The Ontario Cannabis Store is a Crown corporation - the province's sole legal recreational cannabis wholesaler and its only licensed online retailer. That means OCS is a single point of failure for Ontario's entire legal cannabis supply chain, distributing nearly 98 million units in 2023-24 to more than 1,500 authorized retail stores. It also runs the ocs.ca e-commerce platform serving adults 19 and older. For a security team, that concentration of regulated data, payment infrastructure, and supply-chain logistics under a government mandate creates a distinctly high-stakes environment.
The threat model is multifaceted: the organization handles age-verified consumer transactions at scale, manages wholesale distribution data across a sprawling retail network, and operates within Ontario's regulatory framework - all while functioning as a public-sector entity subject to government accountability standards. Cannabis retail and wholesale distribution sit at the intersection of heavily regulated commerce and public trust, making data integrity, transaction security, and supply-chain visibility non-negotiable domains.
OCS carries a product catalog spanning dried flower, pre-rolls, vapes, edibles, concentrates, oils, beverages, and accessories. Behind that catalog is a wholesale-to-retail distribution operation and an e-commerce stack that must process payments, enforce age-gating, and maintain compliance records. The organization also runs the Cannabis Made Clear education initiative, adding a public-facing content layer. Security work here is tied directly to regulatory credibility and operational continuity for an entire province's legal cannabis market.
