Feature Article

SolarWinds Supply Chain Attack

Get the advisory and be prepared

In December 2020, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an emergency alert for a cyber attack that has already affected numerous federal agencies and may affect many other organizations. It involves the compromise of an Information Technology (IT) infrastructure management platform called Orion, run by the company SolarWinds. The compromised versions of the software can allow malicious actors to gain access to organizations’ networks.

The impacts of this attack are far-reaching and will take time to fully assess. SolarWinds’ platform is reportedly used by more than 400 of the U.S. Fortune 500 companies, top U.S. telecommunications and accounting firms, and hundreds of universities and colleges worldwide. It is critical that risk managers and C-suites work with their chief information security officer (CISO) or key information security (IS) personnel to understand their potential business risks and options for mitigating from this and other supply chain attacks.

To help protect its clients and the public from this and other cyber attacks, FM Global is making its SolarWinds Cyber Advisory available. The advisory includes short-term and longer-term recommended actions you can take to protect your systems.

Download Cyber Advisory: SolarWinds Supply Chain Attack