In line with growing concerns about cybersecurity, corporations and legal departments have been assessing the implications of the Securities Exchange Commission’s lawsuit against SolarWinds on their own operations. This focus came to light following a recent New York Times article, which brought the matter to the fore of corporate discussions.
The lawsuit reportedly sets precedent for the handling and reporting of cybersecurity breaches, which is compelling corporate boards and security departments to rethink their existing strategies. It appears that it isn’t only these corporate entities who are keenly watching the SEC’s increased emphasis on cybersecurity and data breaches.
In reality, any firm, regardless of scale, that deals with sensitive, personal, or confidential information could be subjected to similar scrutiny from the SEC. On this premise, it’s rational that corporate boards and security departments are expending substantial effort and resources to revisit and fortify their cybersecurity policies and systems.
To further expedite the effort to bridge potential cybersecurity gaps, firms might need to consider employing or consulting with certified information system security professionals (CISO’s) to remain compliant with regulations and to respond to or prevent potential threats. Potential intrusion or data breach complaints submitted to the SEC by hackers could also be a new risk that firms need to address in their management strategies.
The legal implications of data breaches and vulnerabilities are far-reaching, constantly calling for companies to comply with changing regulations and to stay ahead of potential threats. Through the case of SolarWinds, it is clear that no company, regardless of its size or industry, is immune from these digital threats, calling for a consistent, robust and forward-thinking approach to cybersecurity management.