Ask Reggi Your Question Now
Can you summarize WAAC 230-16-153?
Manufacturer, distributor, and gambling service supplier rules. > Remote access of electronic raffle systems.
Short Summary
This document governs the remote access of electronic raffle systems. It applies to licensed representatives of the manufacturer of the equipment. The manufacturer must submit an application and documentation, and have the remote access solution tested for approval. The manufacturer must notify and receive approval from the electronic raffle licensee before remotely accessing the system. Remote access must occur using a dedicated and secure communication protocol or application utilizing encryption. It must only be conducted through a laptop or computer owned and issued by the manufacturer, meeting specific requirements such as employing full disk encryption, having current updated antivirus software, and employing active firewall software. Multifactor authentication must be used for all remote access. The communication must pass through at least one application-level firewall and not have the ability to allow for an alternate network path. Remote access should only be enabled for the duration of repair, troubleshooting, or technical support, and the connection terminated immediately after. Security standards for remote access must meet commonly accepted national and international best practices for IT security. An electronic log must be maintained for documentation and audit purposes. The manufacturer must disable access for an employee who is no longer with the company within 24 hours of termination.
Whom does it apply to?
Licensed representatives of the manufacturer of the equipment
What does it govern?
Remote access of electronic raffle systems
What are exemptions?
No exemptions are mentioned.
What are the Penalties?
Not specified.
Jurisdiction
Washington