Penn State Cybersecurity False Claims Scandal: Meet the Whistleblower
GRC Academy11 Marras 2024

Penn State Cybersecurity False Claims Scandal: Meet the Whistleblower

Introducing the Penn State Whistleblower.

In this episode, the whistleblower explains how he tried to stop Penn State from misrepresenting their NIST 800-171 compliance to the DoD and what he has faced since he blew the whistle!

Whistleblower attorney Julie Bracker also shares what the media got wrong in this case and the latest on the Georgia Tech FCA case!

Here are a few highlights from this episode:

- Hear directly from the whistleblower in this False Claims Act case

- What the media got wrong

- Recommendations to universities

- Advice for other whistleblowers

Matthew Decker was the Chief Information Officer at the Applied Research Laboratory at Penn State from 2015 until 2023 and the interim Vice Provost and CIO responsible for all of Penn State from January 2016 until September 2016. Matthew currently serves as the Chief Data and Information Officer at NASA’s Jet Propulsion Laboratory since 2023.

It was fascinating to learn that the university assumed compliance with their own AD95 security policy meant they were automatically compliant (at least to some measure) with NIST 800-171. This is a great reminder that the details always matter!

Special thanks to Matt for sharing his story with us, and to Julie Bracker for coordinating this interview!

Follow Julie on LinkedIn: https://www.linkedin.com/in/juliekeetonbracker/

Bracker & Marcus LLC Website: https://www.fcacounsel.com/

Connect with Matt on LinkedIn: https://www.linkedin.com/in/matt-decker-cio/

Whistleblower's Handbook: https://www.amazon.com/New-Whistleblowers-Handbook-Step-Step/dp/1493028812/

-----------

Thanks to our sponsor Vanta!

Want to save time filling out security questionnaires?

Experience questionnaire automation here: https://vanta.com/grcacademy

-----------

Governance, Risk, and Compliance Academy (GRC) Academy is a training and research platform!

Online GRC Training: https://grcacademy.io/courses/?utm_source=podcast&utm_medium=s1-e37&utm_campaign=courses

#whistleblower #cmmc #cybersecurity

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(55)

Deltek's Journey to FedRAMP Moderate Equivalency

Deltek's Journey to FedRAMP Moderate Equivalency

I have a surprise for you --- the last GRC Academy podcast!In this last episode, Michael Greenman from Deltek shares the journey to FedRAMP Moderate Equivalency for Deltek Costpoint GovCon Cloud Moder...

18 Marras 202536min

What's Next for GRC Academy and Jacob Hill

What's Next for GRC Academy and Jacob Hill

I have an incredible announcement to share! 👀Before that though, let me share some of my history with you.Back in 2016, I started a side-business called TEKFused LLC focused on web design/hosting.Fas...

4 Syys 20253min

The Business Case for CMMC - Surviving DOGE

The Business Case for CMMC - Surviving DOGE

CMMC certification could be the key to surviving DOGE cuts! 👀In this episode, I’m joined by Derek Kernus of Aethon Security to discuss the business case for CMMC!This episode was really refreshing to...

19 Kesä 202552min

The Compliance Playbook to Cybersecurity

The Compliance Playbook to Cybersecurity

"Compliance is the security referee - frameworks are the playbooks."In this episode, I’m joined by Tim Golden, Founder of Compliance Scorecard, to unpack the misunderstood, and mission-critical world ...

5 Kesä 202531min

How HITRUST Fixes What’s Broken in Cybersecurity Compliance

How HITRUST Fixes What’s Broken in Cybersecurity Compliance

Cybersecurity frameworks can learn a lot from HITRUST.In this episode, Ryan Patrick of HITRUST explains how HITRUST approaches the assurance problem, from centralizing the certification process to fre...

27 Touko 202555min

CUI Masterclass with Ryan Bonner

CUI Masterclass with Ryan Bonner

"Outread the others" - that's how Ryan Bonner mastered CUI.If you're confused about Controlled Unclassified Information (CUI) - you're not alone. Many defense contractors (not to mention DoD themselve...

9 Touko 202551min

Small Business Achieves CMMC Level 2 Certification: Reynolds Construction's DIY Success Story

Small Business Achieves CMMC Level 2 Certification: Reynolds Construction's DIY Success Story

HR guy leads his company to CMMC level 2 certification! 👀In this episode I’m joined by Eric Fields of Reynolds Construction to learn how he led his business to CMMC level 2 certification!I call him "...

24 Huhti 202536min

The FASTEST Way to CMMC Compliance - CUI Enclaves

The FASTEST Way to CMMC Compliance - CUI Enclaves

CMMC rolls out in a few months and there are STILL companies who are JUST getting started!In this episode I’m joined by Daniel Akridge of Summit 7 to talk about the real challenges facing the Defense ...

10 Huhti 202558min