| |||||||
| |||||||
| |||||||
1 | HOUSE JOINT RESOLUTION
| ||||||
2 | WHEREAS, National and State security should not be
| ||||||
3 | undermined by the concerted efforts of foreign actors with the
| ||||||
4 | goal of compromising our democratic ideals; and
| ||||||
5 | WHEREAS, In July of 2016, the Illinois State Board of | ||||||
6 | Elections
was the target of a cyber-attack of unknown foreign | ||||||
7 | origin
which targeted the Voter Registration System
Database; | ||||||
8 | and
| ||||||
9 | WHEREAS, Additionally, the Board of Elections
server logs | ||||||
10 | showed the database queries were a malicious form
of | ||||||
11 | cyber-attack known as SQL Injection, which are unauthorized,
| ||||||
12 | malicious database queries entered in a data field in a web
| ||||||
13 | application; and
| ||||||
14 | WHEREAS, Firewall monitoring indicated that the attackers
| ||||||
15 | were hitting the Board's IP addresses
five times per second, 24 | ||||||
16 | hours per day; and | ||||||
17 | WHEREAS, Investigations of the attack concluded that | ||||||
18 | statewide
Voter Registration System passwords were | ||||||
19 | compromised, and
passwords included those of election | ||||||
20 | authorities, their
staffs, internal Board users,
vendors, and | ||||||
21 | web services; and |
| |||||||
| |||||||
1 | WHEREAS, Aggressive actions contrary to American interests
| ||||||
2 | that foster political chaos and institutional mistrust in our
| ||||||
3 | democratic values must be thoroughly repudiated; and
| ||||||
4 | WHEREAS, State websites and data are under cyber threats on | ||||||
5 | a daily basis; and
| ||||||
6 | WHEREAS, The citizens of the State of Illinois need | ||||||
7 | assurance that law
enforcement and State officials are actively | ||||||
8 | investigating these matters and pursuing solutions and that | ||||||
9 | cybersecurity and data protection are top priorities, and if
| ||||||
10 | further investigation finds evidence that either foreign or | ||||||
11 | domestic actors
perpetrated or directed such acts, appropriate | ||||||
12 | criminal
charges and sanctions will be announced and enforced;
| ||||||
13 | therefore, be it
| ||||||
14 | RESOLVED, BY THE HOUSE OF REPRESENTATIVES OF THE ONE | ||||||
15 | HUNDREDTH GENERAL ASSEMBLY OF THE STATE OF ILLINOIS, THE SENATE | ||||||
16 | CONCURRING HEREIN, that we denounce any threats and actions to | ||||||
17 | the cyber infrastructure and valuable data of the State of | ||||||
18 | Illinois; and be it further | ||||||
19 | RESOLVED, That this resolution creates an Illinois | ||||||
20 | Cybersecurity Task Force to be composed by the following | ||||||
21 | appointments: |
| |||||||
| |||||||
1 | (1) The Secretary of the Department of Innovation & | ||||||
2 | Technology (DOIT) or his designee; | ||||||
3 | (2) The Chief Information Security Officer of Illinois or | ||||||
4 | his designee;
| ||||||
5 | (3) The Director of the Illinois Emergency Management | ||||||
6 | Agency or his designee; | ||||||
7 | (4) The Adjutant General of the Illinois National Guard or | ||||||
8 | his designee;
| ||||||
9 | (5) The Director of the Department of Central Management | ||||||
10 | Services or his designee; | ||||||
11 | (6) The Director of the Department of Corrections or his | ||||||
12 | designee;
| ||||||
13 | (7) The Secretary of the Department of Human Services or | ||||||
14 | his designee
| ||||||
15 | (8) The Director of the Department of Healthcare and Family | ||||||
16 | Services or his designee;
| ||||||
17 | (9) The Director of the Illinois State Police or his |
| |||||||
| |||||||
1 | designee; | ||||||
2 | (10) The Executive Director of the Illinois State Board of | ||||||
3 | Elections or his designee;
| ||||||
4 | (11) The Director of the Department of Revenue or his | ||||||
5 | designee;
| ||||||
6 | (12) The Director of the Department of Public Health or his | ||||||
7 | designee;
| ||||||
8 | (13) The Secretary of the Department of Transportation or | ||||||
9 | his designee;
| ||||||
10 | (14) The Chair of the State Board of Higher Education or | ||||||
11 | his designee;
| ||||||
12 | (15) The Attorney General or her designee; | ||||||
13 | (16) The Secretary of State or his designee;
| ||||||
14 | (17) One member of the Senate appointed by the Senate | ||||||
15 | President, who is to serve as Co-Chair;
| ||||||
16 | (18) One member of the Senate appointed by the Senate | ||||||
17 | Minority Leader; |
| |||||||
| |||||||
1 | (19) One member of the House of Representatives appointed | ||||||
2 | by the Speaker of the House, who is to serve as Co-Chair; and | ||||||
3 | (20)
One member of the House of Representatives appointed | ||||||
4 | by the House Minority leader; and be it further
| ||||||
5 | RESOLVED, That the Illinois Cybersecurity Task Force shall | ||||||
6 | be staffed and administratively supported by the Department of | ||||||
7 | Innovation & Technology and if the subject matter is either | ||||||
8 | sensitive or classified, the Task Force may hold the hearings | ||||||
9 | in private; and be it further
| ||||||
10 | RESOLVED, That the Illinois Cybersecurity Task Force shall | ||||||
11 | be appointed within 60 days after passage of this resolution | ||||||
12 | and to meet as soon as possible to collaborate and address all | ||||||
13 | cybersecurity matters that impact the State; and be it further
| ||||||
14 | RESOLVED, That the Illinois Cybersecurity Task Force shall | ||||||
15 | issue a final report on the status, progress, and future of | ||||||
16 | cybersecurity to the House Clerk and Senate Secretary of the | ||||||
17 | Illinois General Assembly by January 1, 2018, and that the Task | ||||||
18 | Force may withhold sensitive or classified information; and be | ||||||
19 | it further | ||||||
20 | RESOLVED, That the members of the Task Force shall serve
|
| |||||||
| |||||||
1 | without compensation; and be it further
| ||||||
2 | RESOLVED, That a suitable copy of this resolution be | ||||||
3 | delivered to the above mentioned elected and appointed | ||||||
4 | authorities.
|