INFORMS Open Forum

Publication of a Cybersecurity Teaching Case -- Root: Automating the Remediation Gap

  • 1.  Publication of a Cybersecurity Teaching Case -- Root: Automating the Remediation Gap

    Posted yesterday
    image
    Dear Folks,
    I am pleased to share that a new teaching case I authored, Root: Automating the Remediation Gap, has been published by Ivey Publishing. The case will be available globally through Ivey Publishing and its distribution partners, including Harvard Business Impact and The Case Centre. 
    --------------------------
    Case Overview

    In early 2025, the co-founder and chief technology officer of Root.io Inc. (Root), based in Boston, Massachusetts, was preparing to brief his leadership team on the company's next strategic phase. Root was an emerging cybersecurity company founded on the bold mission of eliminating security debt by automating the fix, not just the flag, in cybersecurity. Its differentiating advantage was the use of agentic artificial intelligence (AI) to remediate vulnerabilities at machine speed, while embedding human oversight to ensure safety and trust. Root had already proven its technology. However, the company now faced the more complex business challenge of positioning and scaling the company in a conservative trust-driven market. With three potential strategic paths available for his venture's growth, Amaral's dilemma was centred on whether Root could balance speed-its innovation edge-with governance, which was the credibility anchor for regulated industries.
    ---------------------------
    If you are involved in cybersecurity strategy, digital transformation, or risk governance, I believe the case will resonate with your current challenges. I'd be glad to discuss the themes or explore how it might be used in executive briefings or workshops.
    Warm regards,
    Dave


    ------------------------------
    Dave Chatterjee
    Adjunct Associate Professor
    Duke University
    Durham NC
    ------------------------------