Casino security baseline: what should be encrypted, signed, and logged?

If you were setting a minimum security standard, what systems must have encryption, code signing, and auditable logs?