Whether it’s coming from the business units or the IT organization, every company wants to pull off new tech initiatives to create business impact. Thus, we see new functionality. We think it’s cool. We introduce it. 

…but then a user slips up because of some unforeseen slack in the system.

When that happens, suddenly we’re in reactive mode, because we didn’t work to figure out the risk until after the fact. The user’s mistake becomes a means to justify new security technologies and a bunch of new controls. 

Read the full article published October 11, 2017 here: http://www.securityweek.com/user-experience-and-security-should-be-complementary-not-contradictory by Security Week.