August 26, 2024 at 12:12PM
The US has intervened in a whistleblower suit against Georgia Tech and GTRC for alleged failure to meet cybersecurity requirements, submitted false scores to win DoD contracts, and violated federal regulations. The complaint also alleges failure to update security plans and install/maintain security applications, resulting in a fraudulent cybersecurity assessment score. The US is now responsible for litigating the case.
Key takeaways from the meeting notes:
– The US government has intervened in a whistleblower lawsuit against Georgia Institute of Technology (Georgia Tech) and Georgia Tech Research Corporation (GTRC) related to alleged failure to meet cybersecurity requirements for Department of Defense (DoD) contracts.
– Two whistleblowers, Christopher Craig and Kyle Koza, who were previously senior members of the defendants’ cybersecurity compliance team, have sued Georgia Tech under the False Claims Act, alleging submission of false summary level scores to win DoD contracts.
– Allegations include failure to implement cybersecurity controls, submission of false cybersecurity assessment scores, and non-compliance with federal cybersecurity regulations pertaining to DoD contracts.
– The lawsuit was filed under the qui tam provision of the False Claims Act, and the US government has intervened and taken responsibility for litigating the case.
– Violations of the False Claims Act can result in liability for three times the government’s losses, plus penalties.
These takeaways summarize the key points related to the whistleblower lawsuit and the US government’s intervention in the case.