Cybersecurity Audit of Exhibition Place - Phase Two: Overall Network Security and Cybersecurity Assessment of Select Critical Systems

The Public Gallery wrote no story on this item. What follows is the city’s own record of what happened to it, as filed: nothing on this page is summarised or scored by us.

The decision

2026-05-20 · Toronto City Council · amended

As filed

City Council on May 20 and 21, 2026, adopted the following: 1. City Council authorize the public release of Confidential Attachment 1 to the report (March 25, 2026) from the Auditor General at the discretion of the Auditor General after discussions with the appropriate Exhibition Place and City officials. 2. City Council direct that Confidential Attachment 1 to the report (March 25, 2026) from the Auditor General remain confidential at the discretion of the Auditor General as it pertains to the security of the property of the City of Toronto or one of its agencies and corporations.

Show the rest of As filed, 509 more characters as filed

Confidential Attachment 1 to the report (March 25, 2026) from the Auditor General remains confidential at this time in accordance with the provisions of the City of Toronto Act, 2006, as it pertains to security of the property of the City of Toronto or one of its agencies and corporations. Confidential Attachment 1 to the report (March 25, 2026) from the Auditor General will be made public at the discretion of the Auditor General after discussions with the appropriate Exhibition Place and City officials.

On the agenda

As the city filed it

At its meeting on April 16, 2026, the Board of Governors of Exhibition Place considered Item EP22.1 and made recommendations to City Council. Summary from the report (March 25, 2026) from the Auditor General: The Auditor General included a cybersecurity audit of Exhibition Place, an agency of the City of Toronto, in her 2025 Work Plan. Exhibition Place is Canada's largest convention centre and entertainment and sports venue, generating $595 million[1] in economic impact annually and $67.3 million in revenue in 2024.

Show the rest of As the city filed it, 1,310 more characters as filed

Phase One of this cybersecurity audit was presented at Exhibition Place's December 5, 2025, Board meeting. The Auditor General's Phase One confidential report included results from testing physical security, user access management, and staff awareness of social engineering in relation to cybersecurity. The Phase One public cover report is available at: Cybersecurity Audit of Exhibition Place - Phase One: Physical Security, User Access Management and Staff Training Technology plays a vital role in all aspects of Exhibition Place's operations and services. This Phase Two report includes the results of our vulnerability assessment and penetration testing of the Exhibition Place's network, systems, applications and devices, as well as cybersecurity incident logging and monitoring review. This report includes five administrative recommendations. The confidential findings and recommendations are contained in Confidential Attachment 1 to this report. A separate, confidential and detailed technical report was provided to management with technical details to guide them in addressing the report findings and recommendations. Management agrees with the recommendations contained in the Confidential Attachment 1, which also includes management's response. [1] Budget TO 2026 Budget Notes Exhibition Place

Staff recommended

The Board of Governors of Exhibition Place recommends that: 1. City Council authorize the public release of Confidential Attachment 1 to the report (March 25, 2026) from the Auditor General at the discretion of the Auditor General, after discussions with the appropriate Exhibition Place and City officials.

Considered

2026-05-01 · Audit Committee · adopted
Decision as filed
The Audit Committee recommends that: 1. City Council authorize the public release of Confidential Attachment 1 to the report (March 25, 2026) from the Auditor General at the discretion of the Auditor General, after discussions with the appropriate Exhibition Place and City officials.
2026-05-20 · Toronto City Council · amended

On the record

The item as the City filed it