Share on LinkedInShare on LinkedIn

ARTICLE · 15 AUGUST 2024

Down But Not Out: Federal Court Curbs SEC Cybersecurity Enforcement Authority

In a stinging rebuke of its attempted cybersecurity-related enforcement against a public company, a federal judge recently dismissed most of the charges that the U.S. Securities and Exchange Commission (SEC)...

United StatesTechnology

In a stinging rebuke of its attempted cybersecurity-related enforcement against a public company, a federal judge recently dismissed most of the charges that the U.S. Securities and Exchange Commission (SEC) had filed against SolarWinds Corporation and the company's Chief Information Security Officer (CISO). The ruling is a remarkable setback for the SEC, but public companies and other regulated organizations should anticipate continued scrutiny from the SEC when it comes to cybersecurity.

The SolarWinds Case

In 2023, the SEC charged SolarWinds and its CISO with fraud and internal control failures related to allegedly known cybersecurity vulnerabilities. According to the SEC, the defendants overstated the company's cybersecurity practices and understated the company's cybersecurity risks. The defendants allegedly knew of specific deficiencies in the company's cybersecurity program, and those deficiencies were exposed in December 2020 when the company announced

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from