Check List

Security audit system

Purpose

Check if there is an internal security audit system, where audit is conducted according to the guide, and that proper measures addressing the recommendations of previous internal and external audits are in place.

Audit resources

Procedure

Verification

Document

Previous security audit report, Internal audit report, Major changes report

Product

Detailed study list and method

-    Check if the security manager of Lottery organization has the right to audit all lottery-production facilities (physical facilities, computer system, lottery destruction system etc), and the right to approve or revoke approval over production at the same facility.

-    Check if the lottery production system maintains an audit record on system access and access to crucial data.

-    Check if own security audit is carried out during game generation.

-    Check if own security audit is carried out before the delivery of lottery.

-    Check if own security audit and external audit are carried out in the event there is a change affecting the printing line, work or quality.