Item - 2026.EP22.8

The Board of Governors of Exhibition Place:

1. Approved the new IT Information Security Policy Framework, summary list of all policies and guidelines as Appendix A, and the policies and guidelines as Appendix B, to the report (March 31, 2026) from the Chief Executive Officer, Exhibition Place, with the established annual review cycle.

This report recommends the approval of the new IT Corporate Policies, Standards, Standard Operating Practices (SOP's), and Guidelines for Exhibition Place detailed in Appendix A and B.

These policies were developed in response to the Confirmation Program which was the result of a City Council motion to extend the mandate of the City Chief Information Security Officer (CISO), now called Toronto Cyber Security to direct Agencies to formulate organizational cyber frameworks that align with the city's objectives and frameworks by adoption of Item EX14.3.

The policies were further revised to incorporate feedback from the recent City Auditor General Cyber Security Audit of Exhibition Place - Phase 1 which was approved by the Board in December 2025 and adopted by City Council at its meeting on March 25, 26 and 27, 2026 by adoption of Item AU11.5.

This report recommends the approval of the IT Corporate Policies and Guidelines which were formulated to align with the City's objectives and frameworks. The policies are detailed in Appendix A and B.