URSA

Ursa is a desktop security tool designed for small businesses, offering protection against phishing attacks. It screens incoming emails, educates employees on recognizing phishing attempts, and streamlines the reporting process. This ensures a secure email communication environment, boosting employee confidence in their digital safety.

Role - Team lead, UX Research
Duration - 10 Weeks
Team - group of 5
Tools - Figma

Problem Discovery

In an age of evolving technology and AI, personal information security is paramount. Phishing attacks exploit vulnerabilities with psychological tactics. Ursa was developed to counter this threat, securing our digital world.

Targeting small businesses, often vulnerable despite cybersecurity, due to their sensitivity to resource loss, making them prime for phishing attacks.

Research

I began with secondary research to understand the scope of the problem space we were entering. It was crucial to identify which groups face phishing attacks daily, as well as the market and strategies employed by phishers.

25% of the phishing attack is towards the small businesses

more than 70% of the small businesses are not prepared against the phishing attacks

Over $1 million is lost from phishing attack in 2023, and it is rising.

It became clear that small businesses constantly face challenges with phishing emails, struggling to secure their data and resources daily. Even with security measures in place, phishing attacks target people directly, making complete protection difficult.

Target Audience

For small businesses, even a minor loss of information or resources can be critical, which is why we prioritized them for our efforts.

Our target audience consists of inquisitive, tech-savvy small businesses facing challenges in securing their networks due to limited resources for in-house cybersecurity specialists. Our platform is specifically designed for those deeply concerned with cybersecurity, offering a solution to bolster their defenses against digital threats.

Business Strategy

Reduce Risk

By increasing company’s ability to report and identify phishing attacks.

Increase ROI

By collecting meaningful data that can, in turn, create more effective training solutions.

Maintain Compliance

Demonstrate your company’s efficiency and safety by state and industry regulated and recommended compliance measures

Problem Space

After understanding the issue's scope, it was crucial for my team and me to precisely identify our focus and the audience we aim to help.

Our target audience includes small business owners and employees vulnerable to daily phishing email threats, aiming to exploit company resources. Despite their capital, these businesses often lack adequate cybersecurity education and protection against sophisticated attacks, underscoring the urgent need for enhanced security measures.

Primary Research

Now that we grasped the problem space, it was time to conduct primary research and hear firsthand from those impacted.

We employed three research methods to gather both qualitative and quantitative data. The goal was to userstand the perspectives of small business owners, employees and expert in cybersecurity.

I have generated the interview questions to understand the actual facts and also what employers and employees feel about the phishing attacks in their work space.

Now that we grasped the problem space, it was time to conduct primary research and hear first hand from those impacted.

We employed three research methods to gather both qualitative and quantitative data. The goal was to userstand the perspectives of small business owners, employees and expert in cybersecurity.

I have generated the interview questions to understand the actual facts and also what employers and employees feel about the phishing attacks in their work space.

Survey

We analyzed 25 survey responses, revealing that 60% of employees have some form of cybersecurity program. However, only 40% of those with programs are satisfied with them.

User Interview

I interviewed 6 out of 12 people and gathered over 100 insights, which have been incorporated into our problem-solving efforts.

User Interview

I interviewed 6 out of 12 people and gathered over 100 insights, which have been incorporated into our problem-solving efforts.

Persona

After understanding the perspective of each side, we have generated 3 personas to help us understand all the perspectives within small businesses on phishing attacks.

A manager who sees her employees as potential liabilities to the companies safety, needs a trustworthy, reliable system that can aid employees with proactive and passive solutions, because it increases the companies safety and reduces workload.

An employee who has a stressful workload with lots of email communication, and who isunengaged by phishing training, needs a proactive system that helps him take care of phishingdetection and reporting because he wants to focus on his tasks and be productive

An employee who worries about their security , needs confirmation and communication of trust that her reports are effective and will not negatively affect her because she is fearful of her vulnerability in the company and as a potential phishing victim.

Persona POV Statement

Following persona development and the empathy map, my team generated POV statements for each persona, allowing me to fully grasp the problems and concerns felt by small business members.

Ideation

After gaining a comprehensive understanding of the problem and examining it from various perspectives, it was time to generate the creative solutions.

Idea Dump

My team ideated different ways to visually display different features.

Feature Feasibility

We reviewed our Feasibility map to help support which features to focus on.

LO-FI Sketching

Each team member made their own ideations of how they think the UI could be visual displayed

Userflow

After ideating the features and grouping them, the pages were broken down and started to establish the userflow of each ends.

Userflow: Email Widget

Lo-Fi

The lo-fi pages are created based on the userflows and the lo-fi sketches that we have ideated.

Simple Design

Clear Userflow

Intuitive Information Architecture

are three factors that we have taken into consideration to choose the pages.

After extensive discussion of the best designed pages, I have prototyped all the pages so that all the pages can make a smooth transition and the animation of the graphs are engaging, however not distracting at the same time.

Usability Testing

We've reached the exciting stage where our functional prototype is ready for user testing. I've conducted usability testing and expert evaluations to ensure a seamless experience for both employees and employers.

Conducted 15 of A/B testing

6 usability testing

2 Expert Evaluation

Branding

We began our mood boards with three key words in mind: Innovative, Loyal, and Energetic. From there, we drafted colors, images, and typography around the ideas our words elicited.

Color Palette

We conducted a type study to determine our typeface for our UI. We evaluated over 20 typefaces, testing them at different sizes and weights.

Typography

We conducted a type study to determine our typeface for our UI. We evaluated over 20 typefaces, testing them at different sizes and weights.

Logo Branding

We chose a bear as our primary logo. Our goal was to create a simple logo that would be readable at various sizes.

Branding Imagery

This is our brand illustration. The purpose of this imagery is to approach to our users in more friendly way.

Final Design

Dashboard

Our landing page starts as the dashboard: a hub for relevant, dynamic information for the user to react with immediately.

Employee Dashboard
Employer Dashboard
Employee Dashboard
Employer Dashboard
Employee Dashboard
Employer Dashboard
Employee Dashboard
Employer Dashboard

Report Insights

The reports page presents users with a simplified data sheet that updates from the email widget. For owner’s they can view monitor and approve each report. For employees, they can see in live time when one of their reports are approved.

Employee Report
Employer Report
Employee Report
Employer Report
Employee Report
Employer Report
Employee Report
Employer Report

Employee Training

Employees can see which training modules have been assigned to them. They can also view and filter through all possible lessons.

Employee Training
Employee Training Info
Employee Training
Employee Training Info
Employee Training
Employee Training Info
Employee Training
Employee Training Info

Employee Training Modules

Employees take engaging training lessons that educates them on phishing tactics and helps bring awareness to what to look out for when scanning emails

Campaigns

Employers can set up and monitor phishing simulation campaigns to identify employees susceptible to phishing attacks, thereby strengthening their cybersecurity posture and creating a safer work environment.

Report Widget

The report widget assists streamlines the reporting process while helping employees validate emails. Employees ca

The report widget assists streamlines the reporting process while helping employees validate emails.

Prioritizing simplicity and intuitive design, I aimed to create content that felt effortless and inviting to users.

Refelction

As the team lead, I learned crucial leadership skills, emphasizing active participation and respect over title. I prioritized effective execution, teamwork, and communication, striving to maintain clarity and consensus. This project not only enhanced my skills as a UX designer and leader but also offered personal growth and satisfaction through overcoming challenges as a team. The respect and appreciation from my team were particularly rewarding.