Cybersecurity Audit of Exhibition Place - Phase Two: Overall Network Security and Cybersecurity Assessment of Select Critical Systems

The Phase One public cover report is available at: Cybersecurity Audit of Exhibition Place - Phase One: Physical Security, User Access Management and Staff Training Technology plays a vital role in all aspects of Exhibition Place's operations and services. This Phase Two report includes the results of our vulnerability assessment and penetration testing of the Exhibition Place's network, systems, applications and devices, as well as cybersecurity incident logging and monitoring review. This report includes five administrative recommendations. The confidential findings and recommendations are contained in Confidential Attachment 1 to this report. A separate, confidential and detailed technical report was provided to management with technical details to guide them in addressing the report findings and recommendations. Management agrees with the recommendations contained in the Confidential Attachment 1, which also includes management's response. [1] Budget TO 2026 Budget Notes Exhibition Place

4. Forward this report and Confidential Attachment 1 to City Council for information through the City's Audit Committee. 5. Recommend that City Council authorize the public release of Confidential Attachment 1 at the discretion of the Auditor General, after discussions with the appropriate Exhibition Place and City officials.