Summary#

Calgary’s Audit Committee carried a motion on “Update on Cybersecurity Audits.” It recommends that Council receive a confidential report and presentation for information and the Corporate Record, and direct that specified material remain confidential until a review by September 10, 2039. This is a committee recommendation; Council’s decision is the next step.

• The committee’s motion passed 7 to 0.
• It recommends keeping the closed-meeting discussions, report and Attachments 2 and 3 confidential under section 29 of the Access to Information Act, for review by September 10, 2039.
• The material provided does not include the cybersecurity audit findings.

What it means for you#

• The public: The decision does not itself change cybersecurity rules or services. The specified discussions and documents remain confidential, subject to review by the stated date.
• Council: The committee recommends receiving the report and presentation for information and the Corporate Record. The materials provided do not show Council’s decision.

Money#

No cost information is in the available material.

What is unclear#

• What the audits found, what risks they identified, and whether they recommend changes.
• Whether Council will adopt the committee’s recommendation.
• What the review of confidentiality by September 10, 2039 will involve; the motion does not say the material will automatically become public on that date.

Case for#

No clear argument available from the supplied material.

Case against#

• A concern is that keeping the audit report, attachments and closed-meeting discussions confidential limits what the public can learn about the City’s cybersecurity findings and any response.