After cybersecurity lab wouldn’t use AV software, US accuses Georgia Tech of fraud --According to these former employees, senior leadership at Georgia Tech gave in to the demands of these researchers to avoid compliance with cybersecurity regulations because “of the money [the researchers] bring in” from government contracts. As one former employee described it, Georgia Tech had a cybersecurity compliance “culture of somebody up the line is going to overturn me... [so] I might as well go ahead and ignore the policy.” Another former employee described Georgia Tech’s “attitude” to its “obligations to meet cybersecurity requirements” as “oh, I don’t want to bother with that.”
According to these former employees, senior leadership at Georgia Tech gave in to the demands of these researchers to avoid compliance with cybersecurity regulations because “of the money [the researchers] bring in” from government contracts. As one former employee described it, Georgia Tech had a cybersecurity compliance “culture of somebody up the line is going to overturn me... [so] I might as well go ahead and ignore the policy.” Another former employee described Georgia Tech’s “attitude” to its “obligations to meet cybersecurity requirements” as “oh, I don’t want to bother with that.”
https://arstechnica.com/security/2024/08/oh-your-cybersecurity-researchers-wont-use-antivirus-tools-heres-a-federal-lawsuit/