Spotlight on GLI-GSF: Unveiling the Gaming Security Framework Proposed by GLI
Gaming on the Safe Side: GLI's Game-Changing Security Framework
Gaming Laboratories International (GLI), an industry titan with decades of experience, recently rolled out a groundbreaking gaming security framework at the Regulators Roundtable. This framework aims to set the standard for security best practices in the gaming industry.
Partnering with cybersecurity juggernaut Bulletproof, GLI took on the challenge of creating a gaming-specific security framework. According to Joe Bunevith, GLI's Vice-President of Government and Regulatory Affairs, "We needed a framework that catered explicitly to the gaming industry since there weren't any specific gaming-related cybersecurity measures at the time."
Even though there were already existing standards such as the National Institute of Standards and Technology (NIST), National Security Commission (NSC), and the Center for Internet Security (CIS), they lacked the gaming-centric focus that the industry demanded.
The new security framework comes in two initial modules, namely GLI-GSF-1 and GLI-GSF-2. GLI-GSF-1, also known as the Gaming Information Security (GIS) Controls Audit v 1.0, deals with the common controls necessary for auditing a gaming organization's Gaming Information Security Management System (GISMS) to ensure robust security management. GLI-GSF-2, or the Gaming Technical Security (GTS) Assessment v 1.0, focuses on the technical security aspects of gaming operations.
The launch of these modules marks the beginning of GLI's endeavor to develop individual modules that go beyond the common controls. Bunevith hinted that these upcoming modules would cater to various segments within the gaming industry, including vendors for physical retail locations, iGaming, Sportsbook, cloud computing, cashless systems, artificial intelligence, lottery, and more.
Crafting this comprehensive framework is no easy task. GLI works extensively with its subject matter experts, as well as regulatory bodies, suppliers, and operators, to ensure it addresses the evolving security challenges in the gaming environment. The process involves several phases, from initial feedback to a public comment phase, which helps in tailoring the modules to suit the gaming industry's needs effectively.
With increasing threats to gaming operations, a well-qualified Independent Security Firm (ISF) plays a crucial role in performing gaming security assessments alongside the testing and certification of a Gaming Production Environment (GPE) by an Independent Test Laboratory (ITL). The new GLI Gaming Security Framework is designed to offer tools that support suppliers, operators, and regulators to ensure fair play, compliant products, and operators within various jurisdictions, thereby fostering uniformity in the gaming industry.
You can find more details about the GLI Gaming Security Framework (GLI-GSF) on the GLI website. Given GLI's extensive expertise and global presence with accredited laboratories on six continents, the GLI-GSF modules likely cater to a diverse range of gaming sectors, including land-based casinos, lottery systems, iGaming platforms, and sports betting environments. These modules ensure that each sector has tailored controls to meet their unique security and compliance needs.
The new GLI Gaming Security Framework, designed in collaboration with cybersecurity experts like Bulletproof, aims to address the lack of gaming-specific cybersecurity measures by catering to various segments within the industry, such as finance, data-and-cloud-computing, technology, and even cybersecurity itself. As GLI continues to develop individual modules beyond common controls, these will likely encompass vendors for physical retail locations, iGaming, Sportsbook, artificial intelligence, lottery, and more, ensuring a secure and compliant environment in the evolving gaming industry.
With the increasing threats to gaming operations, this comprehensive framework will offer tools that support suppliers, operators, and regulators in ensuring fair play, compliant products, and operators within various jurisdictions, thereby fostering uniformity in the industry, and possibly expanding their scope to cater to a diverse range of gaming sectors, including finance and technology.
