Who this service is for
For applicable remote gambling and specified lottery operators needing security audit preparation or a discussion about a separately scoped independent audit.
Gambling Commission security audit support
Prepare remote gambling operations for a focused security audit with clear boundaries, operational evidence and tracked remediation.
Common challenges companies face
- Critical gambling systems and outsourced components are not consistently included in the audit boundary.
- Supplier certifications are treated as evidence for controls they do not actually cover.
- Control descriptions are available, but samples, walkthrough records and operating evidence are missing.
- Previous findings recur because remediation ownership and verification are weak.
Technical scope
- Confirm licence-related audit expectations and scope the critical systems, operations and dependencies.
- Review the relevant RTS security requirements based on selected ISO/IEC 27001:2022 Annex A controls.
- Examine access management, change controls, infrastructure protection, monitoring and recovery evidence.
- Organise evidence and management responses so findings can be traced to tested controls.
How Poleis supports you
- Agree the engagement as readiness consultancy or a separately scoped independent audit.
- Review boundaries and evidence, perform agreed walkthroughs and document gaps.
- Prepare remediation actions and reporting inputs, including management responses and unresolved issues.
What you receive
- Audit readiness assessment and scoped evidence request list.
- Gap and remediation register with ownership and supporting records.
- For a separately agreed independent audit: findings and reporting aligned to applicable Commission advice.
Engagement scope
Independent audit delivery is subject to auditor suitability and independence. Prior consultancy can affect independence and is assessed before accepting an audit engagement. ISO certification is not presented as a universal licence requirement.
Discuss Your Requirements
Tell us about your organisation, the assessment or improvement you need, and your timescale. We will agree a proportionate scope and practical next steps.