1. (a) Remote access is defined as any access to the system outside of the trusted network.
2. (b) Remote access, where permitted, shall authenticate all computer systems based on the authorized settings of the CSS or firewall application that establishes a connection with the CSS.
3. (c) The security of remote access will be reviewed on a case-by-case basis, in conjunction with the current technology and approval from the Arkansas Racing Commission.

4. (d) The following are additional requirements:

   1. (1) No unauthorized remote user administration functionality (adding users, changing permissions, etc.);
   2. (2) No unauthorized access to any database other than information retrieval using existing functions; and
   3. (3) No unauthorized access to the operating system.

Codification Notes: “CSS” means client-server system.