Louisiana Administrative Code
Title 42 - LOUISIANA GAMING
Part III - Gaming Control Board
Chapter 28 - Casino Computer Systems
Section III-2807 - Incident Response Plan
Universal Citation: LA Admin Code III-2807
Current through Register Vol. 50, No. 9, September 20, 2024
A. To ensure that computer systems and network security threats are responded to in a timely and effective manner, an operational incident response plan shall be developed, implemented, and maintained. Licensees and casino operators shall reference the incident response plan in their internal controls, but the plan shall be maintained outside the internal controls to ensure it is updated.
B. The incident response plan shall:
1. detail adequate preparation,
detection, analysis, containment, recovery, and response activities;
2. define roles and responsibilities in the
event of a security incident;
3.
include measures for tracking, documenting, and reporting security incidents to
appropriate officials and/or authorities and the division;
4. have a definitive communication plan
including both internal and external communication; and
5. be formally documented and tested every
three years.
AUTHORITY NOTE: Promulgated in accordance with R.S. 27:15 and 24.
Disclaimer: These regulations may not be the most recent version. Louisiana may have more current or accurate information. We make no warranties or guarantees about the accuracy, completeness, or adequacy of the information contained on this site or the information linked to on the state site. Please check official sources.
This site is protected by reCAPTCHA and the Google
Privacy Policy and
Terms of Service apply.
