Judge denies SEC oversight of cybersecurity controls in SolarWinds case

A federal judge recently rejected a bid by the Securities and Exchange Commission to regulate corporate cybersecurity controls. The decision came in a case involving SolarWinds, a company that was the victim of a major cyberattack in 2020. The judge ruled that the SEC only has authority over financial controls, not all internal controls. This decision was seen as a relief for companies concerned about potential penalties for breaches by hackers. The judge’s ruling stated that the SEC’s broad interpretation of the law could have far-reaching implications beyond financial controls. While the case has not been entirely dismissed, SolarWinds expressed gratitude for the industry’s support. The SEC will have the opportunity to pursue claims of securities fraud against SolarWinds and a top security executive for allegedly making false statements about the company’s cybersecurity measures.

How much do you know?

Who rejected the bid by the Securities and Exchange Commission to regulate corporate cybersecurity controls?

A federal judge

The President

The CEO of SolarWinds

The SEC commissioner

Which company was the victim of a major cyberattack in 2020 in the case involving the SEC regulation bid?

SolarWinds

Microsoft

Apple

Google

What did the judge rule regarding the SEC's authority in the case of corporate cybersecurity controls?

The SEC has authority over all internal controls

The SEC has authority over financial controls only

The SEC has no authority over cybersecurity controls

The SEC has authority over all controls related to technology

Why was the judge's ruling seen as a relief for companies?

Companies were facing potential penalties for breaches by hackers

Companies were facing lawsuits from the SEC

Companies were being audited by the SEC

Companies were experiencing internal control issues

What did SolarWinds express gratitude for in the aftermath of the judge's ruling?

The SEC's actions

The industry's support

The hackers responsible for the cyberattack

The judge

What action can the SEC take following the rejection of its bid to regulate corporate cybersecurity controls in the case?

Continue regulating all internal controls

Pursue claims of securities fraud against SolarWinds

File a lawsuit against the judge

Impose fines on other companies

This question is required