Call us now:
You have to bring the popcorn for this one.
The enclosed is the latest response to the SEC SolarWinds case. Ahead of Oral Arguments to be held this month. One is so glad I’m not a lawyer and so glad one doesn’t have to adjudicate here (no I’m not qualified before you ask).
Irrespective of the latest response. The SEC SolarWinds Case demonstrates the challenges ahead for covered entities, their boards and CISOs relating to cybersecurity risk management regulatory compliance. It’s noticeable that there has been little social media feedback on the enclosed, which is understandable. The case is becoming so complex and so entrenched, only the court can decide how best to move ahead.
Johnathan Rudy, thank you for the enclosed and posting the case exhibits, that demonstrate the complex process the threat actor followed in compromising SolarWinds; the responses made by the company to markets; SolarWinds assessment of its cybersecurity maturity; transcripts given by the CISO to the SEC; the SolarWinds Security program; SolarWinds Risk Assessments for budgets and funding requirements to mitigate risks.
Exhibits – (https://lnkd.in/ePeFS_-7)
While one can go through all the information and evidence, one suspect the field is now managed by the lawyers. Lawyers and intricacies of law will decide what happens next.
We at Veritas GRC have said many times that cybersecurity risk management and regulatory compliance is a legal challenges to address. One that covered boards and the CISO are not qualified, skilled of experienced to manage alone. We have said that most lawyers are not skilled to address the challenges of cybersecuirty risk management regulatory compliance and a multi skilled, multi competance approach is required.
A reason why we as cybersecuirty and risk professionals work closely with attorneys and auditors. Supporting organisations understand and manage cybersecurity risk, governance, oversight, assurance and attestation for regulatory compliance.
@Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Ryan Buckner
SolarWinds U.S. Securities and Exchange Commission
#cybersecurity #cyberriskmanagement #cyberattacks
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7194639285873004544