20:04:34:10Integrity and security assessment.

System integrity and security risk assessment must be performed annually on all online pari-mutuel wagering systems by an independent information technology security professional approved by the executive secretary. An online pari-mutuel wagering system operator shall engage an independent third-party auditor to conduct an annual audit of their information security and operational controls. The third-party auditor must possess at least one of the following credentials: (1) Certified Information Systems Auditor Certification; (2) Lead Auditor for ISO; or (3) Certified Information Security Manager Certification. The system integrity and security risk assessment must be conducted no later than ninety days after commencing operations and annually thereafter.

Source: 53 SDR 35, effective September 30, 2026.