NEWave’s Federal, State and Non-Gaming Regulatory Compliance Assessment was created to give gaming companies and casinos an independent review, evaluation and recommendations to optimize compliance processes in non-gaming sectors of their business.
The Federal, State and Non-Gaming Regulatory Compliance Assessment provides casinos with a thorough, complete review of all federal and state privacy and breach notification laws and security guidelines applicable to their business. Additionally, any and all risks assumed by current processes and conformity to those laws are assessed. The goal of the assessment is to ensure the casino is attaining and maintaining PCI Compliant Status, thereby avoiding costly fines.
The assessment ensures a casino is in complete compliance with Federal, State or Regulatory Compliance Requirements, such as HIPAA, SOX, State Breach Notification Laws and Payment Card Industry Standards.
NEWave Sr. VP of Professional Services Claudia Winkler said, “NEWave has a long track record of protecting casinos against fines for non-compliance on the casino operations side of the business. In fact, not one of NEWave’s clients has ever been fined for non-compliance. Now our new Federal, State and Non-Gaming Regulatory Compliance Assessment and Website Vulnerability Analysis takes our expertise and applies it to the non-gaming side of the casino business, bringing a total shield of protection for the entire operation.”
“Fines for non-compliance vary. PCI fines typically start at us$ 5,000 per month and escalate from there. Worse than the fines are the costs to your business, Heartland payment systems settled with Visa for us$ 60 million because of their 2008 data breach. SOX and HIPAA non-compliance can result in prison terms, loss of insurance and delisting by the Securities and Exchange Commission,” said Innovative IT Principal Mary Siero. “Of course, website vulnerability can lead to a wide range of costly damage that can quickly and easily be done by hackers.”
NEWave’s Website Vulnerability Assessment tests websites for vulnerabilities to penetration attacks by hackers. Such testing is required annually by the Payment Card Industry (PCI) Data Security Standards (DSS 2.0) for any business that accepts credit cards. The testing is an independent, objective measure of embedded security measures and potential vulnerabilities.
“It’s a risky world wide web, and our assessment is all about reducing that risk and giving operators peace of mind,” Winkler said.
“The simple and scary truth is, whether its damage done by hackers, lost data, or fines for non-compliance, the impact to the bottom line can be devastating. Our assessments mitigate risk and protect a casino’s technology investments and the bottom line,” Siero concluded.