Motion to keep cybersecurity audit report confidential

Summary#

On October 8, 2026, Calgary’s Audit Committee voted 7–0 to recommend that Council receive the confidential report “Update on Cybersecurity Audits” for information and the City’s record. It also recommended keeping the report, two attachments and closed-meeting discussions confidential, to be reviewed by September 10, 2039. This is a committee recommendation; Council’s decision is not included in the materials.

  • The committee did not disclose the report’s audit findings or any proposed changes to City cybersecurity.

What it means for you#

  • City residents: The committee recommendation does not directly change a public service, rule or benefit. If Council adopts it, the report and named materials would remain confidential until the stated review date.
  • Council: The committee recommends that Council receive the report and presentation for information and the City’s record, and direct that the materials remain confidential.

Money#

No publicly available information about cost.

What is unclear#

  • What the cybersecurity audits found, and whether they identified problems or recommended action.
  • Whether Council adopted the committee’s recommendations.
  • What the City’s review of the confidential materials by September 10, 2039 will involve.

Case for#

No clear argument available from the supplied material.

Case against#

  • If Council adopts the recommendation, the public will not be able to see the audit report, two attachments or closed-meeting discussions before the stated confidentiality review date.

Votes

Audit Committee, item 6.1 (Update on Cybersecurity Audits, AC2026-0827): That with respect to Confidential Report AC2026-0827, the following be approved: That the Audit Committee recommends that Council: - Receive this Confidential report and presentation for information and the Corporate Record; and - Direct that the Closed Meeting discussions, Report, Attachments 2 and 3 be held confidential pursuant to Section 29 (Advice from officials) of the Access to Information…

For (100%)

Audit Committee, item 9.2.1 (Update on Cybersecurity Audits, AC2026-0827): That with respect to Confidential Report AC2026-0827, the following be approved: That the Audit Committee postpone Report AC2026-0827 to the 2026 October 8 Regular Meeting of the Audit Committee.

For (100%)