Pennsylvania Code › Title 58 - RECREATION › Part VII - GAMING CONTROL BOARD › Subpart E - Slot Machine, Table Game and Associated Equipment Testing and Control; Accounting and Internal Controls › Chapter 461a - SLOT MACHINE, TABLE GAME DEVICE, INTERACTIVE GAME, SPORTS WAGERING DEVICE, VIDEO GAME TERMINAL, AND ASSOCIATED EQUIPMENT TESTING AND CONTROLS › Section 461a.19 - Remote system access

Current through Register Vol. 54, No. 28, July 13, 2024
(a) In
				  emergency situations or as an element of technical support, an employee of a
				  licensed manufacturer may perform analysis of, or render technical support with
				  regard to, a slot machine licensee's slot monitoring system, casino management
				  system, player tracking system, external bonusing system, cashless funds
				  transfer system, wide area progressive system, gaming voucher system or other
				  Board-approved system from a remote location.
(b) Remote system access shall be performed
				  in accordance with all of the following procedures:
(1) Only an employee of a licensed
				  manufacturer who is licensed as a gaming employee or key employee in this
				  Commonwealth may remotely access a system sold, leased or otherwise distributed
				  by that licensed manufacturer for use at a licensed facility.
(2) The slot machine licensee shall establish
				  a unique system account for each employee of a licensed manufacturer identified
				  by his employer as potentially required to perform technical support from a
				  remote location. System access afforded under this section shall:
(i) Be restricted in a manner that requires
				  the slot machine licensee's information technology department to receive prior
				  notice from the licensed manufacturer of its intent to remotely access a
				  designated system.
(ii) Require the
				  slot machine licensee to take affirmative steps, on a per access basis, to
				  activate the licensed manufacturer's access privileges.
(iii) Be designed to appropriately limit the
				  ability of a person authorized under this section to deliberately or
				  inadvertently interfere with the normal operation of the system or its
				  data.
(3) A log shall be
				  maintained by both the licensed manufacturer and the slot machine licensee's
				  information technology department. Each of the two logs must contain, at a
				  minimum, all of the following information:
(i)
				  The system accessed, including manufacturer and version number.
(ii) The type of connection (that is, leased
				  line, dial in modem or private WAN).
(iii) The name and license number of the
				  employee remotely accessing the system.
(iv) The name and license number of the
				  information technology department employee activating the licensed
				  manufacturer's access to the system.
(v) The date, time and duration of the
				  connection.
(vi) The reason for the
				  remote access including a description of the symptoms or malfunction prompting
				  the need for remote access to the system.
(vii) Action taken or further action
				  required.
(4)
				  Communications between the licensed manufacturer and any of the systems
				  identified in subsection (a) shall occur using a dedicated and secure
				  communication facility such as a leased line approved in writing by the
				  Board.