Item - 2025.TTA3.3

The Audit & Risk Management Committee:

1. Received this report and attachments for information.

2. Received the Confidential Attachment and authorize that the information contained in the Confidential Attachment remain confidential as it relates to the security of the property of the municipality or local board.

3. Directed staff to report back to the Audit & Risk Management Committee on their progress implementing the recommendations from the IT - Disaster Recovery audit report, at the December 1 meeting, and every six months thereafter.

4. Forwarded the IT – Disaster Recovery audit report to the TTC Board for information.

The Audit, Risk and Compliance Department (ARC) 2025 Audit Plan was presented and approved by the Audit and Risk Management Committee (ARMC) on March 24, 2025. The list of audit assurance projects identified for completion in 2025 is performed alongside various ongoing Action Plan Follow-up initiatives.

As of this update, final reports have been issued for two projects from the 2025 Audit Plan, and fieldwork is underway for two other projects in the plan.

In parallel, ARC has finalized and issued reports for the two remaining audit projects from the 2024 Audit Plan. With these completions, all items from the 2024 Audit Plan are now closed.

This report provides information with respect to ARC’s progress on 2025 Audit Plan items as well as details for the four Final Reports issued since ARC’s last update.