"We allege that, for years, SolarWinds and Brown ignored repeated red flags about SolarWinds' cyber risks, which were well-known throughout the company and led one of Brown's subordinates to conclude: 'We're so far from being a security-minded company,'" SEC Division of Enforcement Director Gurbir Grewal said in a press release. "Rather than address these vulnerabilities, SolarWinds and Brown engaged in a campaign to paint a false picture of the company's cyber controls environment, thereby depriving investors of accurate material information."