好、坏和用户.pdf

1、New incident?New tool?Low engagement?The default fix is usually:lets throw training and awareness at it”.But this is just a security blanket not a solutionBut looking closerMost users want to do the right thing.But they are blocked by:Clunky interfacesConfusing security flowsOvercomplicated toolsUni

2、ntuitive user experiencesAssumed user experiencesReal-world examples of poor UX in cybersecurity:MFA app thats unusable for those with visual impairmentPhishing simulations that confuse more than educatePolicies which require many steps to report an incidentSecurity pop-ups which are indecipherable

3、and as a result:ignored The triage trapThe triage trap occurs when the triage process itself becomes problematic.:Poor UX is not a training issue.You cant train away frictionYou cant awareness your way through a broken interfaceAdoption dies when tools feel hostile or inaccessibleWhy Education and A

4、wareness?The value of embracing change8 One of HSBCs largest technology migrations became a benchmark for delivering exceptional digital experiences at scale without compromising user trust,access or experience and doing it in record time.Starting from zeroCybersecurity at HSBCThe paradox The good a

5、nd the bad Different types of human errors.Part of human natureUser researchHuman errorsThe userLessons learnedUser research|Case:Privileged Access Management(PAM)Human errorsThe userLessons learnedThe user:Our strongest ally and weakest linkUser researchHuman errorsThe userLessons learnedLessons learnedUser researchHuman errorsThe userLessons learned