Call us now:
Thank you for posting Johnathan Rudy, very much appreciated. For those that thought the SEC SolarWinds case has gone away, along comes the enclosed filed document, that agrees the undisputed facts between the SEC and SolarWinds. As the case progresses, this is an important document in setting out the facts that both parties agree upon. It highlights the case has not ‘gone away’ for the SEC or SolarWinds.Section III is especially useful as it sets out the agreed facts as to the adoption of the NIST CSF by SolarWinds, its use as a framework, not a standard, the alignment between SolarWinds cyber controls and the CSF 1.1 and the use of the CSF as guidance in its cybersecurity program. The document clarifies SolarWinds Access Management, Network Monitoring, audit and logging process, the SolarWinds SDLC. It sets out an agreed percentage of the NIST SP 800-53 controls met across 17 control families, and statements made by the CISO as to the state of cybersecurity, raising questions over the control effectiveness of SolarWinds cybersecurity.One suspects that as the case continues, the type of baseline setting document used here will provide useful ‘caselaw’ when it comes to the trial of complex issues in cybersecurity, cybersecurity risk management and AI security. Documents such as this ground the cybersecurity discussion around agreed facts that reduce the need to dispute facts during trial.@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan Rachel V. Rose, JD, MBAVeritas GRC SolarWinds U.S. Securities and Exchange Commission#cybersecurity #cyberriskmanagement #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7320394047963992064