26.08.2013 Views

MAGAZINE OF THE EUROPEAN LOTTERIES, 2011, SEPTEMBER ...

MAGAZINE OF THE EUROPEAN LOTTERIES, 2011, SEPTEMBER ...

MAGAZINE OF THE EUROPEAN LOTTERIES, 2011, SEPTEMBER ...

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

SECURITY<br />

RISK MANAGEMENT<br />

A VERY HOT TOPIC FOR <strong>THE</strong> EL SECURITY AND<br />

RISK MANAGEMENT WORKING GROUP<br />

The EL Security and Risk Management Working<br />

Group is the most recent working group of the European<br />

Lotteries. Created in November 2010 in Vienna,<br />

it is composed of 14 experts in security and risk management<br />

working in 13 European Lotteries:<br />

• Thierry Pujol, Director of Security and Risk Management,<br />

FDJ (France)<br />

• Carlos Bachmaier, Corporate Risk Manager, Loterías<br />

y Apuestas del Estado (Spain)<br />

• Johannes Puchinger, Head of Department Information<br />

Security, Österreichische Lotterien (Austria)<br />

• Martin Sutton, Head of Propriety, Camelot UK Lotteries<br />

Ltd. (United Kingdom)<br />

• Gunnar Ewald, Head of Internal Audit, Lotto Hamburg<br />

GmbH (Germany)<br />

• Antonio Gorrasi, IT Security Manager, Lottomatica<br />

SpA (Italy)<br />

• Claude Mathieu, Head of Internal Audit, Loterie<br />

Nationale (Belgium)<br />

• Magna Monte, Security and Quality Director, Santa<br />

Casa da Misericórdia de Lisboa (Portugal)<br />

• Heini Roosimägi, Security and Quality Manager, AS<br />

Eesti Loto (Estonia)<br />

• Matilda Bjerndell, Risk & Business Continuity Manager,<br />

AB Svenska Spel (Sweden)<br />

• Jaroslav Endrych, Security Manager, Sazka a.s.<br />

(Czech Republic)<br />

• Zvi Amitai, Vice President CIO, Mifal Hapais Israel<br />

National Lottery (Israel)<br />

• Konrad Supper, Senior Vice President, Head of Internal<br />

Audit and Responsible Gaming, Westdeutsche<br />

Lotterie GmbH & Co. OHG, (Germany)<br />

• Jean-Jacques Riera, Head of Department Information<br />

Security, FDJ (France).<br />

One of the responsibilities of the Security and Risk<br />

Management Working Group is to advise the Executive<br />

Committee of the European Lotteries and its<br />

members on security and risk management issues.<br />

In the interests of efficiency and to avoid duplica-<br />

EL ACTIVITIES<br />

tion this working group works closely with the WLA<br />

Security and Risk Management Committee, particularly<br />

in relation to the WLA Security Control Standard<br />

(WLA SCS 2006 based on ISO 27001) and the WLA<br />

certification process.<br />

Every Lottery organisation, in order to succeed in<br />

their business operational activities, has to ensure<br />

stakeholders, and in particular players of their games<br />

have the utmost confidence and trust in their operational<br />

activities. The integrity of all games in an offered<br />

portfolio, including conforming to the local legal<br />

requirements and regulations, (e.g. on responsible<br />

gaming and ethics) must be guaranteed.<br />

Lottery organisations face many types of risks. The<br />

following is not a definitive list of the “security and<br />

integrity” risks that could be encountered but illustrates<br />

the variety and complexity of those commonly<br />

experienced.<br />

• Fraud (e.g. a retailer deliberately underpaying a<br />

prize on a winning ticket to a player or stealing<br />

a winning ticket from a player by deception to<br />

conspire and collude with a Lottery employee to<br />

defraud the Lottery).<br />

• Money laundering (e.g. A criminal or terrorist organisation<br />

may attempt to manipulate the monetary<br />

system of a Lottery organisation in order to<br />

disguise the proceeds of its illegal activities).<br />

• Responsible gaming (e.g. A players’ compulsive<br />

addiction to lottery games causes reputational<br />

damage to the Lottery and prompts intrusive and<br />

potentially punitive action by regulators or other<br />

stakeholders).<br />

• Operational risks related to business processes<br />

(e.g. Conducting lottery “draws” with security and<br />

integrity, maintaining very high availability of all<br />

channels both traditional and “online” to enable<br />

the purchase of tickets).<br />

• Prize payment (e.g. assuring prize claimants are<br />

genuine winners within the rules of the game).<br />

During its two years of existence, the Working Group<br />

24 NEWS 37 <strong>SEPTEMBER</strong> <strong>2011</strong>

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!