This document provides instructions for a case study assignment. Students will choose an actual data breach to research and analyze in two papers. Paper one will introduce the breached organization, describe what happened in the breach, and discuss the financial impact. Paper two will apply concepts from class to recommend solutions and controls to reduce risks from similar future breaches. Students will submit drafts for peer review and final versions that others in the class can learn from. The goal is for students to gain knowledge by researching a real breach case and proposing security improvements.