Call us now:
A False Claims Act(FCA) case against Georgia Tech, filed in July 2022 has been unsealed. In 2022 employees of Georgia Institute of Technology (GIT) filled an FCA claim alleging that Georgia Tech (GTRC, GIT and GTRI) did not provide adequate security to controlled unclassified Department of Defense information. As required under contract to the DoD in DFARS 252.204-7012 and although GIT self assessed its compliance to NIST SP 800-171. This was not implemented appropriately, evidenced by communications between the cybersecurity function and GIT departments.
This is the second recent case where a University has come under the spot light for failure to comply with DFARS. With Pennsylvania State charged in September 2023 (Originally filled in October 2022), for failing to provide adequate security for Covered Defence Information under DFARS 252.204-7012.
The Department of Justice is progressing with cases under its 2021 Civil Cyber Fraud Initiative. In A speech by the Deputy Assistant Attorney General Brian M. Boynton Delivers at the recent Federal Bar Association’s Qui Tam Conference.
(https://lnkd.in/eCYxNKSP)
He made clear that;
‘The department is currently investigating many more cases involving alleged violations of cybersecurity requirements. These cases have come from a variety of sources, including from whistleblowers and from companies making voluntary disclosures.’……’The department is currently investigating many more cases involving alleged violations of cybersecurity requirements. These cases have come from a variety of sources, including from whistleblowers and from companies making voluntary disclosures.’
One suspects there’s a pipeline building of FCA DFARS related cases, that is constrained by resources and not time. Rachel V. Rose, JD, MBA.
@Thaddeus Dziekanowski Brian D. McCarthy
Veritas GRC
#cybersecurity #cyberriskmanagement #dfars #falseclaimsact
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7170324430559133696