Ohio Administrative Code › Title 3772 - Casino Control Commission › Chapter 3772-15 - Independent Testing Laboratories › Section 3772-15-03 - Requirements of certification

Current through all regulations passed and filed through July 1, 2024
(A)
								To be certified
			 and maintain certification, the independent testing laboratory must meet the
			 following requirements:
(1)
									Be independent of any entity or product for which the
			 laboratory provides testing services;
(2)
									Maintain
			 "Professional Liability (Errors and Omissions) Insurance" of not less than one
			 million dollars;
(3)
									Maintain accreditation from a reputable accrediting
			 body to International Organization for Standardization (ISO) standards 17020
			 and 17025, and any other standards as required by the executive
			 director;
(4)
									Employ a full-time quality manager who is responsible
			 for ensuring compliance with national accreditation standards and Chapter 3772.
			 of the Revised Code and the rules adopted thereunder;
(5)
									Maintain physical
			 security at each laboratory facility, including but not limited to,
			 surveillance systems and alarms to minimize the risk that confidential
			 information is misappropriated;
(6)
									Maintain IT
			 security necessary to minimize the risk that confidential information is
			 misappropriated;
(7)
									The laboratory must utilize verification methodologies
			 required by the executive director. The laboratory must request approval from
			 the executive director to use alternative verification methodologies. If
			 approved, the laboratory must provide the verification tool utilizing the
			 alternative verification methodologies to the commission;
(8)
									Ensure that
			 testing and support procedures are performed consistently at all laboratory
			 locations;
(9)
									Make available to the commission, upon request, all
			 policies, procedures and records of the independent test
			 laboratory;
(10)
									Make available to the commission, upon request, a
			 master list of all test methods, standards, forms, and other relevant documents
			 used in the independent test laboratory;
(11)
									Not subcontract
			 any testing without the prior written approval of the executive
			 director;
(12)
									Maintain all records for a minimum of five years unless
			 otherwise specified as follows:
(a)
										Maintain for a minimum of five years after an
			 associated commission approval is no longer in effect, an electronic database
			 containing testing data, reports, and related materials and provide access to
			 the commission. Data, reports, and related materials must be provided in a
			 format and through a mechanism required by the commission;
(b)
										If not available
			 from the manufacturer, maintain an inventory of gaming equipment and versions
			 of software tested by the laboratory and approved by the commission for a
			 minimum of five years after an associated commission approval is no longer in
			 effect; and
(c)
										Maintain for a minimum of five years after the end of
			 the laboratory's certification period in which the submission occurred, all
			 software and associated documentation and source code submitted for testing,
			 but not subsequently approved by the commission. The information must be stored
			 in a manner which is secure and readily accessible to appropriately approved
			 laboratory personnel.
(13)
									Assist the
			 commission in investigations when requested, at the expense of the independent
			 testing laboratory. The independent testing laboratory may seek reimbursement
			 from the owner of the devices subject to investigation;
(14)
									When requested,
			 a laboratory must assist or train commission agents in accounting, auditing,
			 compliance, security, technology, and verification practices for any submission
			 to that laboratory seeking approval from the commission; and
(15)
									Any additional
			 condition imposed by the commission at a meeting held under section
			 3772.02
			 of the Revised Code.