Your rating 0 from 0 votes

WLA Security Control Standard - security controls in the lottery industry

The WLA Security Control Standard (WLA SCS) is an information security management framework developed by the World Lottery Association (WLA), a global association of lottery operators. It was created specifically for the lottery industry to help lottery operators, technology providers and other stakeholders improve the security of their information systems and data. Security plays a critical role in maintaining the confidence of lottery participants. It is therefore particularly important that an organisation with a lottery and sports betting business develops and maintains a complete and documented security environment.

The WLA SCS is the only internationally recognised standard for the lottery sector. It helps WLA members gain a level of security control in accordance with generally accepted good practices. The WLA SCS provides a comprehensive list of controls and measures to protect information and minimize security risks in the lottery industry. This framework covers a wide range of information security aspects including risk management, access management, information protection, encryption, physical security and more.

An integral part of WLA SCS are annexes that focus on specific areas of information security, including specific controls for lottery game operators, lottery technology providers, and for multijurisdictional games:

Annex A (G Controls): applicable to all organizations in the lottery industry, regardless of their status as operators or technology providers. Included here are the general information security controls that are necessary for all industry participants to ensure a minimum level of protection for information and information systems.
Annex B (L Controls): applicable to lottery operators. These include additional measures and procedures to manage risks. These are controls that relate to the management of the secrecy of lottery games, the handling of bets and winnings, the protection of lottery terminals and other specific aspects of the operator's activities.
Annex C (S Controls): applicable to lottery technology and software solution providers. These include specific measures and requirements for the protection of information systems and services provided by technology providers to lottery operators. This includes the security of lottery platforms, betting systems, risk management and other technical aspects.
Annex D (M Controls): applicable to multijurisdictional lottery games. Specific measures and controls are included here to manage the risks associated with the interweaving of different legal and technical frameworks.

The WLA SCS sets a baseline for information security management system, an integral part of which is the ISO/IEC 27001 standard for information security management, supplemented by lottery-specific security controls representing current good practices.

It should be noted that both information security frameworks focus on protecting the confidentiality, integrity and availability of information. But while ISO/IEC 27001 has a broad scope and includes general principles and methods for managing information security that apply to all types of organizations, WLA SCS 2020, on the other hand, is focused on the lottery industry and includes the management of confidentiality and accountability to players. Both standards require the identification of information security assets and risks, the development of policies and procedures to manage risks, and the establishment of measures to reduce risks to acceptable levels.

WLA SCS certification is carried out by accredited certification bodies. Depending on the scope and controls implemented, certification may be granted as follows:

Level 1: includes basic controls that apply to all organizations in the lottery industry. Certification at this level indicates that the organisation meets minimum information security requirements.
Level 2: includes more stringent controls that are specific to lottery operators. Certification at this level indicates a higher level of information security assurance and compliance with complex regulatory requirements. From October 2020, WLA members who complete a WLA SCS assessment and hold a valid and current ISO/IEC 27001 certificate will be awarded WLA SCS Level 2 certification.

Implementing WLA SCS 2020 helps the lottery industry address data security and information systems to protect player privacy, prevent fraud and unauthorized access, and maintain customer and partner confidence. The Consejo team will help you develop and implement this valuable tool to improve information security and regulatory compliance in the lottery industry.

Implementation of management standards

CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.

The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.

Partners