This case explores the challenges faced by the University of Virginia (UVA) in defending against sophisticated social engineering cyberattacks. Despite proactive measures, UVA Chief Information Security Officer Jason Belford and his team grapple with evolving threats that exploit human vulnerabilities. The case examines the university's cybersecurity landscape, detailing the methods used by cybercriminals and the institution's response strategies, including phishing training and awareness programs. Students are tasked with analyzing the data from phishing simulations and developing new initiatives to foster a culture of resilience. The case provides a platform for discussing the complexities of cybersecurity in large institutions and the critical importance of organizational awareness and proactive defense mechanisms.
This case, a follow-up to "WillowTree: Project Driven with a Product Mindset (A)" (UVA-S-0338), examines WillowTree, a digital products company that is navigating the implications of employees returning to the office after the COVID-19 pandemic lockdowns and also coping with increased employee desire to continue working from home. It explores the shift in client contract preferences toward more flexible, team-oriented models and the subsequent adjustments in team formation and collaboration strategies. The case also delves into how WillowTree measured and responded to client and team sentiment, and the effect transitioning back to office work had on WillowTree's employee satisfaction and organizational culture. The case highlights the resilience and adaptability of digital businesses that previously relied on colocated teams to develop and deliver its products. The managerial dilemma posed by this follow-up case is: What is an optimal policy for returning to work in the office? This decision will define the company's future.
WillowTree began as a small digital products company in 2007. By 2020, it had more than 500 full-time team members operating out of offices in four locations, and it had launched hundreds of digital products, including mobile apps, websites, voice assistants, and TV experiences. But also in 2020, WillowTree was facing the most significant challenge in its 12 years of corporate existence-a global pandemic. By analyzing how WillowTree blends project and product management, students will gain insights into how a digital products services company integrates a product mindset within contract-based projects, and get the opportunity to brainstorm how WillowTree can further adapt to provide a unique value proposition during the pandemic and beyond.
CarMax, based in Richmond, Virginia, is the largest retailer of used cars in the United States. Over the past several years leading up to 2019, CarMax has undergone a major digital transformation, integrating agile, lean, and user experience (UX) design best practices to become a customer-centric, product-driven organization. In this case, CarMax is facing new competitors (e.g., digital native players Carvana and CarsDirect), changing consumer shopping behavior, and technological advancements in electric cars, autonomous vehicles, and ride-sharing platforms. In order to maintain its dominant position in the used-car marketplace, CarMax must continue to evolve from a traditional brick-and-mortar model marked by legacy corporate practices (such as annual roadmaps and budget cycles) to a product-focused, omnichannel experience that delivers significant value to its customers.
This case was designed to facilitate discussion of how a cyberattack was remediated by a major public university. Students are challenged to think through how to best manage the remediation project, including the application of best practices such as risk management, stakeholder management, communication plans, outsourcing/procurement management, and cyberattack remediation. The Phoenix Project was a success from multiple perspectives, and as such provides a useful example of how to manage an unplanned, mission-critical project well.