Sunburst: A Team‑Level Perspective on Navigating a Major Incident

Major incidents are often discussed from the CISO’s vantage point — but the real story lives within the teams who carry the weight day after day. This session offers a ground‑level view of the Sunburst breach from the perspective of the direct and extended teams responsible for responding, rebuilding, and sustaining operations in the months and years that followed. Attendees will explore what preparation looked like before the incident, how teams mobilized in the earliest hours, what actions proved most critical, and where additional training or planning would have made a meaningful difference. After a brief scene‑setting introduction, the session shifts into an interactive Q&A designed for candid, practitioner‑focused discussion. Come ready with the questions you’ve always wanted to ask — this conversation is built for real insight from those who lived it. Tim Brown joined SolarWinds in 2017 as Vice President of Security and is the former CISO for SolarWinds, overseeing internal IT security, product security, and security strategy. After the SUNBURST attack in December 2020, he led…