Item - 2021.AU9.12

Tracking Status

  • City Council adopted this item on July 14, 2021 without amendments and without debate.
  • This item was considered by the Audit Committee on July 7, 2021 and adopted without amendment. It will be considered by City Council on July 14, 2021.

AU9.12 - Toronto Police Service Information Technology (IT) Infrastructure: Cyber Security Assessment Phase 1

Decision Type:
ACTION
Status:
Adopted on Consent
Wards:
All

City Council Decision

City Council on July 14, 15 and 16, 2021, adopted the following:

 

1.  City Council receive the report (June 23, 2021) from the Auditor General for information.

Background Information (Committee)

(June 23, 2021) Report from the Auditor General on Toronto Police Service Information Technology (IT) Infrastructure: Cyber Security Assessment Phase 1
https://www.toronto.ca/legdocs/mmis/2021/au/bgrd/backgroundfile-168702.pdf

Background Information (City Council)

(July 12, 2021) Letter from the Board Administrator, Toronto Police Services Board (AU9.12a)
https://www.toronto.ca/legdocs/mmis/2021/cc/bgrd/backgroundfile-169287.pdf

AU9.12 - Toronto Police Service Information Technology (IT) Infrastructure: Cyber Security Assessment Phase 1

Decision Type:
ACTION
Status:
Adopted
Wards:
All

Committee Recommendations

The Audit Committee recommends that:

 

1.  City Council receive the report (June 23, 2021) from the Auditor General for information.

Origin

(June 23, 2021) Report from the Auditor General

Summary

In a December 12, 2019 letter to the Auditor General, the Toronto Police Services Board requested the Auditor General to conduct a cybersecurity audit. Given the size and importance of Toronto Police Service (TPS) and the sensitivity of the information it retains, the Auditor General prioritized the allocation of resources on the request and agreed to perform a vulnerability assessment and penetration testing of the TPS IT network, systems and applications.

 

We have completed Phase 1 of this review. The purpose of Phase 1 was to assess TPS's ability, as a critical City agency, to effectively manage external and internal cybersecurity threats. A Phase 2 review will be conducted in the future to review systems that were excluded from this current review.

 

The public report with a confidential attachment is tabled at the June 24, 2021 TPS Board meeting. The agenda for the meeting and the report are available at:

 

https://www.tpsb.ca/meetings/meetings-current-and-past

 

https://tpsb.ca/component/jdownloads/send/32-agendas/694-2021-06-24-agenda

 

The Auditor General has made a recommendation to the Board to forward the report to Council through the Audit Committee.

 

A decision document will be forwarded to the Audit Committee by the TPS Board.

Background Information

(June 23, 2021) Report from the Auditor General on Toronto Police Service Information Technology (IT) Infrastructure: Cyber Security Assessment Phase 1
https://www.toronto.ca/legdocs/mmis/2021/au/bgrd/backgroundfile-168702.pdf

Motions

Motion to Adopt Item moved by Councillor Frances Nunziata (Carried)
Source: Toronto City Clerk at www.toronto.ca/council