisting, or public-company expectations.

  • 280E-aware
  • Multi-entity
  • Inventory & COGS
  • Cash controls
  • Seed-to-sale systems
  • Audit-ready evidence

Ideal for

Operators facing a real diligence or reporting milestone.

  • Multi-state operators approaching audit, uplisting, or public-company expectations
  • Companies preparing for a lender review, investor diligence, capital raise, or M&A
  • Finance teams whose spreadsheet and system controls have not kept pace with entity or location growth
  • Operators that used the readiness checklist and found material evidence, ownership, or process gaps

What is included

A full readiness view — not a generic SOX checklist.

Control environment assessment

Review governance, ownership, entity structure, policies, prior findings, and the current control inventory.

  • Readiness criteria tied to the actual milestone
  • Process-owner and finance walkthroughs
  • Risk-ranked findings and evidence gaps
Cannabis-specific process review

Assess the process areas where cannabis complexity changes ordinary control design.

  • Inventory movement and COGS support
  • Cash, payment, and revenue controls
  • 280E-aware documentation
  • Multi-entity close and intercompany activity
Systems and ITGC coordination

Map the systems that create, move, approve, and report financial information.

  • Seed-to-sale, POS, ERP, payroll, and reporting interfaces
  • Access, change, and evidence-retention considerations
  • Coordination with the operator’s IT and systems owners
Roadmap and handoff

Translate findings into an executable plan with accountable owners and sequencing.

  • Prioritized remediation roadmap
  • Documentation and evidence standards
  • Executive debrief and next-step recommendation

Why it works

Designed around how cannabis operators actually run.

Industry-specific risk

Inventory, COGS, cash restrictions, and seed-to-sale systems are treated as core design inputs.

Evidence over policy

The engagement tests whether approvals, reviews, reconciliations, and exceptions can be supported after the month closes.

Practical ownership

Controls are designed for the team and systems in place, with compensating paths when ideal segregation is not realistic.

Investment

$40,000–$75,000

A fixed-fee, 6–10 week engagement. Final scope depends on entity count, operating model, control maturity, and the milestone creating pressure.

01

Discover

Confirm the event, pressure, systems, entities, and most consequential risks.

02

Assess

Walk processes, review evidence, and identify the gaps that matter first.

03

Roadmap

Deliver the prioritized remediation plan and leadership handoff.

Anonymized example

Material Weakness Remediation & Control Framework Rewrite

For a $1.5B+ multi-state cannabis operator, the work remediated three material weaknesses, rewrote and tested 125+ business-process controls, reimplemented AuditBoard, managed PBC collection, and coordinated more than ten process walkthroughs.

~8 monthsto clean opinion
3material weaknesses remediated
125+controls
10+processes and walkthroughs

Anonymized advisory engagement. Bricks Advisory does not provide audit or attest opinions.

Start with the checklist. Move to advisory when the facts support it.

The checklist is the public starting point. A scoped engagement follows only when the milestone, risk, and fit are clear.