01
Application security
Games and supporting software are developed internally and reviewed at the source. Third-party laboratories also perform black-box testing against those systems. Findings from both are recorded and tracked until they are closed.
02
Access
Access to production, administration tools, and systems with player data is granted, reviewed, and removed when it is no longer required.
03
Monitoring
Production systems are monitored through logs, alerts, and telemetry. Confirmed issues are assigned to the people who can resolve them.
04
Compliance
Gaming systems are subject to privacy, payment, platform, and statutory requirements. Those requirements are checked against the running systems, not only against documentation. Gaps are tracked until they are resolved.