This presentation describes an approach to designing for good and avoiding privacy, security or safety related risks for users. It describes: - Why all products and user interfaces should conduct systematic risk analysis - how to identify UI risks - How to evaluate UI risks and design solutions

1. Risk Analysis for user interfaces
Beant Kaur Dhillon
Sr. Usability & UX Research Consultant (Freelance)
beant.ux@gmail.com | www.linkedin.com/in/beantdhillon/ | www.instagram.com/beantcalligraphy/

2. Technology & Us – an intimate relationship
Sources:
https://www.bloomberg.com/opinion/articles/2018-08-24/facebook-is-making-u-s-a-political-dystopia
https://www.forbes.com/sites/ywang/2018/01/23/how-people-are-earning-millions-from-tencents-wechat-but-not-everyones-happy/#2c5626d95563
https://gizmodo.com/alibaba-ceo-warns-that-if-trade-stops-war-starts-1792017425
https://www.wsj.com/articles/historian-yuval-noah-harari-on-the-robot-revolution-1538057544

3. The banality of evil?
Sources:
http://fortune.com/2018/08/02/why-google-toronto-smart-city-project-local-resistance-privacy/
https://www.indiatoday.in/technology/news/story/facebook-messenger-kids-privacy-policy-is-vague-and-incomplete-say-advocacy-groups-1356167-2018-10-05#close-overlay
https://www.theguardian.com/technology/2018/may/24/amazon-alexa-recorded-conversation

4. Risk Analysis for user interfaces
A proposal

5. How?

6. Who does it?
• Risk Owner/Manager
• A multi-disciplinary team
• Domain Expert
• UX Researcher/Usability Engineer
• Design Lead
• System engineer
• Privacy officer
• Marketing lead
• Data officer….

7. I. Lay the Groundwork
Desk Research
- News articles
- Complaints Database
- Futuristic TV series, Books…
User Research
- Observations
- Interviews
Create Use Scenarios &Task
Analysis
- Include worst case scenarios
- Alternative flows

8. II. Identify potential risks
Pay attention to context!In a multi-disciplinary workshop, go through
each use scenario and task analysis and
identify and list all the potential risks you can
think of.

9. IIIa. Evaluate Risks
For each risk, determine
• What can happen?
• The cause(s)
• The consequences

10. IIIb. Prioritize Risks based on consequences

11. IV.Address risks
Source: ISO 14971 Standard for Risk management for medical devices
Inherent safety by design Protective measures in device
itself or in the manufacturing
process
Provide Information for
safety (Only as a last resort!)

12. V.Test & Iterate

14. My article series with details of Risk Analysis for UI
Part 1:Why conduct Risk Analysis for User Interfaces
https://www.linkedin.com/pulse/ah-what-could-go-wrong-aka-risk-analysis-
user-part-i-dhillon/
Part II: Identifying risks
https://www.linkedin.com/pulse/quite-blue-sky-aka-how-conduct-risk-
analysis-user-part-dhillon/
Part III: Evaluating Risks and Designing Solutions
https://www.linkedin.com/pulse/cake-almost-done-aka-risk-analysis-part-3-
designing-dhillon/

15. beant.ux@gmail.com | www.linkedin.com/in/beantdhillon/ | www.instagram.com/beantcalligraphy/