First, the SEC claimed that SolarWinds and its CISO made material misstatements and omissions about the company's cybersecurity practices and risks in numerous public documents, including in the company website's security statement, various press releases and blog posts, periodic reports, and Forms S-1 and 10-K, and sought to hold the CISO liable for aiding and abetting SolarWinds' violations due to his involvement in drafting and reviewing the statements touting the company's cybersecurity practices.