Human-Centered Security

“People try to talk about the technical user experience at too high of a level. You talk about alert fatigue and you kind of understand what alert fatigue is just by the name. Yeah, there’s a lot of alerts. But watching it in action is different.”

In this episode, Heidi interviews John about what he’s learned about designing for security analysts. We talk about:
  • The importance of understanding user workflows. “Alert fatigue” is just a saying until you actually observe it in action.
  • While trust is hard to measure, it’s critical for improving the security user experience.
  • Practical tips on how to promote cross-disciplinary collaboration.

John Robertson is a researcher interested in the experience of technical users, especially those in cybersecurity. Recently his focus has been understanding workflows of Cybersecurity Analysts in Security Operations Centers.

What is Human-Centered Security?

Cybersecurity is complex. Its user experience doesn’t have to be. Heidi Trost interviews information security experts about how we can make it easier for people—and their organizations—to stay secure.