Section 296-4.006 - INDEPENDENT AUDIT OF INTERNAL CONTROL SYSTEM4.006.01 Authorized Gaming Operators will have their Internal Control System independently audited at least once annually with the results documented in a written report. Reports will be maintained and available to the Commission.4.006.02 Independent audits may be conducted by the Commission, or a Commission approved third-party auditor. The Commission may, in its discretion, allow for an internal audit department within the Authorized Gaming Operator or parent company of the Authorized Gaming Operator, which is independent of the gaming operation, to serve as a third-party auditor for use in completing this audit.4.006.03 The Commission, or third-party auditor will be responsible for auditing the Authorized Gaming Operator's compliance with all laws and regulations, including those standards in the licensee's approved Internal Control System.4.006.04 Documentation, including checklist, programs, reports, corrective actions, and other items, will be prepared to evidence all independent audit work performed as it relates to the requirements of this section, including all instances of noncompliance.4.006.05 Independent audit reports will include objectives, procedures and scope, findings and conclusions, and recommendations.4.006.06 Independent audit findings will be reported to management. Management will be required to respond to the independent audit findings and the stated corrective measures to be taken to avoid recurrence of the audit exception. Such management responses will be included in the final independent audit report.4.006.07 Follow-up observation and examinations will be performed to verify that corrective action has been taken regarding all instances of noncompliance cited by the independent audits, or by the Commission. The verification will be performed within six (6) months following the date of notification.296 Neb. Admin. Code, ch. 4, § 296-4.006
Adopted effective 5/16/2022Amended effective 2/1/2023