This is an important read. A former senior manager at a Virginia-based government contractor has been indicted in the District of Columbia on…

← Back to Blog

This is an important read. A former senior manager at a Virginia-based government contractor has been indicted in the District of Columbia on charges of major government fraud, wire fraud, and obstructing federal audits. Related to a contractor’s cloud compliance to FedRAMP.

The indictment alleges that the individual carried out a multi-year scheme to mislead federal agencies about the security of a cloud-based platform used by the U.S. Army and other government clients. The indictment alleges that a cloud platform marketed as a secure environment for Federal Agencies was non-compliant. The platform in question should have been FedRAMP compliant and have complied with the Department of Defence’s Risk Management Framework.

If convicted, the charges carry a maximum penalty of 20 years in prison for wire fraud, a maximum penalty of 10 years in prison for major government fraud, and a maximum penalty of five years in prison for each count of obstruction of a federal audit.

The challenge for the U.S. Department of Justice and industry is where to start with oversight, assurance evaluation of regulatory compliance against US federal cyber laws. With the scope of compliance being national and international companies, it’s like ‘Shooting fish in a barrel’ for regulators.

The Indictment sends a clear, strong message about compliance with Federal Regulations.

@Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA

Veritas GRC

#cybersecurity

https://lnkd.in/e5cxdHmr

https://lnkd.in/eapDrbxG.

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7404797223877750784

Categories

Cyber Risk Management, Cybersecurity, Regulation & Compliance

Tags