What is Gradient Cyber?
Gradient Cyber is a Security Intelligence platform that visualizes an organization's cybersecurity health through analysis of live NetFlow and log information. It produces weighted evidence that is clear, concise, and provides actionable insights for continuous cybersecurity improvement.
Gradient's Cybersecurity Health Scorecard™ enhances the traditional NIST Cybersecurity Framework to provide you with comprehensive and actionable insights to keep you moving forward. Gradient provides an actionable roadmap to drive continuous improvement in your cybersecurity posture, compliance, and governance in addition to helping monitor, manage, and prioritize alerts and events that matter to help companies get the most value out of their investment in cybersecurity.
Methods: User Interviews, User Flows, Sitemapping, Wireframes, Usability Testing
Tools: Sketch, InVision
Surveys & Interviews
To better understand how the platform is used, we spoke to expert users of the software and discovered how they made use of existing apps, which features were most important, and which applications needed an update to better assess their company's cybersecurity risks.
Key Findings & Insights
The interviews helped us understand about the needs and frustrations of Gradient's users, and the key findings were:
At a Glance: Users wanted an executive dashboard that allowed them to quickly see if there were any cyber health risks or any open sitreps that need attention.
From Insight to Action: Users wanted to easily understand their baseline data and risk potential through their personalized Cybersecurity Health Scorecard.
Threat Management: Users need concise and accurate ways to see their cyber security maturity and improvement and be assured that their assessments are measured against the most comprehensive cyber security frameworks in the industry.
"When it comes to cybersecurity, there are wide range of data sources, and with the current state of the platform, performing threat hunting/management, anomaly detection and traffic analysis can be overwhelming without a streamlined executive dashboard that filters out the noise."
User Testing: Users were asked to complete various tasks such as navigating the executive dashboard, clicking into an open sitrep, and answer questions on surveys that affected the overall cybersecurity posture.
Positives: Users were able to login and access the executive dashboard with ease, users enjoyed seeing the modules that highlighted important information for sitreps, users were able to navigate to survey tab and answer a question
Negatives: Users requested to have a newsfeed ticker on login page to view important news and information before logging in, users need to be able to click into a sitrep that leads to the whole report
