Louisiana Administrative Code › Title 35 - HORSE RACING › Part XVII - Historical Horse Racing › Chapter 131 - Wagering on Historical Horse Racing › Section XVII-13113 - Operational Requirements for the Conduct of Historical Horse Racing

Current through Register Vol. 50, No. 6, June 20, 2024
A. An association
				may conduct wagering on historical horse races of any horse breed regardless of
				the type of breed that primarily races in live meets conducted by the
				association. An association may conduct wagering on historical horse races on
				any days and hours approved by the commission, and shall not be limited to
				times during which the association is conducting a live horse race
				meeting.
B. A mutuel wager on
				historical horse races may be placed only from a physical facility of a
				licensee.
C. A mutuel wager on
				historical horse racing may not be placed using a mobile device unless the
				system communicating with the mobile device to place the wager is fully
				controlled and operated by the licensed facility at which the wager is placed.
				For the purposes of this Section, "fully controlled and operated" means the
				licensed facility develops, owns, leases, acquires a license for, or otherwise
				contracts for services to operate and control a mobile historical horse racing
				wagering system.
D. No licensee may
				accept a mutuel wager on historical horse racing if the wager is placed via a
				mobile phone or other personal electronic device, unless the network
				infrastructure and all pari-mutuel wagering software complies with the relevant
				technical requirements within these rules.
E. Nothing in this Section independently
				authorizes wagering or facilitation of wagering on historical horse racing
				outside of the licensed pari-mutuel wagering operation.
F. Any historical horse racing solution that
				relies on wireless networked communications, including all mobile historical
				horse racing systems, shall annually conduct a system integrity and security
				risk assessment performed by an independent information technology security
				professional approved by the commission. The system integrity and security risk
				assessment shall be conducted no later than 90 days after commencing operations
				and annually thereafter. The scope of the pari-mutuel wagering system integrity
				and security assessment is subject to the approval of the commission and must
				include:
1. A vulnerability assessment of
				digital platforms, mobile applications, internal, external, and wireless
				networks with the intent of identifying vulnerabilities of all devices, the
				historical horse racing system, and applications transferring, storing, and/or
				processing personal identifying information or other sensitive information
				connected to or present on the networks;
2. A penetration test of all digital
				platforms, mobile applications, and internal, external, and wireless networks
				to confirm devices, the historical horse racing wagering systems, and
				applications are not susceptible to compromise;
3. A review of the firewall rules to verify
				the operating condition of the firewall and the effectiveness of its security
				configuration and rule sets that must be performed on all perimeter and
				internal firewalls;
4. A technical
				security control assessment against the commission's technical requirements for
				security and with generally accepted professional standards;
5. An evaluation of information security
				services, cloud services, payment services, financial institutions, payment
				processors, location services, and any other services that may be offered
				directly by the licensee or involve the use of third parties; and
6. At the discretion of the executive
				director, any additional assessments or specific testing criteria which may be
				required by internal control procedures.