Security Study Services

The vendor required to provide security study of all aspects of lottery security including:
•    Lottery personnel security
•    Sales agent security
•    Lottery operator and vendor security
•    Security against ticket counterfeiting and alteration and other means of fraudulent winning
•    Security of lottery drawings
•    Lottery computer, data communications, database; and systems security
•    Lottery premises and warehouse security
•    Security of distribution of tickets
•    Security of validation and payment procedures
•    Security involving unclaimed prizes
•    Security aspects of each lottery game
•    Security against the deliberate placement of winning tickets in lottery games that involve preprinted winning tickets by persons involved in the production, storage, transportation, or distribution of tickets; and
•    Other security aspects of lottery operations.    
- Lottery program personnel security
•    Assess the risks and evaluate the control procedures related to personnel security, including organization and staffing, standards of conduct, pre-employment procedures, background investigations, job descriptions, training, termination procedures, threats to employees, and relevant agency policies and procedures.
- Sales agent security
•    Assess the risks and evaluate the control procedures related to promoting sales agent (retailer) integrity and reliability, including standards of conduct, screening and licensing procedures, training, and termination procedures.
- Lottery operator and vendor security
•    Assess the risks and evaluate the control procedures related to the lottery operator and other lottery vendors that directly impact lottery security, including personnel, physical security, and other aspects of lottery security.
- Security against ticket counterfeiting and alteration and other means of fraudulent winning
•    The means to prevent and detect counterfeiting and alteration of tickets
•    The means to prevent and detect the alteration of claim forms
•    The means to prevent and detect the deliberate entry of false claim information
•    Ticket testing
•    Ticket reconstructions
•    The issuance of winning tickets for enforcement investigations
•    The issuance of prize payments, including any prize checks returned to the agency.
•    Draw game tickets returned by retailers to lottery operations for reimbursements; and
•    Related control procedures of lottery vendors.
- Lottery computer, data communications, database, and systems security
•    Facility and resource access controls
•    Data and asset management, including offsite storage
•    Scratch ticket and draw game ticket electronic validations
•    Access to encryption and decryption routines
•    Scratch ticket game data transfer, load, purge, and archive processes (lottery operator), and game closing reconciliations
•    Software and hardware administration, configuration management and change control
•    Business continuity and disaster recovery planning and readiness
•    Desktop, laptop, and mobile device environment (configuration, documentation, management practices, and security controls); and
•    Voice, telecommunication and data networks, including but not limited to financial and game-related transmissions (configuration, documentation, management practices, and security controls).
- Lottery premises and warehouse security
•    Assess the risks and evaluate the control procedures for physical security of offices, claim centers, data centers, back-up data centers, drawing studio, warehouses, off-site storage facilities, and business resumption sites.
- Security of distribution of tickets
•    Assess the risks and evaluate the control procedures for lottery tickets in transit between, and while located at, ticket manufacturer premises, agency premises, lottery operator premises, warehouses, retailer premises, and destruction facilities.
•    The Successful Proposer also shall assess the accuracy, integrity, security, and reliability of ticket inventory records, including lottery tickets provided for retailer incentive programs, and tickets, coupons and vouchers provided for promotional events. 
•    The Successful Proposer’s assessment shall include controls to prevent theft, loss, or unauthorized distribution or destruction of unsold tickets.

- Contract Period/Term: 1 year
- Pre-Proposal Conference Date: December 2, 2025
- Questions/Inquires Deadline: December 12, 2025