Last month, the federal judge handling the SolarWinds case dismissed most of the SEC's claims against the company and its CISO. Most importantly, the court rejected the SEC's efforts to use the Securities Exchange Act of 1934's internal accounting controls to support an enforcement action targeting a public company's cybersecurity controls.