As former SolarWinds CISO Timothy Brown faces charges from the SEC for fraud and internal control failures tied to undisclosed cybersecurity risks, it’s clear that the liability landscape for security executives has changed. Although CISOs have always carried the complex responsibility of securing critical systems and data, the SEC’s decision to assign personal liability to Brown for failing to fully disclose these risks has signaled a major shift for the CISO community.

Source: SC Magazine