GLI-19: - Gaming Laboratories International

GLI Standard #19 – Standards for Interactive Gaming Systems (Suppliers) Version 1.0
Final
CHAPTER 7
7.0 Information Systems Security (ISS) Requirements
7.1 Reserved
7.2 Administrative Controls
7.2.1 Change Control Procedures.
a) Program change control procedures must be adequate to ensure that only properly
approved and tested versions of programs are implemented on the production Gaming
Platform. Production change controls must include:
i. An appropriate software version control or mechanism for all software
components;
ii. Details of the reason for the change;
iii. Details of the person making the change; and
iv. Complete backups of previous versions of software.
7.2.2 Authentication.
a) All people (e.g. players, computer operators, maintenance service providers, jurisdiction
officers and representatives) and computer systems (e.g. jackpot controllers, financial
gateway systems, certification authority systems) that connect to the Gaming Platform
must be authenticated except as provided in item (b) below.
b) Players who connect to the Gaming Platform for purposes other than gambling do not
need to be authenticated unless sensitive account information (i.e. monetary transactions,
personal information etc…) is being accessed.
c) The Gaming Platform must authenticate itself to all people and computer systems that
establish a connection.
d) Authentication of people, computer systems controlled by the operator and third party
Chapter Seven: Information Systems Security (ISS) Requirements Page 52
Copyright © 2011 Gaming Laboratories International, LLC
All Rights Reserved.