Ariz. Admin. Code § R19-4-144 - Keys

A. Access to, and return of, keys or equivalents utilized in the operation of event wagering shall be documented with the date, time, and signature or other unique identifier of the agent accessing or returning the key or keys.

B. Documentation of all keys, including duplicates, shall be maintained, including:

1. Unique identifier for each individual key;

2. Key storage location;

3. Number of keys made, duplicated, and destroyed; and

4. Authorization and access.

C. The responsible party shall identify those keys (ex. kiosk, restricted computer storage media) which are considered sensitive and require additional access control.

D. The kiosk release and contents shall require a separate and unique key lock or alternative secure access method.

E. Annually, an inventory of all sensitive keys shall be performed by internal audit and reconciled to records of keys made, issued, and destroyed.

Notes

Ariz. Admin. Code § R19-4-144

Adopted by final exempt rulemaking at 27 A.A.R. 1168, effective 7/26/2021.