Key controls are an integral part of the controls over the drop and count process. Key custody and access should be structured in a manner that precludes any one individual or department from having access to stored full drop containers, which would include table drop boxes and slot currency acceptor drop containers. Keys are issued through the use of a list indicating which individuals are authorized to access specific keys, and a key control log that documents the following:
- Number and description of the key issued
- Time and date the key was issued
- Name and signature of the individual issuing the key
- Name and signature of the individual receiving the key
- Reason the key was issued
- Time and date the key was returned
- Name and signature of the individual accepting the key when it is returned
- Name and signature of the individual returning the key
The following summarizes the recommended custody and access controls over sensitive keys.
Table Games
- Drop box release key. This key is used to remove the drop box from the table. Generally, it is controlled by security, and access to the key is provided only to security officers accompanied by pit personnel during the drop and to count team members during the count, so it may also be used to reset the drop boxes. Security personnel are precluded from having access to the drop box contents key.
- Drop box storage trolley key. The storage trolleys used to transport and store the table drop boxes are secured through two padlocks, which are separately keyed. One padlock key is controlled by security, and the second is controlled by a department independent of security. The second key is usually controlled by the cage with access provided to pit personnel or to the soft count team, depending on the assignment of responsibilities for the other sensitive keys. This key may also be controlled by pit personnel under certain circumstances.
- Drop box contents key. Only count team members during the performance of the count are permitted to access the contents key. This key must be maintained in a manner that provides for the proper separation of departmental responsibilities and participation to access the stored full drop boxes. The contents key is commonly controlled by the cage, and the issuance at some casinos requires the participation of security officers. The key will be issued only when the entire soft count team is assembled and ready to enter the count room.
- Count room door key. The count room door contains two locks which are separately keyed. One key is controlled by security, and the second key is controlled by the cage. The second key is issued only to the count team.
Slots
- Slot machine drop keys. The keys used to access the cabinets containing the slot drop buckets (hard drop) must be controlled by a department independent of the slot department. The cabinet keys are usually controlled by the cage and are issued to the drop team, who are required to be accompanied by a security officer. Security will observe the key until it is returned.
- Currency acceptor release (retriever) keys. The keys are controlled by a department independent of the slot department. They are controlled in the same manner described for the slot machine drop keys.
- Currency acceptor storage rack keys. The storage trolleys used to transport and store the currency acceptor drop containers are secured through two padlocks, which are separately keyed. The procedures are the same as those described for the drop box storage trolley keys.
- Currency acceptor contents key. Only count team members during
the performance of the count are permitted access to the contents key. The contents key must be maintained in a manner that provides for the proper separation of departmental responsibilities and participation to access the stored full drop boxes. The key is controlled in the same manner as the drop box contents key. - Count room door keys. The count room door contains two locks, which are separately keyed. One key is controlled by security, and the second key is controlled by the cage. The second key is issued only to the count team.
Duplicate keys require at least the same degree of control as the controls specified in the preceding lists. Duplicate keys are commonly maintained in a key box that can be accessed only through the participation of three different departments.
Sensitive gaming keys are typically ordered from an outside vendor specializing in high-security gaming keys and locks. Keys are normally ordered, received, and physically controlled until they are placed in service by management personnel within the finance function (e.g., the casino controller). In addition, computerized key control systems providing for the use of password or hand scan technology are gradually becoming more prevalent within the gaming industry as a method of providing further security over the issuance and accountability of sensitive gaming keys.