Airport Blues: Passengers Grounded by Microsoft-CrowdStrike Outage

On July 19, 2024, CrowdStrike, one of the largest players in the global endpoint detection and response software market, pushed a single configuration file as an update to its Falcon Sensor program. This program is commonly used by Microsoft enterprise computers running on the Windows platform. The file update was meant to enable Falcon to detect if hackers were using novel ways to hack end-user machines, but it caused a logic error that led to computers crashing around the world.

Students are asked to put themselves in the shoes of an Information Technology (IT) Support Technician at Singapore’s Changi Airport Group (CAG), who has been sent to assist the ground crew of Kuaifei, an airline operating at the airport. They will need to analyse how the incident was discovered, mitigated, managed, and communicated.

This case is intended for use in an enterprise solutions management course in an information systems undergraduate programme. Students should be able to achieve the following learning objectives: apply ITIL (Information Technology Infrastructure Library) incident management frameworks to analyse large-scale IT outages, and understand key ITIL incident management stages; evaluate technical root cause analysis; and design incident response protocols for mission-critical systems.

Inspection copies and teaching notes are available for university faculty. To receive an inspection copy and teaching note, please email cmpshop@smu.edu.sg with your registered faculty email ID and a link to your contact information on the faculty directory at your university as verification. An inspection copy and teaching note will then be sent to your faculty email account.

Download information

SMU Faculty/Staff can download the case & teaching note on iNet with your SMU login ID & Password via the following links:

·      The Case (SMU-24-0029)

·      Teaching Note (SMU-24-0029TN)

For purchase of the case and supplementary materials via The Case Centre, please access the following links:

·      The Case (SMU-24-0029)

·      Teaching Note (SMU-24-0029)

For purchase of the case and supplementary materials via Harvard Business Publishing, please access the following links:

·      The Case (SMU-24-0029)

·      Teaching Note (SMU-24-0029)