Project Summary N-088: Information system program
Ongoing program focused on cyber security, data management, and governance.
Project Summary: Information system program
Priority: Critical Reference: 1-2-01600-615 CC Various Submitted by: Robert Zanette Director: Steven Vella, Director of Finance
Executive Summary
An information system refers to the broader environment in which IT exists. It includes technology, people, and processes. This project will implement an ongoing program with a focus on cyber security, data management and governance.
Business problem and opportunity
Regular investments in assessing and improving View Royal’s governance, and cyber security maturity to a defensible level will mitigate risk associated with security breaches, ransomware attacks and other cyber vulnerabilities, and is increasingly emphasized as a requirement by cyber insurance providers.
Proposed project objectives
An information security management system will include the implementation and ongoing management of the following, with further review in 2027:
- RFP Support; CC160-02: 2026 $6,000
- Cyber security review and audit; CC160-03: 2026 $7,000, 2027 $25,000
- Cyber security policies/process – CC160-11: 2026 $10,000
- Data management plan and roadmap – CC160-12: 2026 $20,000
Business risks
To the extent that View Royal does not have a strategic approach to governance, data management and information security management, its efforts in this area will continue to be uncoordinated and disjointed. This means that its security measures may fail to perform when faced with a cyber threat or disaster.
Proposed sources of funding
Casino revenue
Costs and benefits
| Costs | FY1 | FY2 | FY3 | FY4 | FY5 | 5-year Total |
|---|---|---|---|---|---|---|
| Capital | 0 | 0 | 0 | 0 | 0 | 0 |
| Operational | 43,000 | 25,000 | 0 | 0 | 0 | 43,000 |
| Total | 43,000 | 25,000 | 0 | 0 | 0 | 43,000 |
| Benefits | |
|---|---|
| Tangible | Uninterrupted secure delivery of information technology services |
| Intangible | Avoidance of liability, data loss, reputational loss, and down-time losses associated with a cyber breach |
Recommendation
THAT the Committee recommend the 2026-2030 Financial Plan include Information system program in 2026 and 2027 to be funded by Casino revenue.