  Case-based learning is a powerful pedagogical method of creating dialogue
between theory and practice. CBL is particularly suited to executive learning
as it instigates critical discussion and draws out relevant experiences. In
this paper we used a real-world case to teach Information Security Management
to students in Management Information Systems. The real-world case is described
in a legal indictment, T-mobile USA Inc v Huawei Device USA Inc. and Huawei
Technologies Co. LTD, alleging theft of intellectual property and breaches of
contract concerning confidentiality and disclosure of sensitive information.
The incident scenario is interesting as it relates to a business asset that has
both digital and physical components that has been compromised through an
unconventional cyber-physical attack facilitated by insiders. The scenario
sparked an interesting debate among students about the scope and definition of
security incidents, the role and structure of the security unit, the utility of
compliance-based approaches to security, and the inadequate use of threat
intelligence in modern security strategies.
