About SolarWinds Software

OneTrust understands that its products must meet the highest standards for security and privacy. To achieve this, OneTrust has established oversight and policy structures that identify and mitigate potential risks during development and service delivery. OneTrust has developed comprehensive and rigorous software security assurance processes and procedures that demonstrate the integrity of its products and address potential vulnerabilities.

With the release of SolarWinds® Orion® Platform software platform vulnerability, OneTrust conducted a thorough review of internal systems and procedures to confirm that OneTrust is not utilizing the Orion® software platform internally. OneTrust has been monitoring threat intelligence feeds and implementing controls as advised by third parties, such as FireEye and Microsoft, and confirming update of threat definition files to watch for new TTPs and IoCs of Solarwinds compromise attempts.

For more information, please review the Cybersecurity and Infrastructure Security Agency (CISA) alert, Active Exploitation of SolarWinds Software.