Check List

Classification and identification of the instant lottery-related important information asset types must be carried out

Purpose

To c if crucial information assets relevant to instant lottery (ticketing information, game data) are identified and properly protected

Audit resources

Procedure

Verification

Document

Information assets classification system and standard, information assets management register

Product

Detailed study list and method

-    Clear classification system for instant lottery-related information asset types (ticketing information, game outputs of data printing system, manual, policy and guideline, film, blueprint, plate, paper document assets, media assets, PC, server)

-    The standard to classify the degree of importance of ticketing information (production order, game data, production data, prize structure information, etc.)-oriented information assets

-    The existence of the information assets management register relevant to ticketing information

Check List

Classification and management of lottery-related assets must be properly in place

Purpose

To check if lottery-related information assets (production order, press plan, press order, game data, audit report, prize verification structure, etc.) are classified confidential and legally managed by authorized personnel.

Audit resources

Procedure

Verification

Document

Confidential management register, Document binding and confidential labeling

Product

Detailed study list and method

-    Check if lottery-related documents and electronic data are classified as confidential

-    Lottery-related documents and electronic data must not be externally exposed as confidential but check if they have secret mark to allow authorized personnel to identify them

-    Check if all lottery-related information except the log is stored in a securely locked protection apparatus after use