The Phoenix Project: Remediation of a Cybersecurity Crisis at the University of Virginia

Abstract

This case was designed to facilitate discussion of how a cyberattack was remediated by a major public university. Students are challenged to think through how to best manage the remediation project, including the application of best practices such as risk management, stakeholder management, communication plans, outsourcing/procurement management, and cyberattack remediation. The Phoenix Project was a success from multiple perspectives, and as such provides a useful example of how to manage an unplanned, mission-critical project well.