Menu
New SolarWinds CEO sets out post-attack security roadmap

New SolarWinds CEO sets out post-attack security roadmap

Sudhakar Ramakrishna claims “humility, ownership, transparency” will be his guiding principles

Credit: SolarWinds

The new chief executive officer of SolarWinds has laid out a lengthy roadmap to cyber security recovery in the wake of its major hacking attack. 

Sudhakar Ramakrishna joined the network and application monitoring company before ithe discovery of the supply-chain attack, allegedly at the hands of Cozy Bear, a hacker group linked to the Russian government. 

The group is said to have gained access to computer systems belonging to multiple US government departments as far back as last March via SolarWinds’ Orion Platform, its key network and applications monitoring product. 

Ramakrishna, formerly the CEO of Pulse Secure, has now set down an extensive security agenda he says will be guided by “humility, ownership, transparency, focused action, and bias towards customer safety”. 

The most crucial of the next steps will involve securing SolarWinds’ internal environment through “deploying additional, robust threat protection and threat hunting software” on its network, particularly across developer environments. 

The company is currently working with CrowdStrike to get to the root cause of the attack. 

Sudhakar Ramakrishna (SolarWinds)Credit: SolarWinds
Sudhakar Ramakrishna (SolarWinds)

Meanwhile, Ramakrishna said the company would be resetting credentials for all users in the corporate and product development domains and for all accounts used in building the Orion Platform. 

It will also “consolidate” remote and cloud access avenues for accessing the SolarWinds network and applications by enforcing multi-factor authentication (MFA). 

In terms of product development, SolarWinds will now move to a new build environment with “stricter access controls and deploying mechanisms” to allow for reproducible builds from multiple independent pipelines. 

On top of this, other measures will include: additional automated and manual checks to ensure compiled releases match source code; re-signing all Orion Platform software with new digital certificates and expanding its vulnerability management program. 

Penetration testing will become a more regular component of SolarWinds’ cyber strategy with Ramakrishna vowing to resolve potential issues with urgency. 

“We expect these efforts and plans to guide our journey to becoming an even safer and more secure company, and we understand that there is much more work to be done,” he said in the blog post. “In the coming weeks, we will plan to share further plans and programs that we believe will help us achieve that goal.” 


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags SolarWindsSudhakar RamakrishnaPulse Secure

Featured

Slideshows

The Kiwi channel gathers for the 2020 Reseller News Women in ICT Awards

The Kiwi channel gathers for the 2020 Reseller News Women in ICT Awards

Hundreds of leaders from the New Zealand IT industry gathered at the Hilton in Auckland on 17 November to celebrate the finest female talent in the Kiwi channel and recognise the winners of the Reseller News Women in ICT Awards (WIICTA) 2020.

The Kiwi channel gathers for the 2020 Reseller News Women in ICT Awards
Leading female front runners honoured at the 2020 Reseller News Women in ICT Awards

Leading female front runners honoured at the 2020 Reseller News Women in ICT Awards

The leading female front runners of the New Zealand ICT industry joined together for the annual Reseller News Women in ICT Awards event at the Hilton in Auckland, during which hundreds of guests celebrated 13 outstanding individuals who won awards, chosen from more than 50 finalists representing over 30 organisations.

Leading female front runners honoured at the 2020 Reseller News Women in ICT Awards
Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners

Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners

More than 500 channel leaders gathered in Auckland on 21 October at the ​Reseller News Innovation Awards ​2020 to celebrate the achievements of the New Zealand technology industry's top partners, start-ups, vendors, distributors and individuals.

Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners
Show Comments