At a minimum, an online monitoring system shall provide for the following security and auditing ability requirements:

1. (1)

   1. (A) An interrogation program that enables online comprehensive searching of the significant event log for the present and for the previous fourteen (14) days through archived data or restoration from backup where maintaining such data on a live database is deemed inappropriate.

   2. (B) The interrogation program shall have the ability to perform a search based at least on the following:

      1. (i) Date and time range;
      2. (ii) Unique interface element/EGS identification number; and
      3. (iii) Significant event number/identifier;

2. (2)

   1. (A) An online monitoring system must have a master EGS file which is a database of every EGS in operation, including at minimum the following information for each entry:

      1. (i) Unique interface elements/location identification number;
      2. (ii) EGS identification number as assigned by the franchise holder;
      3. (iii) Denomination of the EGS (please note that the denomination may reflect an alternative value, in the case of a multidenomination game);
      4. (iv) Theoretical hold of the EGS; and
      5. (v) Control program or programs identification number within the EGS.
   2. (B) If the online monitoring system retrieves any of these parameters directly from the EGS, sufficient controls must be in place to ensure accuracy of the information; and

3. (3)

   1. (A) Significant events, 23 CAR § 355-1357 are generated by an EGS and sent via the interface element to the online monitoring system utilizing an approved communication protocol.

   2. (B) Each event must be stored in a database or databases, which includes the following:

      1. (i) Date and time which the event occurred;
      2. (ii) Identity of the EGS that generated the event;
      3. (iii) A unique number/code that defines the event; or
      4. (iv) A brief text that describes the event in the local language.