Section 12-865-20 - Independent Testing LaboratoriesIndependent testing laboratories shall be licensed and comply with the following requirements:
(1) Hold an active accreditation in accordance with NIST 800 or an active accreditation from an accreditation body that is a signatory to the International Laboratory Accreditation Cooperation Mutual Recognition Agreement. In addition to an active accreditation the independent testing lab shall be licensed in the United States by a state gaming agency to perform independent testing laboratory services.(2) Provide authorized individuals for the department to contact on a twenty-four-hour basis.(3) Provide written reports regarding testing and tests results submitted which include at a minimum: (A) All testing performed;(B) A description of the products tested;(C) The unique identification code or signature, as approved by the department, assigned to the internet game or gaming equipment;(D) A secure hash using cryptographic function that uses 256-bit encryption keys in compliance with the current NIST 800 standard or other requirements set forth by the department under section 12-865-3(n) of the Regulations of Connecticut State Agencies, whichever is higher;(E) A list of pay tables or other settings on the tested internet game or gaming equipment, if applicable;(F) A description of the modifications between the tested internet game or gaming equipment, and previous versions of the tested product, if applicable; and(G) A list of components with which the internet game or gaming equipment was verified to be compatible.(4) Provide the department with real-time online access to all gaming services, reports and documents via secure communication protocol and allow the department to view updated reports of all pending, approved and obsolete electronic games and related equipment for which the department's approval has been revoked.(5) Disclose all locations of any laboratory or factory at which independent outside testing services may be conducted.(6) Assign a unique identification code or signature, as approved by the department, and a secure hash using cryptographic function designated by the department to all critical storage media upon testing. For the purposes of this subdivision, "critical storage media" means any program storage media containing software that is involved in, or that significantly influences, the operation and calculation of game play, game display, game result determination, game accounting, revenue or security. (A) Software in program storage media includes, but is not limited to: (i) Game accounting software;(ii) System software; and(iii) Peripheral firmware devices.(B) Critical storage media shall be verified utilizing an external third-party methodology approved by the department.(C) Critical storage media may be required, as determined by the department, to have security seals attached.(7) Conduct its operations in a manner that does not reflect adversely on the security or integrity of gaming within the state.(8) Conduct its operations in a manner that deals fairly with other licensees of the department.Conn. Agencies Regs. § 12-865-20