Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart E - Slot Machine, Table Game and Associated Equipment Testing and Control; Accounting and Internal Controls › Chapter 465a - ACCOUNTING AND INTERNAL CONTROLS › Section 465a.12 - Access badges and temporary access credentials

Current through Register Vol. 54, No. 28, July 13, 2024
(a) Slot machine licensees shall develop an
				  access control matrix indicating the restricted areas in a licensed facility
				  that an employee may access for each employee job description. Access to
				  restricted areas by an employee shall be limited to the restricted areas that
				  the employee needs to access in the course of the performance of the employee's
				  normal duties listed in the employee's job description.
(b) In the internal controls required to be
				  submitted under §
										465a.2 (relating to internal
				  control systems and audit protocols), the slot machine licensee shall designate
				  the department that shall be responsible for determining the appropriate level
				  of access for each job description and updating the level of access when a job
				  description changes. The level of access information for each employee shall be
				  transmitted to the individual or department designated in subsection
				  (c).
(c) In the internal controls
				  required to be submitted under §
										465a.2, the slot machine licensee
				  shall designate the department that shall develop and maintain an electronic
				  database system, or its functional equivalent, which contains the access level
				  of all employees of the slot machine licensee. The electronic database system
				  must be capable of tracking who enters or changes the access level assigned to
				  each employee.
(d) In the internal
				  controls required to be submitted under § 465a.2, the slot machine
				  licensee shall designate the department that shall be responsible for entering
				  or making changes to the access level of employees of the slot machine licensee
				  in the electronic database system.
(e) In the internal controls required to be
				  submitted under § 465a.2, the slot machine licensee shall include an
				  access matrix containing all restricted areas and all employees, their position
				  titles and departments who have access to those restricted areas.
(f) Read-only access to the electronic
				  database system shall be made available through secure computer access to the
				  Board's representatives at the licensed facility.
(g) Slot machine licensees shall develop an
				  access badge system consisting of a badge that contains the employee's name and
				  a color, code or symbol that indicates the areas in the licensed facility that
				  the employee is allowed to access.
(h) Employees of a slot machine licensee
				  shall be required to wear an access badge in a visible location at all times
				  while they are working in a licensed facility.
The provisions of this § 465a.12 amended under
						4
						Pa.C.S. §§
													1207,
						1322,
						13A 02(1)-(6) and
						13A25.
This section cited in 58 Pa. Code §
												435a.6 (relating to Board
						credentials); and 58 Pa. Code §
												465a.11 (relating to slot machine
						licensee's organization; jobs
						compendium).