<?xml version='1.0' encoding='utf-8'?>
<regulation prefix="Regulation" num=".11" citation="COMAR 36.07.04.11" title_num="36" subtitle_num="07" chapter_num="04" heading="Security Operating Procedures.">
  <paragraph num="A.">
    <text>A facility operator shall submit to the Commission for review and written approval its security operating procedures.</text>
  </paragraph>
  <paragraph num="B.">
    <text>A facility operator’s security operating procedures shall, at a minimum, include:</text>
    <paragraph num="(1)">
      <text>A security zone plan for the facility designed to ensure:</text>
      <paragraph num="(a)">
        <text>The physical safety of employees and invitees to the facility;</text>
      </paragraph>
      <paragraph num="(b)">
        <text>The safeguarding of assets;</text>
      </paragraph>
      <paragraph num="(c)">
        <text>Compliance with all applicable laws and regulations including Commission approved internal controls and operating procedures;</text>
      </paragraph>
      <paragraph num="(d)">
        <text>That intoxicated individuals are identified, prohibited from entering the facility and, if necessary, immediately removed from the facility; and</text>
      </paragraph>
      <paragraph num="(e)">
        <text>That an individual under the age of 18 years is identified, prohibited from playing instant bingo and, if necessary immediately removed from the facility; and</text>
      </paragraph>
    </paragraph>
    <paragraph num="(2)">
      <text>Procedures and controls addressing:</text>
      <paragraph num="(a)">
        <text>Facility access controls including:</text>
        <paragraph num="(i)">
          <text>An access badge or key system;</text>
        </paragraph>
        <paragraph num="(ii)">
          <text>If utilized, specifications pertaining to a computerized access control system; and</text>
        </paragraph>
        <paragraph num="(iii)">
          <text>Administrative responsibility over a manual or computerized access control system;</text>
        </paragraph>
      </paragraph>
      <paragraph num="(b)">
        <text>A temporary access credential;</text>
      </paragraph>
      <paragraph num="(c)">
        <text>Key controls;</text>
      </paragraph>
      <paragraph num="(d)">
        <text>Emergency alarm and fire command responsibilities;</text>
      </paragraph>
      <paragraph num="(e)">
        <text>Evacuation of the facility in the event of fire or other emergency;</text>
      </paragraph>
      <paragraph num="(f)">
        <text>The identification and immediate removal of an intoxicated individual, and, if applicable, an individual under the age of 18 years; and</text>
      </paragraph>
      <paragraph num="(g)">
        <text>The notice requirements of §(B)(4) of this regulation;</text>
      </paragraph>
    </paragraph>
    <paragraph num="(3)">
      <text>A security incident log:</text>
      <paragraph num="(a)">
        <text>Maintained in:</text>
        <paragraph num="(i)">
          <text>A book with bound numbered pages that cannot be readily removed; or</text>
        </paragraph>
        <paragraph num="(ii)">
          <text>An electronic format equipped with software that prevents modification of an entry after it has been initially entered into the system; and</text>
        </paragraph>
      </paragraph>
      <paragraph num="(b)">
        <text>Documenting:</text>
        <paragraph num="(i)">
          <text>The assignment number of the incident;</text>
        </paragraph>
        <paragraph num="(ii)">
          <text>The date and time of the incident;</text>
        </paragraph>
        <paragraph num="(iii)">
          <text>The name of the person covering the incident;</text>
        </paragraph>
        <paragraph num="(iv)">
          <text>The nature of the incident; and</text>
        </paragraph>
        <paragraph num="(v)">
          <text>The resolution of the incident; and</text>
        </paragraph>
      </paragraph>
    </paragraph>
    <paragraph num="(4)">
      <text>A requirement that a facility operator notify the Commission upon detection of:</text>
      <paragraph num="(a)">
        <text>An individual engaged in, attempting to engage in, or suspected of cheating, theft, embezzlement, or other illegal activities; and</text>
      </paragraph>
      <paragraph num="(b)">
        <text>An individual who is:</text>
        <paragraph num="(i)">
          <text>Under the age of 18 years and has played instant bingo; or</text>
        </paragraph>
        <paragraph num="(ii)">
          <text>Intoxicated.</text>
        </paragraph>
      </paragraph>
    </paragraph>
  </paragraph>
</regulation>