B. The gaming operator licensee shall maintain a personnel access list that includes, at a minimum, the employee’s name, identification number, and a list of functions the employee is authorized to perform and the dates such authority was given. The licensee’s internal controls shall ensure that only authorized personnel have physical access to computer hardware and software, that reports and other computer-generated output are available and distributed only to authorized personnel.

[N, 12/31/98; 15.1.9.13 NMAC - Rn, 15 NMAC 1.9.13, 1/31/02; A, 2/28/05]