N.Y. Comp. Codes R. & Regs. tit. 9, § 5313.11 – Key control.

(a) Any key that is considered sensitive and is required to be controlled and maintained and any corresponding locking device shall be approved by the commission. Such keys shall be legally duplicated only by the manufacturer, or the manufacturer’s designee, and shall be capable of unlocking the locking device on no more than one type of secure box, compartment or location used or maintained within the gaming facility. Nothing in this subdivision shall preclude the commission from exempting a type of secure box, compartment or location from the requirements of this subdivision upon a determination that the security of such box, compartment or location would not otherwise be compromised.
(b) As approved by the commission, sensitive keys shall include, without limitation, the following:
1. (1) table drop box contents keys;
2. (2) table drop box release keys;
3. (3) table drop box trolley keys;
4. (4) slot machine keys;
5. (5) count room entrance keys;
6. (6) locations housing a computer that controls a progressive payout wager system for table games offering a progressive payout wager;
7. (7) storage cabinets or trolleys for unattached table drop boxes;
8. (8) float keys; and
9. (9) pit podium keys.
(c) A gaming facility licensee shall establish key control procedures for any sensitive key as approved by the commission. Such procedures shall provide for, at a minimum, the following:
1. (1) the maintenance of perpetual inventory records and the physical inventory of all sensitive keys by an independent department;
2. (2) the requisitioning of keys and locking devices from vendors; and
3. (3) the security and restrictions that control access to keys, whether manually or through an electronic system, and records and reports generated or prepared.