
Next iteration of security control standard released
Establishing and sustaining security and risk management is paramount for the operations of all our members. The SRMC keeps abreast of latest technologies, trends and issues and develops useful tools and guides to assist our members.
It developed the WLA Security Control Standard, which allows WLA members who complete certification to demonstrate that adhere to industry best practices for security and risk management, and continues to maintain it.
At the end of 2024, 88 of 158 WLA Lottery members were certified to the WLA-SCS, representing 56% of the total member lotteries, while 43 of 74 WLA Associate Members are certified to WLA-SCS, representing 58% of all Associate Members.
The latest iteration of the WLA-SCS:2024 was approved and released in October 2024. Important updates included: clearer guidance for cloud security control and how to deal with the security of suppliers, and managed services, whether in hosted data centers, or in the cloud. Additionally, new sections were added for esports and horse race betting, online games and virtual betting, as well as Random Number Generators, which are at the heart of all lottery game operations.

Helping lotteries manage risk
Key risk management projects carried out by the SRMC comprised updating the Lottery Risk Register to reflect feedback from a 2023 survey of member risk management specialists. The survey aimed to help WLA better understand risk management maturity across the membership base, to refresh the Lottery Risk Register and to better target risk management support offerings for members.
The WLA Risk Management Taskforce reviewed the 2023 WLA Risk Management Survey and emerging industry risks, as well as the Risk Register and identified 7 top risks. Accordingly, a key project was begun in 2024 to develop profiles. Each risk has been defined, mitigations identified and rated using a risk matrix to assess the likelihood of occurrence and consequence of impact.

As part of efforts to support members with useful knowledge and latest security technology developments, the SRMC held its annual December WLA Security and Operational Risks Seminar 2024 on the theme of New Threats and Opportunities: Evolving AI and Security Risks.