Wednesday, February 4, 2026

Judge denies SEC oversight of cybersecurity controls in SolarWinds case

Share

A federal judge recently rejected a bid by the Securities and Exchange Commission to regulate corporate cybersecurity controls. The decision came in a case involving SolarWinds, a company that was the victim of a major cyberattack in 2020. The judge ruled that the SEC only has authority over financial controls, not all internal controls. This decision was seen as a relief for companies concerned about potential penalties for breaches by hackers. The judge’s ruling stated that the SEC’s broad interpretation of the law could have far-reaching implications beyond financial controls. While the case has not been entirely dismissed, SolarWinds expressed gratitude for the industry’s support. The SEC will have the opportunity to pursue claims of securities fraud against SolarWinds and a top security executive for allegedly making false statements about the company’s cybersecurity measures.


Vocabulary List:

  1. Regulate /ˈrɛɡ.jʊ.leɪt/ (verb): To control or supervise by means of rules or regulations.
  2. Cybersecurity /ˌsaɪ.bər.sɪˈkjʊr.ə.ti/ (noun): The practice of protecting systems networks and programs from digital attacks.
  3. Authority /əˈθɔːr.ɪ.ti/ (noun): The power or right to give orders make decisions and enforce obedience.
  4. Implications /ˌɪm.plɪˈkeɪ.ʃənz/ (noun): Suggestions or consequences that may not be directly stated.
  5. Concerns /kənˈsɜːrnz/ (noun): Worries or anxieties about something.
  6. Securities /sɪˈkjʊər.ɪ.tiz/ (noun): Financial instruments that hold some monetary value and can be traded.

How much do you know?

Who rejected the bid by the Securities and Exchange Commission to regulate corporate cybersecurity controls?
A federal judge
The President
The CEO of SolarWinds
The SEC commissioner
Which company was the victim of a major cyberattack in 2020 in the case involving the SEC regulation bid?
SolarWinds
Microsoft
Apple
Google
What did the judge rule regarding the SEC's authority in the case of corporate cybersecurity controls?
The SEC has authority over all internal controls
The SEC has authority over financial controls only
The SEC has no authority over cybersecurity controls
The SEC has authority over all controls related to technology
Why was the judge's ruling seen as a relief for companies?
Companies were facing potential penalties for breaches by hackers
Companies were facing lawsuits from the SEC
Companies were being audited by the SEC
Companies were experiencing internal control issues
What did SolarWinds express gratitude for in the aftermath of the judge's ruling?
The SEC's actions
The industry's support
The hackers responsible for the cyberattack
The judge
What action can the SEC take following the rejection of its bid to regulate corporate cybersecurity controls in the case?
Continue regulating all internal controls
Pursue claims of securities fraud against SolarWinds
File a lawsuit against the judge
Impose fines on other companies
This question is required

Read more

Local News