Security and Risk Management

The Security and Risk Management Committee (SRMC) was convened upon the establishment of the WLA in 1999. A key area of responsibility is the WLA Security Control Standard (WLA-SCS:2024), the lottery industry’s only internationally recognized security standard. The Committee manages the continuous improvement of the Standard, and oversees the process of member certification to the standard.

The other important focus is to support WLA members with risk management for their operations, through the development of risk management resources.

For instance, the Lottery Risk Register was developed to provide the WLA community with comprehensive documentation for establishing, implementing, or monitoring risk management processes.

Work is ongoing to develop profiles for key risk categories. Each profile describes a risk, details what is driving the risk, and offers risk mitigation strategies. A risk rating has been applied to each risk using an assessment of the likelihood of the risk occurring and the consequence of its impact. Some of the topics already covered include: cybersecurity, artificial intelligence, illegal gaming, talent, licenses and contracts, and disaster risks.