Actionable Risk View for IT Security Team

In this project, I facilitated a 3-day Design Sprint Workshop by working closely with 1 product owner, 3+ developers and set design agreements. Through the workshop, I interviewed with 5+ stakeholders on the internal sales team to align both product vision and costumer feedback targeting both viable and lovable product to set longer-term of product vision across the team.

Role

UX Designer

Team

1 Product Owner

8 Developers

Duration

Q4 2021

Achievement

Design Workshop

Sprint Participants

5 PSO (Sales)

5 Risk Specialists

3 UX Designers

3 Product Owner

2 Dev Lead

PROJECT PROMPT

No holistic view for users to determine risk relationship

With the thriving technology and overall digital transformation, our platform users will need a better way to measure as well as track risk and compliance across organization. We received the ask from Sales team to build features that allow users to view and build risk relationship in our product.

HOW I STARTED

3-Day Design Sprint with internal stakeholders

With the intention to better surface actions for the security team, there're still missing pieces i need before kicking off with the design exploration. Therefore, I set meetings with key stakeholders including PMs and Senior engineers to set alignment for both deliverables and timeline on the project. I ran a 3-day design sprint workshop for 10+ stakeholders to identify top user challenges for alignment.

SUCCESS METRICS

How we define success

I interviewed the sales team and the internal GRC (Governance Risk Compliance) experts to learn the key information that matter the most for the Asset Owner. By working closely with the PM, we identified targets as the "Most-Show" metrics for users when completing their daily tasks.

Provide pathways from summary level to more information 

Provide pathways from summary level to more information 

Surface time-based metrics to compare risk activities

Surface time-based metrics to compare risk activities

Flexible and configurable components

Flexible and configurable components

NARROWING DOWN THE FOCUS

" How might we allow risk specialists feel more easily to make risk associated decisions from the risk summary view?"

" How might we allow risk specialists feel more easily to make risk associated decisions from the risk summary view?"

FEATURE 1

Set & View Risk Activity through widget

Leveraging our existing Dashboard function, users can add meaningful widgets to speed up their day-to-day tasks. I surfaced quick actions associated with the widget such as showing "View New Risks" under Risk Counts sorted by new/existing risk type.

FEATURE 2

Set/ Drill down Risk Relationship through side panel

Previously, users can't view, set or drill down risk decisions through few clicks. However, when introducing side panel, it makes users easier to view necessary risk details up in the side panel. It also makes users easier to make risk decisions by easily accessing risk information.

REFINE THE OLD FLOW

Centralized current flow to speed up risk decision

To empathize how our risk specialists work on their assigned asset page, I created the major user flow users currently took to work on risk events. After identifying the major user flow and actions, I made current steps into single tab under "Risk".

Old Flow

Users need to drill into risk detail page with multiple clicks

Proposed Flow

Eliminate unnecessary clicks to help users consolidate risk decisions

CONCEPT TESTING

Proposed three different concepts and share with stakeholders

After the ideation workshop with stakeholders, I shared three concepts with PM and Devs to review all concepts. We chose "Risk Widget" as the final solution to proceed as it aligns the design direction and allows users to drill into each widgets to view deeper information and detail.

DESIGN TESTING & ITERATION

Separate history page from side panel

Within 2 weeks, I put together 2 proposed design directions and reviewed the mocks with the the same group of experts to iterate on the proposed direction. I reviewed the mocks with Sales & Risk Specialists within OneTrust to collect key insights that will need to revise before delivering the mocks.

DESIGN TESTING & ITERATION

Chose to proceed with MVP

As we have limited timeline on the delivery of the feature, I proposed 2 different approaches and ensure stakeholders are aware of the minimal viable product might accomplish in the short-term goal for users while keeping in mind of the long-term vision of the product.

Minimal Viable Product

With the event-based dashboard leveraging what underlying reports are actionable for the Asset Owners.

Long-Term Vision

With task-oriented centralized view to gain insights on related inventories, correlated tasks, and better prioritize day-to-day job for the users.

KEY HIGHLIGHT & LEARNING

Receive positive feedback

In this project, I am not only working as UX Designer but also the key host for design sprint. Therefore, to learn how the participants perceive the workshop, I created the user survey to collect feedback from team that involved in design sprint. I created 5 dimensions to better measure design sprint.

Copyright 2024 by Szu-Yu Yang

Copyright 2024 by Szu-Yu Yang

Copyright 2024 by Szu-Yu Yang