Date of Proposal: July 3, 2017
Proposal Number: PRN 2017-114
Proposal Description: The Division of Gaming Enforcement (Division) proposes the following rule amendments:
A proposed amendment to the definition of “Critical data” in N.J.A.C. 13:69D-2.1 to clarify that critical data is a subset of controlled data, and a proposed technical amendment to the definition of "Critical hardware" to remove the language “by a casino.”A roposed amendment to N.J.A.C. 13:69D-2.2(h)3 makes it clear that the backup data for a controlled computer system shall be maintained in a separate location.
Proposed amendments to N.J.A.C.13:69D-2.3(d)3 and 4 are intended to clarify the requirements of those subsections. As amended, it will be clear that N.J.A.C. 13:69D-2.3(d)3 means that software utilized to perform a regulated function must operate in accordance with the Division’s rules applicable to that function. For example if a casino licensee has a piece of software used to issue counterchecks that software must operate in accordance with the Division’s rules regarding the issuance of counter checks. The proposed amendment to N.J.A.C. 13:69D-2.3(d)4 clarifies that all software governed by this section should be reviewed for security weaknesses.
A proposed amendment to N.J.A.C. 13:69D-2.3(f) requires Release Notes to be submitted for controlled hardware and software rather than just critical software. Additionally, the release notes will be required to be submitted three business days prior to the change rather than twenty-four hours.
A proposed amendment to N.J.A.C. 13:69D-2.3(g) changes the timing requirements for emergency Release Notes from twenty-four hours to one business day and from seventy-two hours to three business days.
A proposed amendment to N.J.A.C. 13:69D-2.4(e) requires all casino licensees to conduct an annual system integrity and security assessment of their networks. Previously, the rule stated that such an assessment was Division best practice; however, as amended it will be required. This requirement is similar to the Division’s rules that apply to Internet gaming systems and is designed to make sure land based systems are secure.
Summary of Proposal: A summary of the proposal is posted at:
www.nj.gov/oag/ge/proposed_rules.htm
Public Comment: The public comment period is now through September 1, 2017.
Please send written comments to:
Deputy Attorney General Charles F. Kimmel
Division of Gaming Enforcement
1300 Atlantic Avenue, 4th Floor
Atlantic City, NJ 08401
Or electronically at: rulescomments@njdge.org
Follow the New Jersey Attorney General’s Office online at Twitter, Facebook, Instagram & YouTube. The social media links provided are for reference only. The New Jersey Attorney General’s Office does not endorse any non-governmental websites, companies or applications.
#### |