The President Ordered a Board to Probe a Massive Russian Cyberattack. It Never Did.

This investigative report details how the DHS-housed Cyber Safety Review Board did not conduct a public SolarWinds review despite a White House directive, instead focusing first on Log4j and later issuing a scathing assessment of Microsoft’s security failures after a 2023 China-linked breach, while GAO accepted alternative reviews; critics including Sen. Ron Wyden and security experts question the board’s independence, transparency, and conflicts of interest, and DHS proposes legislation to provide the board with permanent authority, resources, and limited subpoena power.