Status Update of the IT Disaster Recovery Plan

The Public Gallery wrote no story on this item. What follows is the city’s own record of what happened to it, as filed: nothing on this page is summarised or scored by us.

The decision

2022-07-19 · Toronto City Council · adopted

As filed

City Council on July 19, 20, 21 and 22, 2022, adopted the following: 1. City Council request the City Manager, in co-ordination with the Chief Technology Officer, the Chief Information Security Officer, the Director, Office of Emergency Management and the Director, Internal Audit, to report to the Audit Committee in the third quarter of 2023 with a City-wide Risk Governance Model addressing risks related to business continuity, cyber major incident and technology disaster recovery.

Show the rest of As filed, 990 more characters as filed

2. City Council request the Chief Technology Officer, in co-ordination with the Chief Information Security Officer and the Director, Office of Emergency Management to report to the Audit Committee in the third quarter of 2023 on the status of the Information Technology Disaster Recovery Plan from each City of Toronto division, agency and corporation; the status update should also be reported for City of Toronto's Corporate Technology Services Disaster Recovery Plan, including business continuity and cyber major incident. 3. City Council direct that Confidential Attachment 1 to the report (June 24, 2022) from the Chief Technology Officer remain confidential in its entirety, as it involves the security of the property of the City. Confidential Attachment 1 to the report (June 24, 2022) from the Chief Technology Officer remains confidential in its entirety in accordance with the provisions of the City of Toronto Act, 2006, as it involves the security of the property of the City.

On the agenda

As the city filed it

This report provides status update of IT Disaster Recovery Plan pursuant to a City Council decision under AU10.8 - Status of Audit Recommendations for the Technology Services Division at its meeting on November 9, 2021. At this meeting, City Council requested the City Manager to report to the Audit Committee in the second quarter of 2022 with information from each City of Toronto Division, Agency and Corporation on their Information Technology Disaster Recovery Plan should the City's systems, technology, communications, or backups be made unavailable.

Show the rest of As the city filed it, 1,711 more characters as filed

In that meeting, City Council also requested the Chief Technology Officer to report to the Q2 2022 Audit Committee with an update on the status of City of Toronto's Corporate Technology Services Disaster Recovery Plan, including implementation, testing and a full project plan for any outstanding work. The City creates and manages large volumes of electronic information or data. The impact of data loss or corruption of data from hardware failure, human error, hacking, malware, or a natural disaster could be significant. In such a case, a Technology Disaster Recovery Plan is designed to assist an organization in executing recovery processes in response to a disaster to protect business IT infrastructure and promote recovery. The Technology Services Division (TSD) has collaborated with multiple Divisions, Agencies and Corporations to gather inputs related to the status of their IT Disaster Recovery Plan should the City's systems, technology, communications, or backups be made unavailable. This information is documented in 'Section 1: City-wide assessment of Information Technology Disaster Recovery Plans' of this report and analysis is provided in Confidential Attachment # 1 - Status Update of the IT Disaster Recovery Plan. 'Section 2 - TSD Disaster Recovery Plan' of this report details the status of the Technology Services Division's Disaster Recovery Plan, including implementation, testing and a full project plan for outstanding work that will highlight the road map for the transition from current state to the future state, based on best practices that have been identified by the project team. The analysis and details of implementation plan are provided in Confidential Attachment # 1.

Staff recommended

The Chief Technology Officer recommends that: 1. City Council direct that the confidential information contained in Confidential Attachment 1 remain confidential in its entirety, as it involves the security of the property of the City.

Considered

2022-07-11 · Audit Committee · amended
Decision as filed
The Audit Committee recommends that: 1. City Council request the City Manager, in co-ordination with the Chief Technology Officer, the Chief Information Security Officer, the Director, Office of Emergency Management and the Director, Internal Audit, to report to the Audit Committee in the third quarter of 2023 with a City-wide Risk Governance Model addressing risks related to business continuity, cyber major incident and technology disaster recovery.
Show the rest of Decision as filed, 738 more characters as filed
2. City Council request the Chief Technology Officer, in co-ordination with the Chief Information Security Officer and the Director, Office of Emergency Management to report to the Audit Committee in the third quarter of 2023 on the status of the Information Technology Disaster Recovery Plan from each City of Toronto division, agency and corporation; the status update should also be reported for City of Toronto's Corporate Technology Services Disaster Recovery Plan, including business continuity and cyber major incident. 3. City Council direct that Confidential Attachment 1 to the report (June 24, 2022) from the Chief Technology Officer remain confidential in its entirety, as it involves the security of the property of the City.
2022-07-19 · Toronto City Council · adopted

On the record

The item as the City filed it

More from this meeting

The whole meeting