Pennsylvania Code
Title 58 - RECREATION
Part VII - GAMING CONTROL BOARD
Subpart L - Interactive Gaming
Chapter 809a - INTERACTIVE GAMING PLATFORM REQUIREMENTS
Section 809a.5 - Access to equipment

Universal Citation: 58 PA Code ยง 809a.5

Current through Register Vol. 54, No. 44, November 2, 2024

(a) The interactive gaming certificate holder and interactive gaming operator shall limit and control access to the primary server and any secondary servers by ensuring all of the following:

(1) Maintain access codes and other computer security controls.

(2) Maintain logs of user access, security incidents and unusual transactions.

(3) Coordinate and develop an education and training program on information security and privacy matters for employees and other authorized users.

(4) Ensure compliance with all State and Federal information security policies and rules.

(5) Prepare and maintain security-related reports and data.

(6) Develop and implement an incident reporting and response system to address security breaches, policy violations and complaints from external parties.

(7) Develop and implement an ongoing risk assessment program that targets information security and privacy matters by identifying methods for vulnerability detection and remediation and overseeing the testing of those methods.

(b) Remote access to an interactive gaming certificate holder or interactive gaming operator's interactive gaming system is only permitted as follows:

(1) To Board employees upon request and without limitation.

(2) For testing purposes with prior approval from and as limited by the Board.

(3) By employees of an interactive gaming certificate holder or an interactive gaming operator with prior approval from and as limited by the Board.

(c) All interactive gaming certificate holder's or interactive gaming operator's interactive gaming systems must be available for independent testing by the Board, without limitation.

Disclaimer: These regulations may not be the most recent version. Pennsylvania may have more current or accurate information. We make no warranties or guarantees about the accuracy, completeness, or adequacy of the information contained on this site or the information linked to on the state site. Please check official sources.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.