N.Y. Comp. Codes R. & Regs. tit. 9, § 5313.1
(a) Consistent with Racing, Pari-Mutuel Wagering and Breeding Law section 1334, a gaming facility licensee shall submit to the commission a written description of its initial system of administrative and accounting procedures, including its internal control systems and audit protocols, at least 60 days prior to the projected date of issuance of an operation certificate unless otherwise approved in writing by the commission. A written system of internal controls shall include, without limitation:
(10) accounting controls that safeguard assets and revenues and ensure the reliability of financial records. Such accounting controls must be designed to provide reasonable assurance that:
(b) An internal control systems submission shall be accompanied by an attestation by the gaming facility’s chief executive officer or other delegated person with a direct reporting relationship to the chief executive officer attesting that the signatory believes, in good faith, that the submitted internal controls:
(f) If, during a 30-day review period set forth in subdivision (e) or (g) of this section, the commission preliminarily determines that a procedure or omission in a submission is likely to affect negatively the integrity of gaming operations or the control of revenue, the commission shall, by written notice to the gaming facility licensee:
(h) Each gaming facility licensee shall maintain a current version of such gaming facility licensee’s internal controls in electronic form available through secure computer access to the accounting and surveillance departments of such gaming facility licensee and to commission staff at such gaming facility. Each page of such internal controls document shall indicate the date on which the commission approved such page. Each gaming facility licensee also shall maintain, for a minimum of five years, a copy, either in paper or electronic form, of: