Log in or create a free Rosenverse account to watch this video.
Log in Create free account100s of community videos are available to free members. Conference talks are generally available to Gold members.
To Protect People, You Have to Protect Information: A Human-Centered Design Approach to Cybersecurity
Summary
- Apply human-centered design principles to security: human-centered security.
- Identify key areas where security impacts users most.
- Understand the dynamics of the security ecosystem.
- Collaborate with your security UX allies.
- Ask better questions to balance security and usability.
Key Insights
-
•
Security means different things to different roles, making cross-disciplinary collaboration essential.
-
•
Users (Alice) often do not think about security until it directly interrupts their tasks.
-
•
Charlie personifies the security systems and communications users interact with; their unhelpfulness harms user trust.
-
•
Improving the relationship between Alice and Charlie is critical to enhancing security behaviors and outcomes.
-
•
Threat actors understand users and security systems better than many security teams do, exploiting weak points.
-
•
Onboarding and signup are crucial moments to influence secure user behaviors because users are motivated and captive.
-
•
Security messaging must balance clarity and avoiding fatigue caused by false positives or jargon.
-
•
AI-driven social engineering and deepfakes will make future attacks more convincing and harder to detect.
-
•
Designers should anticipate user objections and behaviors when creating security flows.
-
•
Clear standard protocols for unusual financial requests reduce vulnerability to phishing scams.
Notable Quotes
"Security means protecting business, productivity, safety."
"The user is the weakest link is an unhelpful and harmful perspective."
"You cannot improve security outcomes until you improve the relationship between Alice and Charlie."
"Threat actors can masquerade as Charlie to trick users like Alice."
"Most security work happens below the surface where users don’t need to think about it."
"If users have to look things up, they often won’t, so policies must be easy and fast to respond to."
"Onboarding is often fleeting, so influencing security behavior there has an outsized impact."
"With AI, phishing will get worse; attackers will craft messages users are more likely to believe."
"We need to get really good at strategy board games to outsmart threat actors."
"Clear outcomes and defined secure behaviors are better than vague goals like 'be more secure'."
Or choose a question:
More Videos
"VOC wasn’t a replacement for user research, but an enhancer that captured nuggets researchers might miss during discovery."
Shipra KayanHow we Built a VoC (Voice of the Customer) Practice at Upwork from the Ground Up
September 30, 2021
"The system always kicks back—the consequences of our actions unfold over time."
Peter MorvilleThe Architecture of Understanding
May 13, 2015
"Only one internal hire on the UX team was a huge misopportunity for us."
Renee ReidBecoming a ResearchH.E.R (Highly Enterprise Ready)
June 3, 2019
"The computer metaphor of mind does not do a very good job of explaining what we see people do with their bodies."
Dane DeSutterKeeping the Body in Mind: What Gestures and Embodied Actions Tell You That Users May Not
March 26, 2024
"Sometimes accessibility isn’t perfect, but consistency lets me shop on Amazon in my sleep because of muscle memory."
Sam ProulxOnline Shopping: Designing an Accessible Experience
October 3, 2023
"Digital channels now have higher standards—customers expect personalization at all times."
Andrew Custage Michael MallettThe Digital Journey: Research on Consumer Frustration and Loyalty
March 29, 2023
"Silence is productive—resist the temptation to fill it immediately after asking a question."
Shelby SwitzerMaking Space for Community Knowledge-sharing in a Distributed World
December 10, 2021
"Prompting is a specialized skill, just like statistics or in-depth interviewing; the wrong wording can bias your results."
Llewyn PaineCoexisting with AI: A practical guide for researchers to navigate tools, ethics, and integration
March 11, 2025
"Simon Roberts calls this the UX ification of research, which leads to a more transactional focus on informing technology requirements."
Robin BeersNavigating organizational systems: Rethinking researcher’s role in driving change
March 13, 2025
