Log in or create a free Rosenverse account to watch this video.
Log in Create free account100s of community videos are available to free members. Conference talks are generally available to Gold members.
To Protect People, You Have to Protect Information: A Human-Centered Design Approach to Cybersecurity
Summary
- Apply human-centered design principles to security: human-centered security.
- Identify key areas where security impacts users most.
- Understand the dynamics of the security ecosystem.
- Collaborate with your security UX allies.
- Ask better questions to balance security and usability.
Key Insights
-
•
Security means different things to different roles, making cross-disciplinary collaboration essential.
-
•
Users (Alice) often do not think about security until it directly interrupts their tasks.
-
•
Charlie personifies the security systems and communications users interact with; their unhelpfulness harms user trust.
-
•
Improving the relationship between Alice and Charlie is critical to enhancing security behaviors and outcomes.
-
•
Threat actors understand users and security systems better than many security teams do, exploiting weak points.
-
•
Onboarding and signup are crucial moments to influence secure user behaviors because users are motivated and captive.
-
•
Security messaging must balance clarity and avoiding fatigue caused by false positives or jargon.
-
•
AI-driven social engineering and deepfakes will make future attacks more convincing and harder to detect.
-
•
Designers should anticipate user objections and behaviors when creating security flows.
-
•
Clear standard protocols for unusual financial requests reduce vulnerability to phishing scams.
Notable Quotes
"Security means protecting business, productivity, safety."
"The user is the weakest link is an unhelpful and harmful perspective."
"You cannot improve security outcomes until you improve the relationship between Alice and Charlie."
"Threat actors can masquerade as Charlie to trick users like Alice."
"Most security work happens below the surface where users don’t need to think about it."
"If users have to look things up, they often won’t, so policies must be easy and fast to respond to."
"Onboarding is often fleeting, so influencing security behavior there has an outsized impact."
"With AI, phishing will get worse; attackers will craft messages users are more likely to believe."
"We need to get really good at strategy board games to outsmart threat actors."
"Clear outcomes and defined secure behaviors are better than vague goals like 'be more secure'."
Or choose a question:
More Videos
"Prioritization work is a political process, and politics are hard to do in technology."
Mark Interrante Harry MaxAI for Prioritization (3rd of 3 seminars)
July 11, 2024
"No VP or director has direct responsibility at board level. It’s the C-executives who ultimately decide."
Patrizia BertiniThe (r)evolution of designOps: It’s Time to Think (really) BIG
September 11, 2025
"Reducing buttons from six to two and including peripheral information facilitated buying and editing while increasing conversion by 10%."
Shan ShenTranslating UX Terms into Business Contexts
November 29, 2023
"You have to ask, what are we deciding, and what are we quitting, on a regular basis."
Adam ThomasSurvival Metrics – Making Change in a Fast, Data-Informed, and Politically Safe Way
December 6, 2022
"The Business Roundtable radically redefined the purpose of a corporation — it’s to promote an economy that serves all Americans, not just shareholders."
Robin BeersResearch as a Catalyst for Organizational Transformation
March 12, 2021
"Accessibility isn’t just about visible disabilities; it’s about invisible disabilities and situational impairments too."
Sheri Byrne-HaberAccessibility at Scale
June 9, 2021
"Critiques help teams stop being the lone ranger and instead iterate faster together with purpose and clarity."
Joseph MeersmanSweating the Pixel: Scaling Quality through Critique
June 10, 2021
"Just because empathy isn’t always visible at the top doesn’t mean you can’t be the change."
Deanna Washington Bria Alexander Jon Fukuda Saara Kamppari-Miller Farid SabitovConnecting the Ops: Plenary Panel and Closing Circle
September 9, 2022
"Government isn’t always trusted, so we worked with local partners to connect with underserved communities."
Aaron Stienstra Lashanda HodgeLeveraging Civic Design to Advance Equity and Rebuild Trust in the US Federal Government
December 8, 2021
