Bill Text: IL HB5547 | 2017-2018 | 100th General Assembly | Introduced

NOTE: There are more recent revisions of this legislation. Read Latest Draft

---

Bill Title: Amends the Illinois State Auditing Act. Provides that on a biennial basis, the Auditor General shall conduct a performance audit of State agencies and their cybersecurity programs and practices, with a particular focus on agencies holding large volumes of personal information. Provides for the subjects to be assessed by the audit. Provides for the issuance of an audit report.

Spectrum: Partisan Bill (Democrat 8-0)

Status: (Passed) 2018-08-17 - Public Act . . . . . . . . . 100-0914 [HB5547 Detail]

Download: Illinois-2017-HB5547-Introduced.html

---

100TH GENERAL ASSEMBLY State of Illinois 2017 and 2018 HB5547 Introduced , by Rep. Jaime M. Andrade, Jr. SYNOPSIS AS INTRODUCED:
30 ILCS 5/3-2.4 new
Amends the Illinois State Auditing Act. Provides that on a biennial basis, the Auditor General shall conduct a performance audit of State agencies and their cybersecurity programs and practices, with a particular focus on agencies holding large volumes of personal information. Provides for the subjects to be assessed by the audit. Provides for the issuance of an audit report.
LRB100 18538 RJF 33756 b
A BILL FOR
HB5547 LRB100 18538 RJF 33756 b
AN ACT concerning finance.
Be it enacted by the People of the State of Illinois,
represented in the General Assembly:
Section 5. The Illinois State Auditing Act is amended by
adding Section 3-2.4 as follows:
(30 ILCS 5/3-2.4 new)
Sec. 3-2.4. Cybersecurity audit.
(a) On a biennial basis, the Auditor General shall conduct
a performance audit of State agencies and their cybersecurity
programs and practices, with a particular focus on agencies
holding large volumes of personal information.
(b) The audit required under this Section shall, at a
minimum, assess the following:
(1) the effectiveness of State agency cybersecurity
practices;
(2) the risks or vulnerabilities of the cybersecurity
systems used by State agencies;
(3) the types of information that are most susceptible
to attack;
(4) ways to improve cybersecurity and eliminate
vulnerabilities to State cybersecurity systems; and
(5) any other information concerning the cybersecurity
of State agencies that the Auditor General deems necessary

HB5547 - 2 - LRB100 18538 RJF 33756 b
and proper.
(c) Upon completion of an audit required under this
Section, a report of the audit shall be issued in accordance
with the provisions of Section 3-14, and a copy of the report
shall also be delivered to the head of each audited State
agency.