20160427-IR-GOV160164EOA EXECUTIVE ORDER: 16-01 FOR: ESTABLISHING THE INDIANA EXECUTIVE COUNCIL ON CYBERSECURITY  

  • STATE OF INDIANA
    EXECUTIVE DEPARTMENT
    INDIANAPOLIS

    EXECUTIVE ORDER: 16-01

    FOR: ESTABLISHING THE INDIANA EXECUTIVE COUNCIL ON CYBERSECURITY


    TO ALL WHOM THESE PRESENTS MAY COME, GREETINGS.

    WHEREAS, the State of Indiana recognizes the critical role information technology plays in modern society and that state government has a responsibility to support prevention, protection, mitigation, response, and recovery programs related to cyber threats;

    WHEREAS, critical infrastructure and key resource sectors rely heavily on information technology to manage complex systems including public utility lifelines, healthcare, telecommunications, transportation, financial services, manufacturing, education, research, and public safety;

    WHEREAS, cyber threats pose personal, professional, and financial risks to the citizens of Indiana and threaten the security and economy of the State;

    WHEREAS, securing Indiana's information technology infrastructure and industrial control systems is beyond the reach of any single entity;

    WHEREAS, the diverse authorities, roles, and responsibilities of critical infrastructure stakeholders require a collaborative public-private partnership that encourages unity of effort;

    WHEREAS, in order to protect the security and economy of the State, it is appropriate and necessary for state government to establish and lead a statewide, collaborative effort involving government, private-sector, military, research, and academic stakeholders to enhance Indiana's cybersecurity.

    NOW, THEREFORE, I, Michael R. Pence, by virtue of the authority vested in me as Governor of the State of Indiana, do hereby order that:

    1. An Indiana Executive Council on Cybersecurity ("Council") be established. The Council shall be composed of the following Voting Members who shall serve on the Council by virtue of their office or by my appointment and serve at my pleasure:

    a. The Governor's Deputy Chief of Staff for Public Safety who shall also serve as the State Cybersecurity Coordinator to administer development and implementation of State cybersecurity strategy and policy.
    b. The Executive Director of the Indiana Department of Homeland Security, or designee.
    c. The Chief Information Officer of the Indiana Office of Technology, or designee.
    d. The Indiana Attorney General, or designee.
    e. The Adjutant General of the Indiana National Guard, or designee.
    f. The Superintendent of the Indiana State Police, or designee.
    g. The Chair of the Indiana Utility Regulatory Commission, or designee.
    h. The Secretary of Commerce of the Indiana Economic Development Corporation, or designee.
    i. The Commissioner of the Indiana Commission for Higher Education or designee.
    j. The Commissioner of the Indiana Department of Revenue or designee.
    k. The Chief Information Officer of Purdue University, or designee.
    l. The Chief Information Officer of Indiana University, or designee.
    m. One representative of a public interest organization such as private advocacy or individual information protection.
    n. One (1) representative of an association representing the Information Technology Sector.
    o. One (1) representative of an association representing the Communications Sector.
    p. One (1) representative from an association representing the Defense Industrial Base Sector.
    q. One (1) representative from an association representing the Energy Sector.
    r. One (1) representative from an association representing the Financial Services Sector.
    s. One (1) representative from an association representing the Healthcare & Public Health Sector.
    t. One (1) representative from an association representing the Water & Wastewater Systems Sector.

    2. The Council will also consist of permanent, non-voting members, as selected by the relevant federal agency:

    a. A cybersecurity expert from the Indianapolis field office of the Federal Bureau of Investigation.
    b. Two (2) cybersecurity experts from the Indianapolis office of the United States Department of Homeland Security:
    i. One (1) from the Indianapolis office of the United States Department of Homeland Security National Protection and Programs Directorate
    ii. One (1) from the Indianapolis office of the United States Secret Service.

    3. The Council may also appoint Advisory Members representing both public and private sector interests. Advisory Members shall be selected and approved by a majority of the Voting Members of the Council. The purpose of the Advisory Members is to support Council decision-making by providing subject-matter expertise and specialized insight.

    4. The Executive Director of the Indiana Department of Homeland Security or designee shall serve as chairperson of the Council.

    5. The Council shall establish and maintain a strategic framework document that defines high-level cybersecurity goals for the State. This framework document shall establish a strategic vision for State cybersecurity initiatives and detail how the State will:

    a. Establish an effective governing structure and strategic direction;
    b. Formalize strategic cybersecurity partnerships across the public and private sectors;
    c. Strengthen best practices to protect information technology infrastructure;
    d. Build and maintain robust statewide cyber incident response capabilities;
    e. Establish processes, technology, and facilities to improve cybersecurity statewide;
    f. Leverage business and economic opportunities related to information, critical infrastructure, and network security; and
    g. Ensure a robust workforce and talent pipeline in fields involving cybersecurity.

    6. The Council shall develop and execute an implementation plan for accomplishing strategic cybersecurity objectives that are specific, measurable, achievable, and relevant to the overall strategic vision, which shall be completed within an established timeframe.

    7. The Council shall receive guidance from the Counter-Terrorism and Security Council and report to the Homeland Security Advisor within the Office of the Governor. All State agencies, departments, commissions, bureaus, institutions, and entities shall cooperate to the fullest extent possible with this Executive Order.

    8. The Council shall be staffed by the Indiana Department of Homeland Security.

    9. The Council shall be subject to the requirements as well as the security and confidentiality exceptions under the Indiana Open Door Law at Indiana Code 5-14-1.5 and the Access to Public Records Act at Indiana Code 5-14-3.

    IN TESTIMONY WHEREOF, I, Michael R. Pence, have hereunto set my hand and caused to be affixed the Great Seal of the State of Indiana on this 20th day of April 2016.

    Michael R. Pence
    Governor of Indiana

    SEAL
    ATTEST: Connie Lawson
    Secretary of State

    Posted: 04/27/2016 by Legislative Services Agency

    DIN: 20160427-IR-GOV160164EOA
    Composed: Nov 01,2016 2:12:31AM EDT
    A PDF version of this document.

Document Information