BQ78 said:
Ha, that is funny. GTRI is the repository for every IT security breach or attempted breach on the government and their contractors.
Those NIST requirements are easy to violate and CMMC 2.0 is going to be even rougher. Small businesses are being driven out of the government contract space.
The Associate Director of Cyber Security at Georgia Tech, Christopher Craig and his ISSE, Kyle Koza had to file suit because they were blamed for the FCA violations of Manos Antonakis' lab even though they tried to hold him accountable and alert Georgia Tech leadership to the violations.
Antonakakis claimed that his System Security Plan (SSP) contained a blanket exemption from having endpoint protection agents to detect malware from being installed. He also claimed to have all his computers protected by a firewall when several were outside the firewall.
https://www.insidethefalseclaimsact.com/wp-content/uploads/sites/860/2024/04/US-ex-rel-Craig-v.-Georgia-Tech-Research-Corp.pdfAfter the GTRI Office of Sponsored Programs confirmed that the Manos Lab was required to comply with the NIST 800-171 and shut off invoicing for the DARPA contract for lack of compliance, the GTRI CISO stepped in told Craig and Koza to close their investigation of the Manos Lab and that the issues had been resolved. Craig and Koza were given adverse performance evaluations and then filed suit for whistleblower protection. This was in Dec 2021, years after Antonakakis had been generating BS assessments supporting the Russia Hoax that were provided to the government as work products under the DARPA contract.
This is relevant context to the Mueller investigation because it shows that Antonakakis was just functioning as a hired gun to generate findings of cybersecurity exploitations when in fact his own lab was flagrantly ignoring compliance policies for the DARPA contract under which he was being paid.