PGCB Guidelines for Annual Recertification of Platforms in 2024

The Pennsylvania Gaming Control Board (PGCB) has published guidelines for the annual recertification of gaming platforms and remote gaming systems (RGS), which will take effect on January 1, 2024. These rules also include the implementation of a quarterly change management audit log.

Annual Recertification of Platforms

Gaming platforms in Pennsylvania must undergo an annual recertification process. This process requires platforms to review their systems and procedures to ensure compliance with state regulations. The aim is to maintain the integrity and security of gaming operations throughout the year. The recertification covers technical and security aspects, aiming to prevent any type of vulnerability.

Requirements for the Process

Platforms must submit all required documentation before January 1 of each year. This documentation includes:

• Internal audit reports
• Risk assessments
• Previous compliance certifications

Failure to comply with these requirements could result in penalties or the suspension of the operating license.

Quarterly Change Management Audit Log

Starting in 2024, platforms must maintain an audit log to manage changes made to their systems. This log will be reviewed quarterly by the PGCB.

Key Elements of the Log

• Recorded Changes: Each modification in the system must be meticulously documented, highlighting the reason for the change and potential impacts.
• Quarterly Reviews: The log will be evaluated by PGCB inspectors every three months, ensuring that changes made do not negatively affect the integrity of the system.

This system aims to ensure that updates to the platforms' systems are secure and well-documented, minimizing security risks.

Implications for Operators

For gaming operators, these guidelines represent an additional challenge in terms of compliance. It is essential that operators work closely with their IT and compliance teams to ensure that the new requirements are met. Collaboration with external auditors may also be beneficial to ensure compliance with the rules.

Operators who do not comply with these new guidelines could face significant penalties, including fines and potential license suspension.

Conclusion

The new PGCB guidelines highlight the importance of transparency and security in the Pennsylvania gaming sector. Platforms and operators must prepare to adopt these measures before the January 2024 deadline. Proactive diligence in complying with these requirements not only ensures business continuity but also protects customers and the market overall.