| |||||||
| |||||||
| |||||||
| 1 | HOUSE JOINT RESOLUTION
| ||||||
| 2 | WHEREAS, National and State security should not be
| ||||||
| 3 | undermined by the concerted efforts of foreign actors with the
| ||||||
| 4 | goal of compromising our democratic ideals; and
| ||||||
| 5 | WHEREAS, In July of 2016, the Illinois State Board of | ||||||
| 6 | Elections
was the target of a cyber-attack of unknown foreign | ||||||
| 7 | origin
which targeted the Voter Registration System
Database; | ||||||
| 8 | and
| ||||||
| 9 | WHEREAS, Additionally, the Board of Elections
server logs | ||||||
| 10 | showed the database queries were a malicious form
of | ||||||
| 11 | cyber-attack known as SQL Injection, which are unauthorized,
| ||||||
| 12 | malicious database queries entered in a data field in a web
| ||||||
| 13 | application; and
| ||||||
| 14 | WHEREAS, Firewall monitoring indicated that the attackers
| ||||||
| 15 | were hitting the Board's IP addresses
five times per second, 24 | ||||||
| 16 | hours per day; and | ||||||
| 17 | WHEREAS, Investigations of the attack concluded that | ||||||
| 18 | statewide
Voter Registration System passwords were | ||||||
| 19 | compromised, and
passwords included those of election | ||||||
| 20 | authorities, their
staffs, internal Board users,
vendors, and | ||||||
| 21 | web services; and | ||||||
| |||||||
| |||||||
| 1 | WHEREAS, Aggressive actions contrary to American interests
| ||||||
| 2 | that foster political chaos and institutional mistrust in our
| ||||||
| 3 | democratic values must be thoroughly repudiated; and
| ||||||
| 4 | WHEREAS, State websites and data are under cyber threats on | ||||||
| 5 | a daily basis; and
| ||||||
| 6 | WHEREAS, The citizens of the State of Illinois need | ||||||
| 7 | assurance that law
enforcement and State officials are actively | ||||||
| 8 | investigating these matters and pursuing solutions and that | ||||||
| 9 | cybersecurity and data protection are top priorities, and if
| ||||||
| 10 | further investigation finds evidence that either foreign or | ||||||
| 11 | domestic actors
perpetrated or directed such acts, appropriate | ||||||
| 12 | criminal
charges and sanctions will be announced and enforced;
| ||||||
| 13 | therefore, be it
| ||||||
| 14 | RESOLVED, BY THE HOUSE OF REPRESENTATIVES OF THE ONE | ||||||
| 15 | HUNDREDTH GENERAL ASSEMBLY OF THE STATE OF ILLINOIS, THE SENATE | ||||||
| 16 | CONCURRING HEREIN, that we denounce any threats and actions to | ||||||
| 17 | the cyber infrastructure and valuable data of the State of | ||||||
| 18 | Illinois; and be it further | ||||||
| 19 | RESOLVED, That this resolution creates an Illinois | ||||||
| 20 | Cybersecurity Task Force to be composed by the following | ||||||
| 21 | appointments: | ||||||
| |||||||
| |||||||
| 1 | (1) The Secretary of the Department of Innovation & | ||||||
| 2 | Technology (DOIT) or his designee; | ||||||
| 3 | (2) The Chief Information Security Officer of Illinois or | ||||||
| 4 | his designee;
| ||||||
| 5 | (3) The Director of the Illinois Emergency Management | ||||||
| 6 | Agency or his designee; | ||||||
| 7 | (4) The Adjutant General of the Illinois National Guard or | ||||||
| 8 | his designee;
| ||||||
| 9 | (5) The Director of the Department of Central Management | ||||||
| 10 | Services or his designee; | ||||||
| 11 | (6) The Director of the Department of Corrections or his | ||||||
| 12 | designee;
| ||||||
| 13 | (7) The Secretary of the Department of Human Services or | ||||||
| 14 | his designee
| ||||||
| 15 | (8) The Director of the Department of Healthcare and Family | ||||||
| 16 | Services or his designee;
| ||||||
| 17 | (9) The Director of the Illinois State Police or his | ||||||
| |||||||
| |||||||
| 1 | designee; | ||||||
| 2 | (10) The Executive Director of the Illinois State Board of | ||||||
| 3 | Elections or his designee;
| ||||||
| 4 | (11) The Director of the Department of Revenue or his | ||||||
| 5 | designee;
| ||||||
| 6 | (12) The Director of the Department of Public Health or his | ||||||
| 7 | designee;
| ||||||
| 8 | (13) The Secretary of the Department of Transportation or | ||||||
| 9 | his designee;
| ||||||
| 10 | (14) The Chair of the State Board of Higher Education or | ||||||
| 11 | his designee;
| ||||||
| 12 | (15) The Attorney General or her designee; | ||||||
| 13 | (16) The Secretary of State or his designee;
| ||||||
| 14 | (17) One member of the Senate appointed by the Senate | ||||||
| 15 | President, who is to serve as Co-Chair;
| ||||||
| 16 | (18) One member of the Senate appointed by the Senate | ||||||
| 17 | Minority Leader; | ||||||
| |||||||
| |||||||
| 1 | (19) One member of the House of Representatives appointed | ||||||
| 2 | by the Speaker of the House, who is to serve as Co-Chair; and | ||||||
| 3 | (20)
One member of the House of Representatives appointed | ||||||
| 4 | by the House Minority leader; and be it further
| ||||||
| 5 | RESOLVED, That the Illinois Cybersecurity Task Force shall | ||||||
| 6 | be staffed and administratively supported by the Department of | ||||||
| 7 | Innovation & Technology and if the subject matter is either | ||||||
| 8 | sensitive or classified, the Task Force may hold the hearings | ||||||
| 9 | in private; and be it further
| ||||||
| 10 | RESOLVED, That the Illinois Cybersecurity Task Force shall | ||||||
| 11 | be appointed within 60 days after passage of this resolution | ||||||
| 12 | and to meet as soon as possible to collaborate and address all | ||||||
| 13 | cybersecurity matters that impact the State; and be it further
| ||||||
| 14 | RESOLVED, That the Illinois Cybersecurity Task Force shall | ||||||
| 15 | issue a final report on the status, progress, and future of | ||||||
| 16 | cybersecurity to the House Clerk and Senate Secretary of the | ||||||
| 17 | Illinois General Assembly by January 1, 2018, and that the Task | ||||||
| 18 | Force may withhold sensitive or classified information; and be | ||||||
| 19 | it further | ||||||
| 20 | RESOLVED, That the members of the Task Force shall serve
| ||||||
| |||||||
| |||||||
| 1 | without compensation; and be it further
| ||||||
| 2 | RESOLVED, That a suitable copy of this resolution be | ||||||
| 3 | delivered to the above mentioned elected and appointed | ||||||
| 4 | authorities.
| ||||||