3 ms·

The title is false. The 2B has nothing to do with lying about IT security. The 2B went to applied research lab and the CISO was at Penn state university. 2 comp

The title is false. The 2B has nothing to do with lying about IT security. The 2B went to applied research lab and the CISO was at Penn state university. 2 completely different entities. Penn state university had the IT fraud. Applied research lab (arl) had 2b contract ceiling (also incorrect, not awarded 2b). The arl ciso reported the univ ciso for IT fraud. Corrected article. https://www.psucollegian.com/news/campus/penn-state-whistleblower-alleges-university-did-not-protect-sensitive-government-information-pass-compliance-requirements/article_7d4a1f46-4921-11ee-b89c-5bb527580f51.html https://www.psucollegian.com/news/campus/penn-state-whistleb...

zaroth 3y ago
Is it just me or is that an insane amount of money to be handing out?! At first I assumed it was a typo…
- ipunchghosts 3y ago
  Its ceiling, not actually money.
- whimsicalism 3y ago
  Big research unis get big research grants, they’re the fountainhead of human knowledge.
visviva 3y ago
"The allegations were brought by Matthew Decker, who served as the chief information officer for Penn State’s Applied Research Laboratory"
- ipunchghosts 3y ago
  The arl ciso reported on the univ ciso. 2 separate organizations.
revengeforbees 3y ago
I agree that the article is a bit vague on that. However, at the university I work for, the team that manages our government cloud also works on our public cloud. The compliance team for the GCC environment and the engineering team I am on all report up the same silo. It is not uncommon for universities to have wholly owned but logically separated research subsidiaries. This solves two problems. One being the elevated level of security needed at the research subsidiaries would not be acceptable to general staff and faculty. The second being the ease of management. The separation makes it easier to delineate where sensitive data can go.
lolinder 3y ago
You are correct. The full complaint can be found embedded in this local news article, and it clarifies this: https://www.wtaj.com/news/local-news/lawsuit-penn-state-being-sued-for-claims-of-falsified-reports-of-cybersecurity/ https://www.wtaj.com/news/local-news/lawsuit-penn-state-bein...

zaroth 3y ago

Is it just me or is that an insane amount of money to be handing out?! At first I assumed it was a typo…

ipunchghosts 3y ago
Its ceiling, not actually money.
whimsicalism 3y ago
Big research unis get big research grants, they’re the fountainhead of human knowledge.

visviva 3y ago

"The allegations were brought by Matthew Decker, who served as the chief information officer for Penn State’s Applied Research Laboratory"

ipunchghosts 3y ago
The arl ciso reported on the univ ciso. 2 separate organizations.

revengeforbees 3y ago

I agree that the article is a bit vague on that. However, at the university I work for, the team that manages our government cloud also works on our public cloud. The compliance team for the GCC environment and the engineering team I am on all report up the same silo. It is not uncommon for universities to have wholly owned but logically separated research subsidiaries. This solves two problems. One being the elevated level of security needed at the research subsidiaries would not be acceptable to general staff and faculty. The second being the ease of management. The separation makes it easier to delineate where sensitive data can go.

lolinder 3y ago

You are correct. The full complaint can be found embedded in this local news article, and it clarifies this: https://www.wtaj.com/news/local-news/lawsuit-penn-state-being-sued-for-claims-of-falsified-reports-of-cybersecurity/ https://www.wtaj.com/news/local-news/lawsuit-penn-state-bein...