Illinois Code § 4-101

§ 4-101.

The Commerce Commission shall have general supervision of all public utilities, except as otherwise provided in this Act, shall inquire into the management of the business thereof and shall keep itself informed as to the manner and method in which the business is conducted. It shall examine those public utilities and keep informed as to their general condition, their franchises, capitalization, rates and other charges, and the manner in which their plants, equipment and other property owned, leased, controlled or operated are managed, conducted and operated, not only with respect to the adequacy, security and accommodation afforded by their service but also with respect to their compliance with this Act and any other law, with the orders of the Commission and with the charter and franchise requirements. Whenever the Commission is authorized or required by law to consider some aspect of criminal history record information for the purpose of carrying out its statutory powers and responsibilities, then, upon request and payment of fees in conformance with the requirements of Section 2605-400 of the Illinois State Police Law, the Illinois State Police is authorized to furnish, pursuant to positive identification, such information contained in State files as is necessary to fulfill the request. The Commission shall require all public utilities to establish a security policy that includes on-site safeguards to restrict physical or electronic access to critical infrastructure and computerized control and data systems. The Commission shall maintain a record of and each regulated entity shall provide to the Commission an annual affidavit signed by a representative of the regulated entity that states: (1) that the entity has a security policy in place; (2) that the entity has conducted at least one practice exercise based on the security policy within the 12 months immediately preceding the date of the affidavit; and (3) with respect to any entity that is an electric public utility, that the entity follows, at a minimum, the most current security standards set forth by the North American Electric Reliability Council. (Source: P.A. 102-538, eff. 8-20-21.)