68 Ind. Admin. Code 25-4-3

Current through September 4, 2024

Section 68 IAC 25-4-3 - Reporting requirements related to system security

Authority: IC 4-33-4; IC 4-35-4

Affected: IC 4-33; IC 4-35

Sec. 3.

(a) On a weekly basis, daily system event logs shall be reviewed by internal audit personnel. System event logs shall be maintained for a minimum of seven (7) days following the review.

(b) The review shall provide reasonable assurance of the following:

(1) Users are only performing activities that have been explicitly authorized.

(2) Possible threats facing the LMGS are being assessed.

(c) Evidence of the review of system event logs is to be maintained for one (1) year. The evidence is to include at a minimum the following:

(1) Date and time of review.

(2) Name and title of person performing the review.

(3) The system event log reviewed.

(4) Any exceptions, follow-up, and resolution of exceptions.

68 IAC 25-4-3

Indiana Gaming Commission; 68 IAC 25-4-3; filed 1/7/2016, 8:21 a.m.: 20160203-IR-068150084FRA

Readopted filed 10/17/2022, 11:45 a.m.: 20221116-IR-068220276RFA