The file's text, extracted by GovTribe without its formatting.
Attachment G - Glossary
STATE OF ILLINOIS
Illinois Gaming Board
ATTACHMENT G – GLOSSARY
Central Communications System Procurement BidBuy Reference Number B45047
STATE OF ILLINOISConfidential! Potential Procurement
GLOSSARY
Confidential! Potential Procurement
State of Illinois RFP 35 Attachment F – Glossary V.1.1 State of Illinois RFP V.24.3 2
This document is an attachment to the Request for Proposal (RFP) for the Illinois Gaming Board (IGB), for the procurement of a Central Communication System (CCS). It provides an indexed glossary of the key acronyms used in the RFP documents. The Offeror must read and understand the terms and acronyms provided in the glossary. They are for convenience of Offerors responding to Illinois Gaming Board Central Communications System Procurement.
| Term or Acronym |
| Acronym Meaning |
| Term Definition |
| 2FA |
| Two-Factor Authentication |
| An additional layer of security requiring two separate methods of identity verification before access is granted. |
| ATC |
| Authority to Connect |
| A certification similar to ATO, but for systems needing to connect to the IGB's network. |
| ATO |
| Authority to Operate |
| A certification indicating a system meets necessary security standards to operate within the IGB's infrastructure. |
| CCS |
| Central Communication System |
| A system used by the IGB for regulatory, monitoring, oversight, and enforcement actions related to VGTs. |
| DoIT |
| Department of Innovation and Technology |
| The Illinois state agency responsible for driving public sector technology innovation. |
| DRP |
| Disaster Recovery Plan |
| A documented process or set of procedures to recover and protect a business IT infrastructure in the event of a disaster. |
| FIPS 140 |
| Federal Information Processing Standard |
| Standards for the security of electronic systems used by non-military American government agencies and government contractors. |
| G2S |
| Game to System Protocol |
| A standard protocol used to enable communication between gaming devices and systems, including the ability for the IGB to activate or deactivate VGTs. |
| HIPAA |
| Health Insurance Portability and Accountability Act |
| U.S. legislation that provides data privacy and security provisions for safeguarding medical information. |
| IDS/IPS |
| Intrusion Detection System/Intrusion Prevention System |
| Security appliances that monitor network or system activities for malicious activities or policy violations. |
| IGB |
| Illinois Gaming Board |
| The state agency responsible for the regulatory oversight of video gaming in Illinois. |
| IGB SEP |
| Illinois Gaming Board Self-Exclusion Program |
| A program allowing individuals to voluntarily exclude themselves from all video gaming activities. |
IGB Tag Number
A unique identifier for each video gaming terminal or establishment licensed by the IGB.
| IITAA |
| Illinois Information Technology Accessibility Act |
| An act requiring that Illinois state information technologies be accessible to individuals with disabilities. |
| ISO |
| International Organization for Standardization |
| An international body that develops and publishes standards for a wide range of industries and services. |
Liquidated Damages
Compensation for failure to meet specified service levels or contractual obligations to the IGB.
| MTD |
| Maximum Tolerable Downtime |
| The longest period a business can operate without a specific system before significant risks or losses occur. |
NIST 800-53
A publication by the National Institute of Standards and Technology that provides a catalog of security and privacy controls for U.S. federal information systems.
| NTI |
| Net Terminal Income |
| The amount of money retained by the video gaming terminal after payouts to players. |
| PII |
| Personally Identifiable Information |
| Any data that could potentially identify a specific individual. |
| POA&M |
| Plan of Action and Milestones |
| A document detailing the corrective actions to be taken for addressing deficiencies noted during the assessment of the security controls and the timelines for their implementation. |
| RPO |
| Recovery Point Objective |
| The maximum targeted period during which data might be lost due to a major incident. |
| SaaS |
| Software as a Service |
| A software distribution model in which services are hosted by a vendor or service provider and made available to customers over a network, typically the internet. |
| SLA |
| Service Level Agreement |
| A contract between a service provider and the end-user that defines the level of service expected from the service provider. |
| SOC |
| System and Organization Controls |
| A series of standards designed to measure how well a given service organization conducts and regulates its information. SOC reports provide an overview of the control landscape of the service organization as related to security, availability, processing integrity, confidentiality, and privacy. |
| SSAE-18 |
| Statement on Standards for Attestation Engagements |
| Standards for attestation engagements that an auditor uses to assess the controls of a service organization and produce a SOC report. |
| TITO |
| Ticket In Ticket Out |
| A technology used in VGTs for issuing and redeeming tickets, which the CCS must support. |
| VAPT |
| Vulnerability Assessment and Penetration Testing |
| Services that identify and address vulnerabilities in a system and the effectiveness of their protection mechanisms. |
| VGA |
| Video Gaming Act |
| The legislative act in Illinois that provides the legal basis for the regulation of video gaming terminals. |
| VGT |
| Video Gaming Terminal |
| An electronic gaming machine that allows individuals to play games of chance, such as video poker or slots, and is subject to regulation by the IGB. |
| VPN |
| Virtual Private Network |
| A technology that creates a safe and encrypted connection over a less secure network, such as the internet. |
XML, CSV, PDF, MHTML, TIFF, Word
Common file formats that the CCS must be capable of generating or exporting reports into.
END OF ATTACHMENT G – GLOSSARY