CSQ CERTIFICATION
The CSQ Certification Program and applicable standards were built around ISO/IEC 17067
8 Ill. Adm. Code 1300.475(a) · Infuser Organizations
Illinois GMP for Cannabis
Any area where cannabis is manufactured into an edible form shall comply with the Illinois Food, Drug and Cosmetic Act, the Sanitary Food Preparation Act, and the Food Handling Regulation Enforcement Act. Before operating, the licensee must request a Department of Public Health pre-operational inspection to confirm its facilities and controls conform to good manufacturing practices — Illinois requires no third-party GMP certificate and names no private standard.
Illinois's Cannabis GMP Rule and Why CSQ Certification Is Worth It
Illinois legalized medical and adult-use cannabis and splits oversight three ways: the Department of Agriculture licenses cultivation centers, craft growers, infusers, and transporters; the IDFPR licenses dispensaries; and the Department of Public Health inspects infused-product manufacturing. Illinois makes food-safety GMP practices the law for edible makers, a DPH pre-operational inspection, compliance with three state food statutes, and a certified food service sanitation manager but requires no third-party GMP certificate and names no private standard. CSQ is an accredited, independent way to prove the GMP program Illinois's food rules already expect. This page explains what Illinois actually requires, which CSQ standard fits your license, and where certification with Kiwa ASI adds value.
START HERE
Does Illinois Require Cannabis Operators to Be GMP Certified?
No — Illinois requires no accredited third-party GMP certificate. But GMP practices are far from optional for edible makers: Illinois requires compliance with three state food-safety laws, a Department of Public Health pre-operational inspection, and a certified food service sanitation manager. Here is the short version, and why CSQ still matters.
WHO REGULATES WHAT
IDOA, IDFPR, and DPH — a three-way split
The Department of Agriculture licenses cultivation centers, craft growers, infusers, and transporters; the IDFPR licenses dispensaries; and the Department of Public Health inspects infused-product manufacturing for food-safety GMP conformance. (Many sources get this split wrong — infusers are IDOA, not IDFPR.)
THE REQUIREMENT
Food-safety GMP practices + inspection, not a certificate
Edible makers must comply with three Illinois food statutes, pass a DPH pre-operational good-manufacturing-practices inspection (8 Ill. Adm. Code 1300.475), and staff a certified food service sanitation manager; every product is lab-tested. No accredited third-party GMP certificate is required — GMP is verified by DPH inspection.
WHERE CSQ FITS
Voluntary — accredited proof of what IL expects
CSQ is an accredited (ISO/IEC 17065) cannabis-specific GMP certification. Illinois doesn't require it, but it gives independent, audit-ready proof of the GMP program Illinois's food rules already expect — valuable for inspection readiness, diligence, and multi-state operators.
What Illinois actually requires
Illinois runs an adult-use program under the Cannabis Regulation and Tax Act (CRTA) (410 ILCS 705, retail operational January 1, 2020) and a separate medical program under the Compassionate Use of Medical Cannabis Program Act (410 ILCS 130). Oversight is split three ways: the Department of Agriculture (IDOA) licenses cultivation centers, craft growers, infuser organizations, and transporters; the Department of Financial and Professional Regulation (IDFPR) licenses dispensaries; and the Department of Public Health (DPH) inspects infused-product manufacturing.
For edible and infused-product makers — infusers, craft growers, and cultivation centers — food-safety GMP is the law. Any area where cannabis is manufactured into an edible form shall comply with the Illinois Food, Drug and Cosmetic Act, the Sanitary Food Preparation Act, and the Food Handling Regulation Enforcement Act (8 Ill. Adm. Code 1300.475(a) for infuser organizations, with parallel provisions at 8 Ill. Adm. Code 1300.375 for craft growers and 8 Ill. Adm. Code 1000.405 for cultivation centers). Before operating, the licensee must request a DPH pre-operational inspection to determine whether its facilities, methods, practices, and controls conform to good manufacturing practices (1300.475(d)), and production must be supervised by a certified food service sanitation manager (1300.475(g)). Every product is tested by an independent, IDOA-approved laboratory before sale (410 ILCS 705/50-5). What Illinois does not do is require an accredited third-party GMP certificate — it names no private standard (no SQF, BRCGS, FSSC, ISO, or CSQ), and it does not tie its rules to 21 CFR Part 111 or 117; GMP is verified by DPH inspection against Illinois's own food laws. So in Illinois CSQ is voluntary: accredited, independent proof of the GMP program Illinois's food rules already expect.
FIND YOUR PATH
Match Your Illinois License to the Right CSQ Standard
CSQ is voluntary in Illinois, so this is about which scope fits if you pursue certification. Match your license to the CSQ standard that fits; operators who hold more than one license can combine scopes into one coordinated audit with Kiwa ASI.
Cultivation Center (Art. 20)
410 ILCS 705/20 · IDOASTANDARD
CSQ Cultivation v2.0.0
MINIMUM LEVEL
Level 1
PREP TIME
6–9 months
AUDIT LENGTH
~1 day onsite + 1 day offsite doc review (initial)
Large-scale indoor cultivation licensed by the Department of Agriculture. Foundation: cGACP (good agricultural and collection practices) plus cGMP. Cultivation centers that also make infused or processed products fall under the same DPH food-safety inspection regime.
Craft Grower (Art. 30)
410 ILCS 705/30 · IDOASTANDARD
CSQ Cultivation v2.0.0
MINIMUM LEVEL
Level 1
PREP TIME
6–9 months
AUDIT LENGTH
~1 day onsite + 1 day offsite doc review (initial)
Smaller-footprint cultivation (capped at 14,000 sq ft of flowering canopy) licensed by the Department of Agriculture. Craft growers that make edibles must meet the same three state food statutes and DPH pre-operational inspection as infusers.
Infuser Organization (Art. 35)
410 ILCS 705/35 · 8 IAC 1300.475STANDARD
CSQ Extraction / Manufacturing v2.0.0
MINIMUM LEVEL
Level 1
PREP TIME
6–9 months
AUDIT LENGTH
~1 day onsite + 1 day offsite doc review (initial)
The dedicated edible and infused-product maker, licensed by the Department of Agriculture. This is where Illinois's food-safety GMP regime (1300.475) bites hardest, and where CSQ maps most directly. CSQ items to watch: beverage-grade CO₂ (99.5%), food-grade non-denatured ethanol, and allergen controls.
Dispensing Organization (Art. 15)
410 ILCS 705/15 · IDFPRSTANDARD
CSQ Retail v1.0.0
MINIMUM LEVEL
Level 1
PREP TIME
4–6 months
AUDIT LENGTH
~1 day onsite + 1 day offsite doc review (initial)
Retail dispensaries, licensed by the IDFPR. Built on cGHP (good handling practices) — storage, handling, inventory, and the written recall procedures Illinois requires of dispensaries (68 Ill. Adm. Code 1291.330).
Testing Laboratory
410 ILCS 705/50-5 · IDOA-approvedSTANDARD
ISO/IEC 17025
MINIMUM LEVEL
N/A
PREP TIME
Varies
AUDIT LENGTH
Per accreditation body
Illinois requires cannabis testing labs to be approved by the Department of Agriculture and accredited by a private laboratory accrediting organization (410 ILCS 705/50-5); IDOA's approved-lab guidance specifies ISO/IEC 17025:2017. CSQ does not certify testing labs; it requires them to be ISO/IEC 17025 accredited.
ILLINOIS REQUIRES VS. CSQ GOES FURTHER
What's a State Rule, and What's a CSQ Best Practice?
Illinois's regulations are the legal floor, enforced by dual-agency licensing, DPH food-safety inspection, and mandatory lab testing. CSQ is a voluntary published standard that documents GMP beyond that floor — and gives independent proof of the program Illinois's food rules already expect. Knowing which is which keeps you from over-buying or under-preparing.
What Illinois requires (the legal floor)
- Dual-agency licensing: IDOA (cultivation centers, craft growers, infusers, transporters) + IDFPR (dispensaries) — CRTA, 410 ILCS 705
- Edible-manufacturing areas comply with three Illinois food statutes — the Food, Drug and Cosmetic Act, Sanitary Food Preparation Act, and Food Handling Regulation Enforcement Act — 8 Ill. Adm. Code 1300.475(a)
- A DPH pre-operational inspection for good-manufacturing-practices conformance — 8 Ill. Adm. Code 1300.475(d)
- A certified food service sanitation manager supervising production — 8 Ill. Adm. Code 1300.475(g)
- Independent, IDOA-approved, accredited product testing before sale — 410 ILCS 705/50-5
- Packaging & labeling: sealed / odor-proof / child-resistant, allergen statement, ingredient list, THC limits (100 mg per package, 10 mg per serving) — 410 ILCS 705/55-21; 8 Ill. Adm. Code 1300.920
- Written recall procedures at the dispensary level — 68 Ill. Adm. Code 1291.330
- No accredited third-party GMP certificate is required — Illinois names no private GMP standard
What CSQ adds (voluntary best practice)
- An accredited (ISO/IEC 17065) cannabis GMP certification — independent, audit-ready proof beyond the DPH inspection
- Built to meet the food-safety and GMP practices Illinois's food rules require of edible makers
- A documented internal audit program (Section 1.5) and CAPA system (Section 1.6)
- An annual mock recall (Section 1.8) and verified traceability test — supporting the written recall duties Illinois imposes on the retail chain (68 Ill. Adm. Code 1291.330)
- Cannabinoid and non-cannabinoid waste streams kept completely separated (Section 2A.4 / 2B.4)
- Beverage-grade CO₂ (99.5%) for extraction — medical-grade is not acceptable
- Inhalation-grade ingredients for inhalable products (food-grade/GRAS is not sufficient)
- DPH inspection readiness, investor/lender/M&A diligence, multi-state standardization, and retail/buyer assurance
- A HACCP team and certified lead (Level 2 only — not an Illinois requirement)
Quick glossary — the terms that show up in an Illinois CSQ audit
CRTA
The Cannabis Regulation and Tax Act (410 ILCS 705) — Illinois's adult-use cannabis statute; commercial retail became operational January 1, 2020.
IDOA
The Illinois Department of Agriculture — licenses and regulates cultivation centers, craft growers, infuser organizations, and transporting organizations (and approves testing labs).
IDFPR
The Illinois Department of Financial and Professional Regulation — licenses and regulates dispensing organizations (retail) only.
DPH
The Illinois Department of Public Health — conducts the pre-operational and ongoing food-safety inspections of infused-product manufacturing for good-manufacturing-practices conformance (8 Ill. Adm. Code 1300.475).
Infuser organization
An IDOA-licensed business (Article 35) that makes cannabis-infused products such as edibles and beverages — the license where Illinois's food-safety GMP regime applies most directly.
Certified food service sanitation manager
A person-level food-safety credential (77 Ill. Adm. Code 730.8000 / 730.8040) that Illinois requires to supervise infused-product production — a personnel qualification, not a facility or GMP certification.
ISO/IEC 17025
The competence standard for testing laboratories. Illinois requires cannabis testing labs to be IDOA-approved and accredited by a private accrediting organization (410 ILCS 705/50-5); IDOA guidance specifies ISO/IEC 17025:2017. CSQ requires labs to hold the same.
ISO/IEC 17065
The accreditation standard for bodies that certify products and processes. CSQ is delivered by ASI Food Safety as an ISO/IEC 17065-accredited certification body — the basis for an independent, accredited GMP certificate.
THE AUDIT
What a CSQ Audit Actually Looks Like
An Illinois CSQ audit is an onsite review of your quality management system against the standard that fits each activity you perform. Here is how scoring, findings, and timing work — followed by the technical mapping table for the people who want it.
Scoring (100-point scale)
How CSQ scores you and what it means for your certificate
| Score | Outcome | Surveillance Cycle |
|---|---|---|
| 80–100 | Certificate issued | Annual surveillance audit |
| 70–79 | Certificate issued | 6-month surveillance audit |
| Below 70 | No certificate | 6-month wait before re-audit |
Findings categories
CRITICAL · –100 POINTS
Auto-fail finding
Regulatory non-compliance, product safety risk, or foundational QMS breakdown. A single Critical finding fails the audit regardless of other scores.
MAJOR · –10 POINTS
Significant gap
Systemic failures or significant deviations from CSQ requirements — not an immediate safety risk but requires corrective action.
MINOR · –1 POINT
Isolated finding
Documentation gap, single-occurrence lapse, or correctable deviation that is not systemic.
Audit timing & certificate validity
What to expect onsite and on the calendar
| Item | Detail |
|---|---|
| Level 1 audit | 1 day onsite + 0.5 day report time |
| Level 2 audit | 1.5 days onsite + 1 day report time |
| Level 3 audit | 2 days onsite + 1 day report time (unannounced window) |
| Initial audit add-on | +1 day for offsite documentation evaluation (all levels) |
| Corrective action window | 30 days to close nonconformities |
| Certificate validity | 1 year + 45 days from audit date |
| Initial certification blackout | No initial certifications scheduled in November or December |
| Provisional certificate | Available for new operations (valid 6 months) |
| Dietary Supplement Addendum | 4-hour minimum · Pass/Fail · separate report within 72 hours |
For consultants, internal compliance leads, and operators who want the section-by-section map between Illinois's regulations and CSQ 2.0:
Illinois cannabis rules and corresponding CSQ 2.0 sections
| Missouri Requirement | Citation | CSQ Coverage |
|---|---|---|
| Dual-agency licensing (IDOA + IDFPR) | 410 ILCS 705/15, 20, 30, 35, 40 | Module 1 (CSQMS) + Section 1.3 (Regulatory Compliance) |
| Compliance with three Illinois food statutes | 8 IAC 1300.475(a) | Module 2A (cGMP) + Section 3C (formulated / ingestible product controls) |
| DPH pre-operational good-manufacturing-practices inspection | 8 IAC 1300.475(d) | Section 2A.1 (Facility Construction & Design) + Module 2A (cGMP) |
| Certified food service sanitation manager | 8 IAC 1300.475(g) | Section 2A.5 (Personnel Training and Hygiene) |
| Independent IDOA-approved product testing | 410 ILCS 705/50-5 | Section 2A.12.9 / 2B.11.7 (Product Sampling and Testing) — CSQ requires ISO/IEC 17025 labs |
| Packaging, labeling, allergen, and THC-limit rules | 410 ILCS 705/55-21; 8 IAC 1300.920 | Section 2A.12.8 / 2B.11.6 (Product Labeling and Packaging) |
| Written recall procedures (dispensaries) | 68 IAC 1291.330 | Section 1.8 (Recall & Traceability) + Section 1.6 (CAPA) |
How to Prepare | A Realistic Path to CSQ Certification
Because CSQ is voluntary in Illinois, step one is deciding whether it earns its place for you. If it does, most operators need 4 to 9 months, depending on license type and scope, to be ready for an initial audit. Here is a sequence that works.
01
Decide whether CSQ is right for you
Illinois doesn't require it, so weigh the value: DPH inspection readiness, investor / lender / M&A diligence, multi-state standardization, and retail or buyer assurance. Because Illinois already requires food-safety GMP practices for edible makers, CSQ mostly certifies what you are already doing. If those matter, CSQ is worth pursuing.
02
Confirm your CSQ standard and level
Match your license — cultivation center, craft grower, infuser, dispensary — to its CSQ standard, and decide whether Level 1 is enough or you want Level 2/3. Write the answer down; it drives every other step.
03
Run a gap analysis
Compare your current state to the CSQ standard, mapped against Illinois's food-safety regime (the three state food statutes and the DPH good-manufacturing-practices inspection under 8 Ill. Adm. Code 1300.475). ASI Training and Consulting, LLC can deliver a structured gap analysis as a separate engagement from the certification body.
04
Build the QMS documentation
Extend the food-safety controls Illinois already requires — sanitation, your certified food service sanitation manager's program, and allergen controls — into a full CSQ quality management system with SOPs, CAPA, internal audit, document control, and recall/traceability (a CSQ element; in Illinois the written recall-procedure mandate falls on dispensaries under 68 Ill. Adm. Code 1291.330, not manufacturers).
05
Address the cannabis-specific Critical items
The findings most likely to fail a first audit: CO₂ purity, ethanol grade, inhalation-grade ingredients, waste-stream separation, and route-of-administration risk assessments. Verify these before the auditor arrives.
06
Train your team and run internal audits
Deliver competency-based, role-specific training on GMP, hygiene, PPE, allergen handling, and traceability. Then conduct a documented internal audit and an annual mock recall, and close nonconformities through CAPA.
07
Schedule your CSQ audit with Kiwa ASI
Schedule through Kiwa ASI in the CSQ Database. Allow time for the offsite documentation evaluation (1 day) plus the onsite audit (1–2 days depending on level). Request a quote to start.
Why Illinois Operators Choose Kiwa ASI
Kiwa ASI brings nearly a century of food safety expertise and the global Kiwa network's footprint in 30+ countries to Illinois — a large, established dual-track cannabis market that already regulates infused-product manufacturing with a food-safety GMP inspection.
Accredited
ISO/IEC 17065 + CSQ-Licensed
Audits and certificates are issued by ASI Food Safety, LLC — an ISO/IEC 17065-accredited certification body licensed by CSQ.
Expertise
Food-grade rigor for cannabis
Our auditors are credentialed food safety, GMP, and HACCP professionals with cannabis-specific qualifications. Cannabis is being regulated like food. We've been doing food for decades.
Efficiency
Direct scheduling, no surprises
Pre-audit scoping clarifies level, scope, and Module 3 requirements before you're onsite. Audit reports are turned around inside the standard CSQ timeline.
Comprehensive
Training and consulting available
Pre-assessments and gap analyses are delivered by ASI Training and Consulting, LLC, a separate legal entity, kept structurally separate from the certification body to safeguard impartiality under ISO/IEC 17065.
Continuity
Surveillance, recertification, transfer
If you're already CSQ-certified through another body and the relationship isn't working, we accept transfer audits. Continuity matters as much as the initial certificate.
Partnership
Global Kiwa network
Operations in 30+ countries. Useful when an Illinois operator expands into other state markets or builds an international supply chain.
Frequently Asked Questions About Illinois Cannabis GMP & CSQ Certification
No. Illinois does not mandate an accredited third-party GMP certificate, and it names no private GMP standard. But GMP practices are required of edible makers: any area where cannabis is made into edible form must comply with three Illinois food statutes (the Food, Drug and Cosmetic Act, the Sanitary Food Preparation Act, and the Food Handling Regulation Enforcement Act), pass a Department of Public Health pre-operational good-manufacturing-practices inspection (8 Ill. Adm. Code 1300.475), and be supervised by a certified food service sanitation manager. CSQ certification is voluntary: accredited, independent proof of that program.
Both. Illinois has a medical program under the Compassionate Use of Medical Cannabis Program Act (410 ILCS 130) and an adult-use program under the Cannabis Regulation and Tax Act (410 ILCS 705), with adult-use retail sales operational since January 1, 2020.
Three agencies. The Department of Agriculture (IDOA) licenses cultivation centers, craft growers, infuser organizations, and transporters; the Department of Financial and Professional Regulation (IDFPR) licenses dispensaries; and the Department of Public Health (DPH) conducts the food-safety inspections of infused-product manufacturing. A common mistake is placing infusers under the IDFPR — they are licensed by the Department of Agriculture.
Yes — as practices, not a certificate. Infusers, craft growers, and cultivation centers that make edibles must comply with three Illinois food statutes, request a DPH pre-operational inspection to confirm their facilities and controls conform to good manufacturing practices (8 Ill. Adm. Code 1300.475(d)), and operate under a certified food service sanitation manager. Illinois verifies all of this by DPH inspection — it does not require a third-party GMP certificate, and it does not tie its rules to 21 CFR Part 111 or 117.
No. GMP compliance is verified through DPH inspection, dual-agency licensing, and mandatory product testing — not by a required outside auditor. The independent testing laboratory Illinois requires tests the product; it does not certify the manufacturer's GMP program. A CSQ certificate is voluntary and does not replace the DPH inspection or lab testing.
No. The Cannabis Regulation and Tax Act and the Department of Agriculture's rules name no private food-safety or GMP standard for manufacturers — not CSQ, SQF, BRCGS, FSSC, or ISO. The GMP benchmark is the DPH inspection against Illinois's own food laws. CSQ is a voluntary, accredited option delivered by ASI Food Safety, not a legal requirement.
Cultivation centers and craft growers use CSQ Cultivation v2.0.0; infuser organizations use CSQ Extraction or Manufacturing v2.0.0; dispensaries use CSQ Retail v1.0.0. Testing laboratories follow ISO/IEC 17025 (CSQ does not certify labs but requires ISO/IEC 17025). Kiwa ASI can combine scopes into one coordinated audit.
Because it turns the food-safety practices Illinois already requires into accredited, independent proof. The highest-value cases: DPH inspection readiness, investor / lender / M&A due diligence, a multi-state operator standardizing GMP across programs, and retail or buyer assurance — plus audit-ready records that support the written recall duties Illinois imposes on dispensaries. You are largely certifying work you already have to do.
There is no single published price: cost depends on which CSQ standards apply, which level you pursue, facility size and complexity, whether it is your initial audit (which adds an offsite documentation day), and whether you combine multiple facility scopes. Most operations need 4 to 9 months to prepare, depending on license type and scope; a Level 1 audit is roughly 1 onsite day plus report time. Request a quote for an Illinois-specific scope.
Yes — but as separate legal entities to safeguard certification-body independence. CSQ certification audits are delivered by ASI Food Safety, LLC (the accredited certification body, ISO/IEC 17065 accredited and CSQ-licensed). Pre-assessments, gap analyses, training, and consulting are delivered by ASI Training and Consulting, LLC. The two operate independently to comply with ISO/IEC 17065 impartiality rules.