Integrating user experience into cybersecurity: challenges, opportunities and actionable recommendations from a case study

(2026) Organizational Cybersecurity Journal: Practice, Process and People — Vol. 1, p. 1-24 (2026)

Files

ocj-02-2025-0005en.pdf
  • Open Access
  • Adobe PDF
  • 3.99 MB

Details

Authors
  • Azevedo, DanielaInstitute for Language and Communication, UCLouvain , ,
    Author
  • Ramelot, JustineInstitute for Language and Communication, UCLouvain , ,
    Author
  • Legay, AxelTRAXXEO , ,
    Author
  • Kieffer, SuzanneInstitute for Language and Communication, UCLouvain , ,
    Author
Abstract
Purpose-The paper studies the integration of UX into a cybersecurity project using a longitudinal mixed-method approach, how introducing UX influences design, management decisions and security-relevant outcomes, formalises these mechanisms in a four-phase framework and derives recommendations. Design/methodology/approach-An exploratory case study follows a multi-year cybersecurity project (2022-2025) with multiple rounds of participant observation, survey and interviews. Findings-UX integration facilitates consensus-building, fosters a human-centred mindset and serves as the backbone of the project. Research limitations/implications-Single-case design, small homogeneous sample and context-specific setting prevent statistical generalisation. Practical implications-Recommendations and framework support safer, more inclusive systems by aligning design with diverse user needs. Originality/value-Presents a phase-based framework showing how UX practices reshape security decisions across four stages (recognition, anchoring, translation and operationalisation), alongside replicable UX methods and 10 actionable recommendations for development and management teams.
Affiliations

Citations

Azevedo, D., Ramelot, J., Legay, A., & Kieffer, S. (2026). Integrating user experience into cybersecurity: challenges, opportunities and actionable recommendations from a case study. Organizational Cybersecurity Journal: Practice, Process and People, 1, 1-24. https://doi.org/10.1108/ocj-02-2025-0005 (Original work published 2026)