Cybersecurity, readable at every level

Client: EY
Sector: Cybersecurity consulting
Our role: UX consulting, Customer journey mapping, Role-based dashboards, Data visualisation
Year: 2023

Vulnerability dashboard with an exposure score gauge, severity chart and key metrics

Cybersecurity consulting

01 — Context

We worked with EY’s cybersecurity team as UX consultants on an analytics platform for monitoring cybersecurity across critical infrastructure. The solution was implemented for two high-profile clients in Saudi Arabia: the country’s largest smart-city project, and one of the biggest energy companies in the world. It had to serve two audiences at once: the operational teams handling threats day to day, and the executives deciding where to act.

02 — The problem

Penetration tests, red-team campaigns, vulnerability scans and threat feeds each produced their own data. The detail analysts need buried the picture executives need, and sensitive findings had to stay visible only to the right people.

03 — The solution

One platform with modular, role-specific dashboards: an executive view that sums up exposure in a single score, detailed views for each security service, and access shaped by role.

04 — What we did

Complex security data, made legible

Customer journey mapping

We mapped how analysts, managers and executives each use security data, and what decision every screen has to support.

Role-based dashboards

Modular dashboards for each role surface real-time threat intelligence and system health, from the executive summary down to a single finding.

Data visualisation

Scores, severity breakdowns and trends turn technical findings into something technical and non-technical users can read at a glance.

Stakeholder workshops

Workshops with regional stakeholders aligned the features with their operational procedures and regulatory standards.

05 — What we delivered

Executive dashboardOverall exposure score, key metrics and the most exposed sectors, with a section for each service: penetration testing, vulnerability assessment, red teaming, configuration and source code reviews.
Vulnerability assessmentCyberthreat exposure score, vulnerabilities by severity and over time, and the top vulnerabilities with their status and impacted assets.
Cyber threat intelligenceThreat exposure, identified threats, remediation, brand monitoring, flash alerts by severity, top adversaries and recent campaigns.
Cyber maturity assessmentOT and IT maturity by group, corporate and affiliates against target and benchmark, with trends and domain-level detail, designed for the energy-sector client.
Access and workflowsRole-based access flows for sensitive data, and clear navigation between alert management, asset tracking and incident resolution.

06 — Outcome

Implemented for both clients, the platform gives technical and non-technical stakeholders one place to work: executives see exposure and maturity at a glance, analysts drill into the finding behind every number, and the features follow the procedures and standards agreed in the workshops.

07 — Gallery

08 — Role & stack

ClientEY

SectorCybersecurity consulting

ServicesUX consulting · Customer journey mapping · Role-based dashboards · Data visualisation · Stakeholder workshops

ToolsFigma

Year2023

ScopeUX/UI consulting and design. We worked with EY’s internal development team through the implementation.

Your project

Tell us what’s breaking.

Talk about your project