Gaming Laboratories International (GLI) has released the first and only gaming information security standard for the industry in response to what it describes as strong demand for a comprehensive framework for gaming security.
Having previously been released for an initial comment period to familiarize stakeholders with the CIS Controls, the “GLI Gaming Security Framework Module 1 (GLI-GSF-1): Gaming Information Security (GIS) Common Controls Audit” draft has now been re-released for industry-wide comment, with GLI calling on industry stakeholders to further review and comment, including wagering, gaming and lottery regulators, suppliers, test laboratories, security firms, operators and industry trade associations.
This second comment period introduces additional common controls specific to the gaming industry, along with Gaming Implementation Group indications, GLI said.
“GLI developed the GSF to address the industry’s strong demand for a comprehensive framework for gaming security,” said GLI’s Vice President of Government and Regulatory Affairs, Joseph Bunevith.
“To create the GLI-GSF, we drew on 35 years of knowledge and insights into the gaming industry and conducted a thorough review of global best practices for information security. We worked closely with Bulletproof Solutions and gathered feedback from industry stakeholders to establish this framework for gaming security.”
This latest comment period is now underway and concludes on 31 August 2024. Written comments are encouraged and should be recorded in the comment template linked below and submitted to the “GLI Compliance” mailbox at Compliance@gaminglabs.com, the company said.
GLI-GSF-1 v1.0 Public Comment Draft
GLI-GSF-1 v1.0 Comment Template
GLI said it would process comments received from industry stakeholders and collaborate as needed to address their interpretation, evaluation and resolution in the context of the revision to this module.
According to GLI, this module of GLI-GSF sets forth the common controls necessary for auditing a gaming organization. These common controls apply to all forms of gaming, effectively replacing the technical security controls previously established in GLI-27 for land-based gaming operations and, in the near future, will replace the technical security controls previously established in Appendix B of GLI-19 and GLI-33 for interactive gaming and event wagering as other modules are released.
This module of the GLI-GSF integrates the CIS Controls, developed by the Center for Internet Security (CIS), as foundational components to ensure robust security measures across all aspects of gaming operations. The CIS Controls represent a globally recognized set of cybersecurity best practices designed to help organizations bolster their security posture and defend against a wide range of cyber threats. The controls serve as foundational pillars for building a resilient and secure gaming environment, safeguarding against evolving cyber threats, and ensuring the integrity of gaming organizations. The CIS Controls are available for free download at www.cisecurity.org.
Each module in the GLI-GSF is a culmination of industry best practices and is continually updated based on industry feedback, GLI explained. It said the GLI-GSF was created using a collaborative approach that involved thousands of gaming industry stakeholders, with the framework intended to assist regulators by creating baseline security guidelines that they can adopt and/or utilize as they see fit.
In addition to assisting regulators, this framework is of tremendous value to gaming organizations seeking comprehensive guidance and recommendations for enhancing security across all aspects of gaming operations, saving both time and expense, GLI added.
The GLI-GSF and the entire GLI Standard Series are available for free download on the GLI Standards tab at gaminglabs.com.