Audit Policy

1. Purpose

This Policy describes how ScorePlay Inc. conducts security assessments to ensure the reliability and security of its systems, processes, and controls. Regular reviews help ScorePlay identify areas for improvement and demonstrate that it meets internal goals as well as customer, regulatory, and certification expectations.

2. Scope

This Policy applies to all key systems, security controls, processes, and procedures at ScorePlay Inc., covering data protection, system access, infrastructure, and any critical aspect related to the security and stability of the ScorePlay platform.

3. Audit Approach

ScorePlay's audits and assessments are planned, practical, and designed to ensure that ScorePlay's systems are secure and performing as expected.

• Frequency: internal security reviews are conducted at least annually. External audits may occur upon major milestones, such as accreditation renewals, significant platform changes, or at the request of key stakeholders.
• Method: ScorePlay uses a mix of documentation checks, technical reviews, and external security testing (such as penetration tests) to assess its systems.
• Focus Areas: access controls, data encryption, system resilience, and process security.

4. Audit Process

4.1 Planning

Audits and reviews are scheduled based on risk and priorities. External audits may be planned around accreditation renewals, major updates, or customer requirements. Plans focus on the systems, processes, or areas that affect platform security and reliability.

4.2 Execution

Assessments include:

• Reviewing documentation, policies, and processes.
• Evaluating technical configurations, security controls, and access systems.
• Running penetration tests (with external partners) to identify vulnerabilities.