Experts explain updates to new WLA security standard

The SRMC is developed and is responsible for maintaining the WLA Security Control Standard, the lottery industry's only internationally recognized security standard. The Committee also oversees the process of member certification to the standard. It also raises awareness about enterprise risk management and provides WLA members with pertinent information for initiating or updating plans to recognize and anticipate risks, and minimize their impact.

Fabien Marechal, International CISO, La Française des Jeux, France, and Vice-Chair of the SRMC Technical Working Group moderated the event. Experts from the Group answered questions about the auditing process, different standard controls, and provided clarification on the certification transition from the previous edition of the standard to the 2024 iteration.

This included Pascal Gervaix, CSO, Société de la Loterie Romande, Switzerland; Trond Laupstad, Head of Security, Legal and Compliance (CSO), Norsk Tipping AS, Norway; and Robert Nitz, Director of Information Security, Multi-State Lottery Association, USA.

Gunnar Ewald, Chief Audit Executive, Lotto Hamburg GmbH, Germany gave a presentation on the Organizational Controls with a focus on the main changes in the new iteration of the WLA Security Control Standard.

Answering member needs

Alessandro Paciucci, SVP, Italy Lottery Operations, IGT Lottery S.p.A. Italy, and the new SRMC Chair, opened the session and noted:

“Ensuring that gaming environments are safe, secure, and trustworthy is not just a priority, it is an obligation, it’s a must for all of us. For this reason, the SRMC plays a crucial role within the WLA, and is dedicated to supporting members by strengthening security, mitigating risks, and ensuring compliance with international standards.”

In an era where everything is changing rapidly, the four years between each iteration of the WLA standard bring enormous changes and discontinuities. For instance, digitalization continues to reshape the lottery and sports betting industry, and in this context the work of the SRMC has never been more relevant.

From cybersecurity threats to compliance risks, the Committee closely monitors evolving trends and challenges, providing WLA members with the tools and strategies they need to operate safely.

The WLA standard considers technology advances, and evolves based on member requirements with each iteration.

Materials to assist the certification process

The webinar examined the Code of Practice (CoP:2024), developed by the SRMC, which follows the structure of the standard, and contains four sections, one for each annex of the standard.

The CoP:2024 is designed to support WLA members preparing for a WLA-SCS:2024 assessment and WLA-affiliated auditors in conducting WLA-SCS:2024 assessments.

It also provides guidance for members that have not undertaken certification but want to reinforce their security procedures and practices.
SRMC experts discussed the main changes to each section of the standard including:

• Annex A (G Controls): Organizational Controls
• Annex B (L Controls): Controls for the Operation of Games
• Annex C (S Controls): Controls for the Development of Gaming Systems and the Provision of Games
• Annex D (M Controls): Controls for Multijurisdictional Games

Goals for 2025

The SRMC will further strengthen security and risk management across the industry by:

• Expanding the Risk Register using feedback from a planned member survey.
• Developing educational materials and communication campaigns to keep WLA members informed about the latest security challenges and solutions.
• Working to encourage more members across the globe to adopt the WLA-SCS:2024 Standard.

Watch the webinar recordings in English or French here (password protected)