HJ0027 100TH GENERAL ASSEMBLY

HJ0027 LRB100 11098 MST 21359 r

HOUSE JOINT RESOLUTION

WHEREAS, National and State security should not be undermined by the concerted efforts of foreign actors with the goal of compromising our democratic ideals; and

WHEREAS, In July of 2016, the Illinois State Board of Elections was the target of a cyber-attack of unknown foreign origin which targeted the Voter Registration System Database; and

WHEREAS, Additionally, the Board of Elections server logs showed the database queries were a malicious form of cyber-attack known as SQL Injection, which are unauthorized, malicious database queries entered in a data field in a web application; and

WHEREAS, Firewall monitoring indicated that the attackers were hitting the Board's IP addresses five times per second, 24 hours per day; and

WHEREAS, Investigations of the attack concluded that statewide Voter Registration System passwords were compromised, and passwords included those of election authorities, their staffs, internal Board users, vendors, and web services; and

WHEREAS, Aggressive actions contrary to American interests that foster political chaos and institutional mistrust in our democratic values must be thoroughly repudiated; and

WHEREAS, State websites and data are under cyber threats on a daily basis; and

WHEREAS, The citizens of the State of Illinois need assurance that law enforcement and State officials are actively investigating these matters and pursuing solutions and that cybersecurity and data protection are top priorities, and if further investigation finds evidence that either foreign or domestic actors perpetrated or directed such acts, appropriate criminal charges and sanctions will be announced and enforced; therefore, be it

RESOLVED, BY THE HOUSE OF REPRESENTATIVES OF THE ONE HUNDREDTH GENERAL ASSEMBLY OF THE STATE OF ILLINOIS, THE SENATE CONCURRING HEREIN, that we denounce any threats and actions to the cyber infrastructure and valuable data of the State of Illinois; and be it further

RESOLVED, That this resolution creates an Illinois Cybersecurity Task Force to be composed by the following appointments:

(1) The Secretary of the Department of Innovation & Technology (DOIT) or his designee;

(2) The Chief Information Security Officer of Illinois or his designee;

(3) The Director of the Illinois Emergency Management Agency or his designee;

(4) The Adjutant General of the Illinois National Guard or his designee;

(5) The Director of the Department of Central Management Services or his designee;

(6) The Director of the Department of Corrections or his designee;

(7) The Secretary of the Department of Human Services or his designee

(8) The Director of the Department of Healthcare and Family Services or his designee;

(9) The Director of the Illinois State Police or his designee;

(10) The Executive Director of the Illinois State Board of Elections or his designee;

(11) The Director of the Department of Revenue or his designee;

(12) The Director of the Department of Public Health or his designee;

(13) The Secretary of the Department of Transportation or his designee;

(14) The Chair of the State Board of Higher Education or his designee;

(15) The Attorney General or her designee;

(16) The Secretary of State or his designee;

(17) One member of the Senate appointed by the Senate President, who is to serve as Co-Chair;

(18) One member of the Senate appointed by the Senate Minority Leader;

(19) One member of the House of Representatives appointed by the Speaker of the House, who is to serve as Co-Chair; and

(20) One member of the House of Representatives appointed by the House Minority leader; and be it further

RESOLVED, That the Illinois Cybersecurity Task Force shall be staffed and administratively supported by the Department of Innovation & Technology and if the subject matter is either sensitive or classified, the Task Force may hold the hearings in private; and be it further

RESOLVED, That the Illinois Cybersecurity Task Force shall be appointed within 60 days after passage of this resolution and to meet as soon as possible to collaborate and address all cybersecurity matters that impact the State; and be it further

RESOLVED, That the Illinois Cybersecurity Task Force shall issue a final report on the status, progress, and future of cybersecurity to the House Clerk and Senate Secretary of the Illinois General Assembly by January 1, 2018, and that the Task Force may withhold sensitive or classified information; and be it further

RESOLVED, That the members of the Task Force shall serve without compensation; and be it further

RESOLVED, That a suitable copy of this resolution be delivered to the above mentioned elected and appointed authorities.