The SEC case against SolarWinds and their CISO has opened a hornet’s nest and half of the cybersecurity community is up in arms, claiming that the SEC is unfairly making CISOs the scapegoats, when they are only trying to do their difficult job. WRONG!
This case is not a general attack on CISOs, but rather a specific case of fraud that intentionally and unfairly deceived investors.
SEC Complaint (.pdf) https://www.sec.gov/files/litigation/complaints/2023/comp-pr2023-227.pdf