Integration and Change Management Requirements

The Sports Wagering Operator shall be responsible for the Sports Wagering realized through the Sport Wagering Operator's Sports Wagering Vendors. (a) The servers and other devices of Sports Wagering Vendors shall be considered part of the Sports Wagering Operator's Sports Wagering Equipment and shall comply with M.G.L. c. 23N and 205 CMR 243.00. (b) The Sports Wagering Operator shall guarantee that any integration with the servers and other devices of Sports Wagering Vendors complies with M.G.L. c. 23N and 205 CMR 243.00. (c) An independent testing laboratory shall conduct integration testing and certification for each server and other device with the Sports Wagering Operator's Sports Wagering Equipment prior to its deployment and as required by the Commission. (2) The Sports Wagering Operator shall submit its proposed change management procedures to the Commission for approval in the manner described in 205 CMR 238.00. Such change management processes shall detail evaluation procedures for identifying the criticality of updates and determining the updates that shall be submitted to a certified independent testing laboratory for review and certification. The submission shall, at a minimum, reflect the following: (a) These change management submission shall be: 1. Developed in accordance with the Gaming Laboratories International, LLC Guide GLI-CMP: Change Management Program Guide, version 1.0, released May 6, 2020; 2. Approved by the Commission prior to its deployment; and 3. Audited at least annually by an independent testing laboratory. (b) The Sports Wagering Operator shall issue quarterly change reports to an independent testing laboratory for review. The independent testing laboratory shall review the submission to ensure risk is being assessed according to the approved change management processes, and documentation for all changes are complete. (c) Sports Wagering Equipment operating under the approved change management processes shall be certified to the specifications set forth in M.G.L. c. 23N and 205 CMR 243.00 and accompanied by formal certification documentation from the independent testing laboratory on at least an annual basis. The Sports Wagering Operator or Sports Wagering Vendor may request an extension beyond the annual approval if it can demonstrate a hardship that prevents it from meeting the requirements for annual approval. The granting of a hardship waiver shall be in the sole discretion of the Commission.