Illinois Attorney General, Information Security and Security Breach Notification Guidance (Jan. 27, 2012) (full-text).