STATE OF INDIANA
EXECUTIVE DEPARTMENT
INDIANAPOLIS
FOR: CONTINUING THE INDIANA EXECUTIVE COUNCIL ON CYBERSECURITY
TO ALL WHOM THESE PRESENTS MAY COME, GREETINGS.
WHEREAS, the State of Indiana recognizes the critical role that information technology plays in modern society and that state government has a responsibility to support prevention, protection, mitigation, response, and recovery programs related to cyber threats;
WHEREAS, critical infrastructure and key resource sectors rely heavily on information technology to manage complex systems, including, but not limited to, public utility lifelines, healthcare, telecommunications, transportation, financial services, manufacturing, education, research, and public safety;
WHEREAS, cyber threats pose personal, professional, and financial risks to the citizens of the State of Indiana and threaten the security and economy of our State;
WHEREAS, securing Indiana's information technology infrastructure and industrial control systems is beyond the reach of any single entity;
WHEREAS, the diverse authorities, roles, and responsibilities of critical infrastructure stakeholders require a collaborative public-private partnership that encourages unity of effort;
WHEREAS, in order to protect the security and economy of the State, it is appropriate and necessary for state government to establish and lead a statewide, collaborative effort involving government, private-sector, military, research, and academic stakeholders to enhance Indiana's cybersecurity.
NOW, THEREFORE, I, Eric J. Holcomb, by virtue of the authority vested in me as Governor of the State of Indiana, do hereby order that:
1. The Indiana Executive Council on Cybersecurity ("Council") shall be continued.
2. The Council shall be composed of the following Voting Members who shall serve on the Council by virtue of their office or by my appointment and shall serve at my pleasure:
a. A designated representative of the Governor's Office who shall also serve as the State Cybersecurity Coordinator to administer development and implementation of State cybersecurity strategy and policy.
b. The Executive Director of the Indiana Department of Homeland Security, or designee.
c. The Chief Information Officer of the Indiana Office of Technology, or designee.
d. The Indiana Attorney General, or designee.
e. The Adjutant General of the Indiana National Guard, or designee.
f. The Superintendent of the Indiana State Police, or designee.
g. The Chair of the Indiana Utility Regulatory Commission, or designee.
h. The Secretary of Commerce of the Indiana Economic Development Corporation, or designee.
i. The Commissioner of the Indiana Commission for Higher Education, or designee.
j. The Commissioner of the Indiana Department of Revenue, or designee.
k. The Chief Information Officer of Purdue University, or designee.
l. The Chief Information Officer of Indiana University, or designee.
m. One representative of a public interest organization, such as private advocacy or individual information protection.
n. One (1) representative of an association representing the Information Technology Sector.
o. One (1) representative of an association representing the Communications Sector.
p. One (1) representative from an association representing the Defense Industrial Base Sector.
q. One (1) representative from an association representing the Energy Sector.
r. One (1) representative from an association representing the Financial Services Sector.
s. One (1) representative from an association representing the Healthcare & Public Health Sector.
t. One (1) representative from an association representing the Water & Wastewater Systems Sector.
3. The Council will also consist of permanent, non-voting members, as selected by the relevant federal agency:
a. A cybersecurity expert from the Indianapolis field office of the Federal Bureau of Investigation.
b. Two (2) cybersecurity experts from the Indianapolis office of the United States Department of Homeland Security, as follows:
i. One (1) from the Indianapolis office of the United States Department of Homeland Security National Protection and Programs Directorate; and
ii. One (1) from the Indianapolis office of the United States Secret Service.
4. The Council may also appoint Advisory Members representing both public and private sector interests. Advisory Members shall be selected and approved by a majority of the Voting Members of the Council. The purpose of the Advisory Members is to support Council decision-making by providing subject-matter expertise and specialized insight.
5. The Executive Director of the Indiana Department of Homeland Security, or designee, shall serve as chairperson of the Council.
6. The Council shall establish and maintain a strategic framework document that defines high-level cybersecurity goals for the State. This framework document shall establish a strategic vision for State cybersecurity initiatives and detail how the State will:
a. Establish an effective governing structure and strategic direction;
b. Formalize strategic cybersecurity partnerships across the public and private sectors;
c. Strengthen best practices to protect information technology infrastructure;
d. Build and maintain robust statewide cyber incident response capabilities;
e. Establish processes, technology, and facilities to improve cybersecurity statewide;
f. Leverage business and economic opportunities related to information, critical infrastructure, and network security; and
g. Ensure a robust workforce and talent pipeline in fields involving cybersecurity.
7. The Council shall develop, maintain and execute an implementation plan for accomplishing strategic cybersecurity objectives that are specific, measurable, achievable, and relevant to the overall strategic vision, which shall be completed within an established timeframe.
8. The Council shall receive guidance from the Counter-Terrorism and Security Council and report to the Homeland Security Advisor within the Office of the Governor. All State agencies, departments, commissions, bureaus, institutions, and entities shall cooperate to the fullest extent possible with this Executive Order.
9. The Council shall be staffed by the Indiana Department of Homeland Security.
10 The Council shall be subject to the requirements as well as the security and confidentiality exceptions under the Indiana Open Door Law (Indiana Code § 5-14-1.5) and the Access to Public Records Act (Indiana Code § 5-14-3).
IN TESTIMONY WHEREOF, I, Eric J. Holcomb, have hereunto set my hand and caused to be affixed the Great Seal of the State of Indiana on this 9th day of January 2017.
Eric J. Holcomb
Governor of Indiana
Posted: 02/01/2017 by Legislative Services Agency
DIN: 20170201-IR-GOV170044EOA
Composed: May 01,2024 10:10:29PM EDT
A
PDF version of this document.
