Item - 2023.PR2.3

The Toronto Parking Authority - Audit and Risk Management Committee recommends that:

1. The Board of Directors of the Toronto Parking Authority receive this report (April 18, 2023) from the President, Toronto Parking Authority, for information.

2. The Board of Directors of the Toronto Parking Authority direct that Confidential Attachment 1 and Confidential Appendix A to the report (April 18, 2023) from the President, Toronto Parking Authority, remain confidential in their entirety, as they involve the security of property belonging to the City or one of its agencies or corporations.

The Chief Information Officer, Toronto Parking Authority, gave an overview of the Cyber Security Update.

The purpose of this report is to present an update on the status of Toronto Parking Authority’s action plans which mitigate the cyber security risks identified from the cyber threat risk assessment conducted in 2021, as well as those identified in the submission to the City’s Chief Security Officer under the City’s Cyber Security Confirmation Program.

This report contains a confidential attachment describing the mitigation and remediation plans from the 2021 cyber security risk assessment and the risks identified in Toronto Parking Authority’s submission to the City’s Cyber Security Confirmation Program.

Gurvinder Gill, Chief Information Officer, will provide a presentation to the Toronto Parking Authority Board Audit and Risk Management Committee (refer to Confidential Attachment 1). These matters will require a closed-session discussion as it relates to the security of property belonging to the City or one of its agencies or corporations.