Teaching Security Management with Case Studies: Experiences and Evaluation

Teaching with case studies is an effective method that actively engages students. This paper describes two case studies we developed and our experiences teaching security management with these two case studies. The case studies were used to teach risk management and incident response planning. Each case study includes the learning objectives, one/more case scenarios and a series of case discussion questions. The student feedback on these case studies was very positive. Our future work will include refining the developed case studies, continuing to evaluate their effectiveness, developing more case studies, and exploring different ways of teaching case studies.