HJ0027LRB100 11098 MST 21359 r

1
HOUSE JOINT RESOLUTION

 
2    WHEREAS, National and State security should not be
3undermined by the concerted efforts of foreign actors with the
4goal of compromising our democratic ideals; and
 
5    WHEREAS, In July of 2016, the Illinois State Board of
6Elections was the target of a cyber-attack of unknown foreign
7origin which targeted the Voter Registration System Database;
8and
 
9    WHEREAS, Additionally, the Board of Elections server logs
10showed the database queries were a malicious form of
11cyber-attack known as SQL Injection, which are unauthorized,
12malicious database queries entered in a data field in a web
13application; and
 
14    WHEREAS, Firewall monitoring indicated that the attackers
15were hitting the Board's IP addresses five times per second, 24
16hours per day; and
 
17    WHEREAS, Investigations of the attack concluded that
18statewide Voter Registration System passwords were
19compromised, and passwords included those of election
20authorities, their staffs, internal Board users, vendors, and
21web services; and
 

 

 

HJ0027- 2 -LRB100 11098 MST 21359 r

1    WHEREAS, Aggressive actions contrary to American interests
2that foster political chaos and institutional mistrust in our
3democratic values must be thoroughly repudiated; and
 
4    WHEREAS, State websites and data are under cyber threats on
5a daily basis; and
 
6    WHEREAS, The citizens of the State of Illinois need
7assurance that law enforcement and State officials are actively
8investigating these matters and pursuing solutions and that
9cybersecurity and data protection are top priorities, and if
10further investigation finds evidence that either foreign or
11domestic actors perpetrated or directed such acts, appropriate
12criminal charges and sanctions will be announced and enforced;
13therefore, be it
 
14    RESOLVED, BY THE HOUSE OF REPRESENTATIVES OF THE ONE
15HUNDREDTH GENERAL ASSEMBLY OF THE STATE OF ILLINOIS, THE SENATE
16CONCURRING HEREIN, that we denounce any threats and actions to
17the cyber infrastructure and valuable data of the State of
18Illinois; and be it further
 
19    RESOLVED, That this resolution creates an Illinois
20Cybersecurity Task Force to be composed by the following
21appointments:
 

 

 

HJ0027- 3 -LRB100 11098 MST 21359 r

1    (1) The Secretary of the Department of Innovation &
2Technology (DOIT) or his designee;
 
3    (2) The Chief Information Security Officer of Illinois or
4his designee;
 
5    (3) The Director of the Illinois Emergency Management
6Agency or his designee;
 
7    (4) The Adjutant General of the Illinois National Guard or
8his designee;
 
9    (5) The Director of the Department of Central Management
10Services or his designee;
 
11    (6) The Director of the Department of Corrections or his
12designee;
 
13    (7) The Secretary of the Department of Human Services or
14his designee
 
15    (8) The Director of the Department of Healthcare and Family
16Services or his designee;
 
17    (9) The Director of the Illinois State Police or his

 

 

HJ0027- 4 -LRB100 11098 MST 21359 r

1designee;
 
2    (10) The Executive Director of the Illinois State Board of
3Elections or his designee;
 
4    (11) The Director of the Department of Revenue or his
5designee;
 
6    (12) The Director of the Department of Public Health or his
7designee;
 
8    (13) The Secretary of the Department of Transportation or
9his designee;
 
10    (14) The Chair of the State Board of Higher Education or
11his designee;
 
12    (15) The Attorney General or her designee;
 
13    (16) The Secretary of State or his designee;
 
14    (17) One member of the Senate appointed by the Senate
15President, who is to serve as Co-Chair;
 
16    (18) One member of the Senate appointed by the Senate
17Minority Leader;
 

 

 

HJ0027- 5 -LRB100 11098 MST 21359 r

1    (19) One member of the House of Representatives appointed
2by the Speaker of the House, who is to serve as Co-Chair; and
 
3    (20) One member of the House of Representatives appointed
4by the House Minority leader; and be it further
 
5    RESOLVED, That the Illinois Cybersecurity Task Force shall
6be staffed and administratively supported by the Department of
7Innovation & Technology and if the subject matter is either
8sensitive or classified, the Task Force may hold the hearings
9in private; and be it further
 
10    RESOLVED, That the Illinois Cybersecurity Task Force shall
11be appointed within 60 days after passage of this resolution
12and to meet as soon as possible to collaborate and address all
13cybersecurity matters that impact the State; and be it further
 
14    RESOLVED, That the Illinois Cybersecurity Task Force shall
15issue a final report on the status, progress, and future of
16cybersecurity to the House Clerk and Senate Secretary of the
17Illinois General Assembly by January 1, 2018, and that the Task
18Force may withhold sensitive or classified information; and be
19it further
 
20     RESOLVED, That the members of the Task Force shall serve

 

 

HJ0027- 6 -LRB100 11098 MST 21359 r

1without compensation; and be it further
 
2    RESOLVED, That a suitable copy of this resolution be
3delivered to the above mentioned elected and appointed
4authorities.