205 CMR, § 239.07
The Commission shall audit on an annual basis, and at other times the Commission, or the Bureau, determines necessary the accounts, programs, activities, and functions of an Operator or any aspect of Sports Wagering Operation and compliance with any provision of the Operator's system of internal controls. To conduct the audit, authorized officers and employees of the Commission shall be given access by the Operator to such accounts at reasonable times and may require the production of books, documents, vouchers and other records relating to any matter within the scope of the audit; provided however, that an Operator's tax returns will not be audited by the Commission. All audits shall be conducted in accordance with generally accepted auditing standards established by the American Institute of Certified Public Accountants and the standards established by the Public Company Accounting Oversight Board. In any audit report of the accounts, funds, programs, activities and functions of an Operator issued by the Commission containing adverse or critical audit results, the Commission may require a response, in writing, to the audit results. Such a response shall be forwarded to the Commission within 15 days of notification by the Commission. Where possible, efforts will be made not to audit areas that were the subject of, and satisfactorily addressed by, the annual audit required in accordance with 205 CMR 239.06.
205 CMR, § 239.07