Publications
Publications
Show Results For
-
All HBS Web
(111)
- Faculty Publications (32)
Page 1 of
32
Results
→
- March 2023
- Teaching Note
Ransomware at Springhill Medical Center
By: Suraj Srinivasan and Li-Kuan Ni
In July, 2019, Springhill Medical Center (“SMC”) in Mobile, Alabama fell prey to a malicious ransomware attack that crippled the hospital’s internal network systems and public-facing web page. While the hospital rushed to securely restore the network, medical personnel...
View Details
Keywords:
Disruption;
Communication;
Communication Strategy;
Decision Making;
Decision Choices and Conditions;
Judgments;
Corporate Accountability;
Corporate Disclosure;
Corporate Governance;
Governance Controls;
Policy;
Employees;
News;
Cybersecurity;
Digital Strategy;
Information Infrastructure;
Information Management;
Internet and the Web;
Crisis Management;
Business or Company Management;
Resource Allocation;
Risk Management;
Negotiation Tactics;
Failure;
Business and Stakeholder Relations;
Attitudes;
Behavior;
Perception;
Reputation;
Trust;
Public Opinion;
Social Issues;
Health Industry;
Alabama;
United States
- March 2023
- Teaching Note
Ransomware Attack at Colonial Pipeline Company
By: Suraj Srinivasan and Li-Kuan Ni
On the morning of May 7, 2021, Colonial Pipeline Company became aware that the company had been the victim of a malicious ransomware attack that had stolen and locked up company data. The extortionists demanded 75 bitcoins (worth about $4.4 million at the time) in...
View Details
Keywords:
Disruption;
Communication;
Communication Strategy;
Decision Making;
Decision Choices and Conditions;
Judgments;
Corporate Accountability;
Corporate Disclosure;
Corporate Governance;
Governance Controls;
Policy;
Employees;
News;
Cybersecurity;
Digital Strategy;
Information Infrastructure;
Information Management;
Internet and the Web;
Crisis Management;
Business or Company Management;
Resource Allocation;
Risk Management;
Negotiation Tactics;
Failure;
Business and Stakeholder Relations;
Attitudes;
Behavior;
Perception;
Reputation;
Trust;
Public Opinion;
Social Issues;
Infrastructure;
Distribution Industry;
United States;
Alabama
- March 2023
- Case
Ransomware Attack at Colonial Pipeline Company
By: Suraj Srinivasan and Li-Kuan Ni
On the morning of May 7, 2021, Colonial Pipeline Company became aware that the company had been the victim of a malicious ransomware attack that had stolen and locked up company data. The extortionists demanded 75 bitcoins (worth about $4.4 million at the time) in...
View Details
Keywords:
Disruption;
Communication;
Communication Strategy;
Decision Making;
Decision Choices and Conditions;
Judgments;
Corporate Accountability;
Corporate Disclosure;
Corporate Governance;
Governance Controls;
Policy;
Employees;
News;
Cybersecurity;
Digital Strategy;
Information Infrastructure;
Information Management;
Internet and the Web;
Crisis Management;
Business or Company Management;
Resource Allocation;
Risk Management;
Negotiation Tactics;
Failure;
Business and Stakeholder Relations;
Attitudes;
Behavior;
Perception;
Reputation;
Trust;
Public Opinion;
Social Issues;
Infrastructure;
Distribution Industry;
United States;
Alabama
- February 2023
- Case
Ransomware Attack at Springhill Medical Center
By: Suraj Srinivasan and Li-Kuan (Jason) Ni
In July, 2019, Springhill Medical Center (“SMC”) in Mobile, Alabama fell prey to a malicious ransomware attack that crippled the hospital’s internal network systems and public-facing web page. While the hospital rushed to securely restore the network, medical personnel...
View Details
Keywords:
Disruption;
Communication;
Communication Strategy;
Decision Making;
Decision Choices and Conditions;
Judgments;
Corporate Accountability;
Corporate Disclosure;
Corporate Governance;
Governance Controls;
Policy;
Employees;
News;
Cybersecurity;
Digital Strategy;
Information Infrastructure;
Information Management;
Internet and the Web;
Crisis Management;
Resource Allocation;
Risk Management;
Negotiation Tactics;
Failure;
Business and Stakeholder Relations;
Attitudes;
Behavior;
Perception;
Reputation;
Trust;
Public Opinion;
Social Issues;
Health Industry;
United States;
Alabama
- October 2022
- Background Note
Note on Cyberattacks and Regulatory Regimes
Describes common types of cyberattacks on enterprises and their costs, as well as the fragmentary regulatory regimes through which U.S. states and regulatory agencies at the start of 2021 attempted to encourage disclosure of cyberattacks and to pursue enforcement...
View Details
- August 2022
- Case
Atlanta Ransomware Attack (A)
By: Amit Goldenberg and Julian Zlatev
This case describes the March 2018 Ransomware attack on the information technology (IT) systems of the city of Atlanta and the response by Mayor Keisha Lance Bottoms and her administration. The case includes a brief background on Bottoms and her young administration at...
View Details
Keywords:
Crime and Corruption;
Decision Making;
Cost vs Benefits;
Decision Choices and Conditions;
Decisions;
Ethics;
Values and Beliefs;
Government and Politics;
Government Administration;
Information Technology;
Cybersecurity;
Information Management;
Leadership;
Management;
Crisis Management;
Management Teams;
Negotiation;
Risk and Uncertainty;
Social Psychology;
Perception;
Personal Characteristics;
Perspective;
Power and Influence;
Society;
Public Administration Industry;
United States;
Georgia (state, US);
Atlanta
- August 2022
- Supplement
Atlanta Ransomware Attack (B)
By: Amit Goldenberg and Julian Zlatev
This case describes the March 2018 Ransomware attack on the information technology (IT) systems of the city of Atlanta and the response by Mayor Keisha Lance Bottoms and her administration. The case includes a brief background on Bottoms and her young administration at...
View Details
Keywords:
Crime and Corruption;
Decision Making;
Cost vs Benefits;
Decision Choices and Conditions;
Decisions;
Ethics;
Values and Beliefs;
Government and Politics;
Government Administration;
Information Technology;
Cybersecurity;
Information Management;
Leadership;
Management;
Crisis Management;
Management Teams;
Negotiation;
Risk and Uncertainty;
Social Psychology;
Perception;
Personal Characteristics;
Perspective;
Power and Influence;
Society;
Public Administration Industry;
United States;
Atlanta;
Georgia (state, US)
- 2022
- Article
Data Poisoning Attacks on Off-Policy Evaluation Methods
By: Elita Lobo, Harvineet Singh, Marek Petrik, Cynthia Rudin and Himabindu Lakkaraju
Off-policy Evaluation (OPE) methods are a crucial tool for evaluating policies in high-stakes domains such as healthcare, where exploration is often infeasible, unethical, or expensive. However, the extent to which such methods can be trusted under adversarial threats...
View Details
- May 2022
- Case
TikTok and National Security: Investment in an Age of Data Sovereignty?
By: Jeremy Friedman, Sarah Bauerle Danzman and David Lane
This case covers TikTok’s purchase of Musical.ly and the reaction of the United States government, including the review of the purchase by the Committee on Foreign Investment in the United States (CFIUS) and the reaction of the presidential administration of Donald...
View Details
- March 2022
- Article
How to Prioritize the Improvement of Open-Source Software Security
By: Frank Nagle
- 2022
- White Paper
Census II of Free and Open Source Software - Application Libraries
By: Frank Nagle, James Dana, Jennifer Hoffman, Steven Randazzo and Yanuo Zhou
Produced in partnership with Harvard Laboratory for Innovation Science (LISH) and the Open Source Security Foundation (OpenSSF), Census II is the second investigation into the widespread use of Free and Open Source Software (FOSS). The Census II effort utilizes data...
View Details
- March 2022
- Article
From Proprietary to Collective Governance: How Do Platform Participation Strategies Evolve?
By: Siobhan O'Mahony and Rebecca Karp
When platform leaders change the rules guiding who can access and control a platform, the strategies of those who create value from the platform can be upended. Little research examines how platform participants adapt their strategies when a platform leader changes the...
View Details
- January 2022 (Revised January 2022)
- Supplement
Uber in China (C): The Cost of Success for Didi
By: William C. Kirby and Noah B. Truwit
On June 30, 2021, ride-hailing giant Didi Chuxing (Didi) raised $4.4 billion in its initial public offering (IPO) on the New York Stock Exchange (NYSE), the largest IPO of a Chinese company listed on an American exchange since Alibaba raised $25 billion in 2014....
View Details
Keywords:
China;
Uber;
Didi Chuxing;
Start-up Growth;
Regulation;
Ride-sharing;
Transportation;
Business Startups;
Business and Government Relations;
Cross-Cultural and Cross-Border Issues;
Growth and Development;
Policy;
Competition;
Laws and Statutes;
Transportation Industry;
Technology Industry;
China
- September 2, 2021
- Article
The Digital Economy Runs on Open Source. Here's How to Protect It.
By: Hila Lifshitz-Assaf and Frank Nagle
Free and open source software (FOSS) is essential to much of the tech we use every day—from cars to phones to planes to the cloud. While traditionally, it was developed by an army of volunteer developers and given away for free, companies are increasingly taking a more...
View Details
- 2021
- Article
Evidence of Decreasing Internet Entropy: The Lack of Redundancy in DNS Resolution by Major Websites and Services
By: Samantha Bates, John Bowers, Shane Greenstein, Jordi Weinstock, Jonathan Zittrain and Yunhan Xu
This paper analyzes the extent to which the Internet’s global domain name resolution (DNS) system has preserved its distributed resilience given the rise of cloud-based hosting and infrastructure. We explore trends in the concentration of the DNS space since at least...
View Details
- April 2021
- Case
Transforming BlackBerry: From Smartphones to Software
By: Ranjay Gulati and Nicole Tempest Keller
On the verge of failure, BlackBerry brought in John Chen as CEO in 2013 to orchestrate a bold turnaround of the company. Once an iconic leader in the smartphone market, BlackBerry was best known for its tactile QWERTY keyboard, strong security, and a focus on business...
View Details
Keywords:
Pivot;
Managing Change;
Turnaround;
Smartphone;
Change Management;
Leading Change;
Transformation;
Organizational Change and Adaptation;
Digital Platforms;
Change;
Information Infrastructure;
Applications and Software;
Competitive Strategy;
Cybersecurity;
Technology Industry;
Transportation Industry;
Canada
- April 2020
- Supplement
Cisco Systems and OpenDNS: Strategic Integration (B)
By: Andy Wu and David Wang
With more than 72,000 employees and revenues approaching the $50B mark, Cisco Systems is one of the largest information technology and networking firms globally. As the company grew and expanded into different lines of businesses, Cisco consistently looked outwards for...
View Details
- April 29, 2020
- Article
The Case for AI Insurance
By: Ram Shankar Siva Kumar and Frank Nagle
When organizations place machine learning systems at the center of their businesses, they introduce the risk of failures that could lead to a data breach, brand damage, property damage, business interruption, and in some cases, bodily harm. Even when companies are...
View Details
- Article
Cybersecurity Features of Digital Medical Devices: An Analysis of FDA Product Summaries
By: Ariel Dora Stern, William J. Gordon, Adam B. Landman and Daniel B. Kramer
Objectives:
To more clearly define the landscape of digital medical devices subject to U.S. Food and Drug Administration (FDA) oversight, this analysis leverages publicly available regulatory documents to characterise the prevalence and trends of software and... View Details
To more clearly define the landscape of digital medical devices subject to U.S. Food and Drug Administration (FDA) oversight, this analysis leverages publicly available regulatory documents to characterise the prevalence and trends of software and... View Details
- April 2019 (Revised June 2019)
- Case
Voatz
By: Mitchell Weiss and Maddy Halyard
Nimit Sawhney scrolled through the tweet stream on his phone, unsure of what to make of it on August 6, 2018 or how to respond. Voatz, the Boston-based startup he co-founded and led, provided a mobile-voting platform. In March of 2018, had successfully piloted the new...
View Details