Item - 2023.GG7.16

The General Government Committee:

1. Received the report (October 16, 2023) from the Chief Procurement Officer, and the Chief Information Security Officer, for information.

Per City Council's directive 2021.AU8.8 (Item 13), the Chief Procurement Officer, the Chief Information Security Officer, in consultation with the City Clerk and the City Solicitor, updated the City’s procurement process for technology related initiatives. This has been achieved by deploying a set of privacy and cyber security requirements in the procurement process that ensure suppliers deliver products and services consistent with industry best practices.

By embedding privacy and cyber requirements into the early stages of procurement, the City has reinforced its commitment to the “security by design” strategy. This strategy emphasizes the integration of modern cyber security and risk management practices into the procurement, design, and development of Information Technology systems.

These developments to the City's procurement process have strengthened cross-divisional collaboration, communication, and helped shape a unified vision that modernizes the City's cyber security posture and safeguards the City’s sensitive information and systems.