TTC Audit and Risk Management Committee - March 31, 2022
Meeting info
-
Agenda
-
Meeting Minutes
Land Acknowledgement
Declarations of Interest – Municipal Conflict of Interest Act
Minutes of the Previous Meeting
Business Arising Out of the Minutes
Public Presentations
Requests to speak must be registered by noon of the business day preceding meeting day by submitting a request to commissionservices@ttc.ca A final deputation list will be distributed at the meeting.
Presenters will participate by audio only and will be required to provide a telephone number on which they can be reached at the appropriate time. Presenters may submit a written deputation in advance of the meeting which will be circulated to TTC Commissioners and staff.
Presentations/Reports/Other Business
Item 1. Toronto Transit Commission Cybersecurity Audit Phase 1: Critical IT Assets and User Access Management (This report contains information related to the security of the property of the municipality or local board) (For Action)
Item 2. Audit, Risk and Compliance – Flexible Work Plan Status Update (Q1 2022)(For Action)
Meeting No.:
27
Meeting Date:
Thursday, March 31, 2022
A meeting of the TTC Audit & Risk Management Committee was held by video conference on Thursday, March 31, 2022, commencing at 8:30 a.m. The meeting recessed at 8:34 a.m. to meet in-camera. The Audit & Risk Management Committee re-convened the public session at 10:13 a.m.
Present at Committee of the Whole
R. Lalonde (Chair), J. De Laurentiis, and J. Osborne (Members), M. Atlas, K. Campbell, G. Downie, B. Hasserjian, J. La Vita, N. Poole-Moffatt, J. Ross, J. Taylor, R. Wong, E. Chen, T. Coelho, C. Leach, J. Lim, D. Lowe, W. Reuter, D. Shanmuganayagam, C. Finnerty, J. Ishak and S. Parmar were present.
B. Romeo-Beehler (Auditor General) S. Ali, S. Chan, C. Jiang and G. Mark (Auditor General’s Office
J. Darmody (Live Media) was also present.
R. Lalonde was in the Chair.
Present at Public Session
R. Lalonde (Chair), J. De Laurentiis, and J. Osborne (Members), M. Atlas (General Counsel - Acting), K. Campbell (Chief Diversity and Culture Officer), G. Downie (Chief Capital Officer), B. Hasserjian (Chief Safety Officer - Acting), J. La Vita ( Chief Financial Officer), N. Poole-Moffatt (Chief of Corporate Affairs), J. Ross (Chief Operating Officer), J. Taylor (Chief of Staff), R. Wong (Chief Vehicles Officer), E. Chen (Manager - Audit, Risk and Compliance), T. Coelho (Manager - Audit, Risk and Compliance), C. Leach (Head - Audit, Risk and Compliance - Acting), J. Lim (Director - Audit, Risk and Compliance), D. Lowe (Manager - Audit, Risk and Compliance), W. Reuter (Head - Research and Analytics), D. Shanmuganayagam (Chief Information Officer), C. Finnerty (Director - Commission Services), J. Ishak (Coordinator - Secretariat Services) and S. Parmar (Administrator - Secretariat Services) were present.
B. Romeo-Beehler (Auditor General) S. Ali, S. Chan, C. Jiang and G. Mark (Auditor General’s Office were present.
J. Darmody (Live Media) was also present
R. Lalonde was in the Chair.
Land Acknowledgement
R. Lalonde requested C. Finnerty to acknowledge that the TTC Board was meeting on the traditional territory of many nations including the Mississaugas of the Credit, the Anishnabeg, the Chippewa, the Haudenosaunee and the Wendat peoples and is now home to many diverse First Nations, Inuit and Métis peoples. C. Finnerty also acknowledged that Toronto is covered by Treaty 13 signed with the Mississaugas of the Credit.
Declaration of Interest - Municipal Conflict of Interest Act
Nil
Committee of the Whole
Chair Lalonde moved the following motion:
That the Committee recess as the Committee of the Whole to consider information involving the security of the property of the municipality or local board and advice or communications that are subject to solicitor-client privilege, including communications necessary for that purpose.
The motion by Chair Lalonde carried.
Minutes of the Previous Meeting
Commissioner Osborne moved that the Audit & Risk Management Committee approve the minutes of Meeting 26, held on Thursday, December 2, 2021.
The motion by Commissioner Osborne carried.
Business Arising Out of the Minutes
Nil
Public Presentations
Nil
Presentations/Reports/Other Business
1. Toronto Transit Commission Cybersecurity Audit Phase 1: Critical IT Assets and User Access Management
Commissioner De Laurentiis moved adoption of the staff recommendations as follows:
It is recommended that the TTC Audit and Risk Management Committee:
- The Toronto Transit Commission Board adopt the confidential instructions to staff in Confidential Attachment 1 to this report from the Auditor General.
- The Toronto Transit Commission Board forward this report to City Council for information through the City's Audit Committee.
- The Toronto Transit Commission Board direct that Confidential Attachment 1 to this report from the Auditor General be released publicly at the discretion of the Auditor General, after discussions with the appropriate Toronto Transit Commission and City Officials.
The motion by Commissioner De Laurentiis carried.
Approved
2. Audit, Risk and Compliance – Flexible Work Plan Status Update
C. Leach delivered a verbal presentation on this item.
Chair Lalonde moved adoption of the staff recommendations as follows:
It is recommended that the TTC Audit and Risk Management Committee:
- Receive this report for information.
The motion by Commissioner Lalonde carried.
Approved
The meeting adjourned at 10:40 a.m.