Close

Tim Brown

Tim Brown | Team8
Tim Brown

Biography

Tim Brown is a Partner and CISO in Residence for Team8. He is responsible for the Team8 CISO Village and working with the portfolio of incubators and early stage companies.  Tim Brown is also the former CISO for SolarWinds.   After the SUNBURST attack in December 2020, Tim Brown led the response and remediation efforts. Tim has spoken to thousands of customers and has been instrumental in all customer remediation support and services. He has worked closely with the SolarWinds® CEO in designing the future state of security and their “Secure by Design” philosophy. This new philosophy on software design will not only benefit SolarWinds but the industry as a whole, and it sets a precedent for responses to future cyberattacks. As a former Dell Fellow and CTO, Tim deeply understands the challenges and aspirations of the person responsible for driving digital innovation and change. Tim has over 25 years of experience, and his trusted advisor status has taken him from meeting with members of Congress and the Senate to the Situation Room in the White House. He’s also an avid inventor and holds 18 issued patents on security-related topics.

Sessions

13:05h
Conference | Congress Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Sunburst — Taking luck out of incident response

Tim Brown
Tim Brown Team8 Partner and CISO in Residence Speaker

2026-11-03 13:05 2026-11-03 13:30 Europe/Madrid Sunburst — Taking luck out of incident response
In 2020, the Russian SVR compromised SolarWinds' Orion build pipeline, and roughly 18,000 organizations downloaded the tainted update. Tim Brown, former CISO of SolarWinds, shares his first-person account of leading the response to SUNBURST, the SEC charges that followed, and five years to vindication.
Brown has often called that response lucky — the right help arrived, the team stayed aligned, transparency was a situational call rather than a plan, and the tabletop exercises they'd run hadn't covered this scenario. It worked, but it worked because of people and circumstance no organization can count on twice.
This keynote moves from that manual, human-driven response to what's possible today: how agentic AI is changing incident detection, triage, and response, and what it takes to replace luck with design — rehearsed, scenario-flexible playbooks and tooling that don't depend on who happens to be in the room when the call comes in.
Auditorium II
Tue 3
13:05h - 13:30h Auditorium II Full Congress Pass
● OCTOBER · CYBERSECURITY MONTH

October is Cyber Month.

Celebrate it with BCC26.
Full Congress Pass
€225
Expo Plus
€150
Valid until 31 October · #BCC26
Close