Online lottery and sports betting products and services continue to grow worldwide. Ensuring operations, products and services remain secure is vital for WLA members and their customers.
The WLA Security and Risk Management Committee (SRMC) has developed and maintains the WLA Security Control Standard (WLA - SCS: 2020), the only internationally recognized standard for the legal lotteries and sports betting operators, and their suppliers. The new iteration of the standard – WLA - SCS:2024 was launched during WLS 2024.
This session on security examined the updates, additions, benefits, and compliance requirements for WLA - SCS: 2024, as well as key management risks. It was moderated by Rose Hudson, President of the Louisiana Lottery Corporation, with panellists, Anton Stiglic, General Manager IT, Loto-Québec, Canada; Brett Toyne, Executive Director, Multi-State Lottery Association, US, and Gunnar Evald, Chief Audit Executive, LOTTO Hamburg, Germany.
Updating and streamlining the standard
Some of the updates, included aligning the standard with ISO 27001, focusing on business continuity, fraud scenarios, and supplier relationships, ensuring the integrity of operations, and simplifying terminology.
Other areas highlighted were managed services, and ongoing efforts to adapt to emerging technologies, such as artificial intelligence and blockchain.
Gunnar Evald emphasized the benefits of certification, such as improved security incident management and streamlined audits.
New sections added, include: gaming system security, player account security, secure payments, online games and randomness, the latter of which regroups controls previously found in different sections.
Brett Toyne noted the benefit of collaboration between MUSL and the WLA, which has led to a modernized rule two, streamlining security reviews for lotteries that have undergone ISO 27001, or WLA SCS certification.
The standard has also been made inclusive for smaller lotteries, with a level one certification for those with fewer resources.
Find out more about the WLA SRMC and WLA SCS certification.