Form: WLA-SCS:2024 Assessment

1. Information on the assessment

Type of assessment:

Initial certification

Annual review

Recertification

Type of certificate requested:

WLA-SCS:2024 Level 1

WLA-SCS:2024 Level 2 (requires ISO/IEC 27001)

The Statement of Applicability has been verified.

2. Front of the certificate

WLA member

Number of premises included in the scope

Address of premises included in the WLA-SCS scope

All premises have been physically visited?

Yes

No

WLA-SCS scope

WLA-SCS certificate number

WLA-SCS initial certification

WLA-SCS latest revision

WLA-SCS expiry date

ASE

Address

3. Back of the certificate (not requested for WLA-SCS Level 1)

ISO/IEC 27001 scope

ISO/IEC 27001 certificate number

ISO/IEC 27001 latest revision

ISO/IEC 27001 expiry date

ISO/IEC 27001 certifying body

4. WLA-SCS:2024 Annex A (G controls)
Organizational controls

Name of control

Audited

Not audited*

Not applicable

G.3Physical and environmental security

G.3.1Secure areas

G.3.1.1Physical entry controls

G.5Information systems security

G.5.1Cryptographic controls

G.5.1.1Cryptographic controls for the confidentiality and integrity of data at rest on portable systems and on lottery terminals

G.5.1.2Cryptographic controls for the confidentiality and integrity of data in transit over networks

G.5.1.3Cryptographic controls for the integrity of sensitive ticket data

5. WLA-SCS:2024 Annex B (L Controls)
Controls for the operation of games

Name of control

Audited

Not audited*

Not applicable

L.3Retailer security

L.3.1Retailer operations

L.3.1.1Retailer security

L.3.2Gaming terminal security

L.3.2.1Transaction security

L.6Sports, esports and horse race betting

L.6.1Selecting the offer

L.6.1.1Betting framework

L.6.3Monitoring for fraud and money laundering

L.6.3.1Monitoring the betting activities

6. WLA-SCS:2024 Annex C (S Controls)
Controls for the development of gaming systems and the provision of gaming services

The S controls apply to the development of gaming systems and the provision of gaming services, whether that be a gaming supplier or the gaming operator's own in-house developers. In the case that a gaming operator or gaming supplier acquires a gaming system or services from a third party, it is the gaming operator’s or gaming supplier’s responsibility to assure compliance to these S controls from the third party.

Name of control

Audited

Not audited*

Not applicable

7. WLA-SCS:2024 Annex D (M Controls)
Controls for multijurisdictional games

Name of control

Audited

Not audited*

Not applicable

M.1.3Quick picks

M.1.3.1Randomness of quick picks

M.1.4Separation between ICS and CGS

M.1.4.1Separation between the computer gaming system and the internal control system

M.1.5Draw process

M.1.5.1Usage of same personnel and internal control system

M.1.6Intrusion detection system

M.1.6.1Intrusion detection system on ICS and CGS networks

* Applicable controls can be marked ”Not audited” during annual reviews (see the GtC, Part A, Section 5.5.4). In the case of initial certifications or recertification assessments, any exclusion needs to be formally justified and accepted by the accountable persons and the WLA. For more information see section 1. Scope on page 3 of the WLA-SCS:2024 – Security Control Standard.

8. Auditor’s recommendations

Upon completion of the audit, the auditor shall provide a recommendation on certification based on the member’s compliance to the WLA-SCS.

In cases where not all premises were physically visited, or where applicable controls were not assessed, the auditor must include all details here in this field.

All details and information contained in this form are used for issuing the WLA-SCS certificate. By signing the assessment form, the auditor certifies that all mandatory and applicable controls have been thoroughly and correctly audited. The auditor also guarantees that the WLA-SCS:2024 and the Guide toCertification for the WLA Security Control Standard have been read and understood and that the mandatory requirements for conducting a WLA-SCS audit have been met.

6. Signature

Auditor

Date

Signature

Click to upload signature

Your signature is stored only on your device and is never transmitted over the internet

WLA-SCS:2024Assessment Form

1. Information on the assessment

2. Front of the certificate

3. Back of the certificate (not requested for WLA-SCS Level 1)

4. WLA-SCS:2024 Annex A (G controls)Organizational controls

5. WLA-SCS:2024 Annex B (L Controls)Controls for the operation of games

6. WLA-SCS:2024 Annex C (S Controls)Controls for the development of gaming systems and the provision of gaming services

7. WLA-SCS:2024 Annex D (M Controls)Controls for multijurisdictional games

8. Auditor’s recommendations

6. Signature

WLA-SCS:2024
Assessment Form

4. WLA-SCS:2024 Annex A (G controls)
Organizational controls

5. WLA-SCS:2024 Annex B (L Controls)
Controls for the operation of games

6. WLA-SCS:2024 Annex C (S Controls)
Controls for the development of gaming systems and the provision of gaming services

7. WLA-SCS:2024 Annex D (M Controls)
Controls for multijurisdictional games