“The System...Is People!” Designing Effective Security UX
summary
Explains how organizations should treat people as a system for security by examining how education, messaging and culture (inputs) shape user behavior (output). Covers drivers of insecure behavior, ways to redesign training programs to increase reporting and speed threat response, and how to identify peer leaders who can model secure behavior using approaches from advocacy and security UX work at Duo Security.
AI-written summary · about
chapters (15)
- 0:00Intro
- 1:48The Space Between Risk and Reward
- 2:38Our Security Strategy Is Lopsided
- 4:45The Overlooked Critical System: Culture
- 6:57Cultural Currency: What's My Motivation?
- 10:34Crafting Conscientious Culture
- 13:43Unexpected Behavior, or Unacknowledged Incentive?
- 18:02Example: Deadline Drama
- 21:15Ask Yourself
- 26:51Ask Your Users
- 28:59A Note On "Soft" Data
- 32:12How Good Is Your User Interface?
- 34:44Education: User Patching
- 42:11Teach. Differently.
- 43:29Application: All that's nice, now what?
related talks
28mSecurity Through Design - Making Security Better By Designing for People
47mTransforming Security Through Design
40mSecurity by UX Design
18mDesigning for Security Outcomes
02mYou got your design team in my security team!
29mUsable Security: A Human-Centric Approach to Security
13mPeople-Centric Security: From Awareness to Culture
19mAwareness Doesn't Matter: A Behavior Design Approach to Securing Users