The Georgia Tech case centers on the university’s alleged failure to follow NIST cybersecurity controls required by DoD contracts.