Summary#

Council approved the Cybersecurity Governance Audit on the consent agenda on May 26, 2026, by a 15–0 vote. It received the audit report for the City’s records and directed that its confidential attachment and closed-meeting discussions remain confidential under section 23 of the Access to Information Act, with a review by April 23, 2041.

• The decision records the audit; it does not create a new cybersecurity office or public program.
• The confidential material is to be reviewed by the stated date. The decision does not say it will automatically become public then.

What it means for you#

• Calgarians: This decision does not directly change residents’ services, rights, or cybersecurity duties. The details of the audit are not available in the supplied material.
• City administration: The audit report includes Administration’s response and corrective actions, but Council’s decision only received the report for the record. It did not direct new corrective actions.

Money#

No cost information is in the available material.

What is unclear#

• The confidential attachment is not provided, so the audit’s findings and the specific corrective actions cannot be verified.
• The materials do not state whether those actions are complete, or what they cost.
• The attachment is to be reviewed by April 23, 2041; the decision does not say whether it will be released after that review.

Case for#

• City staff say clear cybersecurity responsibilities, aligned priorities, and leadership oversight help protect the City’s information systems and digital services.
• The City Auditor’s Office already provides independent audit services. Receiving the report records the audit through the City’s existing oversight process.

Case against#

• The confidential attachment contains the audit details, including the response and corrective actions. Keeping it confidential limits the public’s ability to assess the findings and the City’s response.
• The decision does not set a public reporting date for progress on corrective actions.