Back

Security Operations · 2019

Incident Response Dashboard

A real-time dashboard built to help security teams detect, investigate, and respond to threats faster — designed for clarity, speed, and integration with existing workflows.

Company
Perception Point
Platform
Cybersecurity Dashboard (Web)
Role
Lead Product Designer
Duration
6 weeks · Q1 2019
01

Overview

Facing a surge in security incidents, our team was tasked with creating a centralized dashboard to help customers monitor and respond to threats in real time. The goal was to build a clear, efficient system that provides high visibility, integrates with existing infrastructure, and empowers teams to act quickly.

My role As product designer, I led UX research, interface design, and usability validation. I worked closely with engineering and security analysts to ensure the solution aligned with technical constraints and real user workflows.

02

The challenge & goal

Customers needed a way to detect and resolve security threats quickly. The challenge was to create a dashboard that provided live updates, prioritized incident severity, and supported fast action — all while fitting into their existing tools and workflows.

03

Research

We interviewed key customers to map out their current incident workflows. Common pain points included lack of real-time data, difficulty prioritizing cases, and time wasted switching tools. We benchmarked leading IR platforms and noted best practices like severity color coding, timeline visualization, and user audit trails.

04

Design process

The design prioritized clarity and actionability. We used a card-based system to represent incidents with real-time status updates, severity indicators, and direct links to investigation steps.

  • Color-coded incident cards with live updates.
  • Severity filters and search to help teams prioritize.
  • Integrated investigation history for each case.
  • Simple, clean UI aligned with accessibility standards.
User-based activity breakdown
Top 5 users by investigation volume
Number of incidents reviewed over time
05

Design highlights

  • User activity breakdown — color-coded bar charts support quick accountability tracking.
  • Time-series analysis — line graphs surface patterns and trends.
  • KPI summary panel — bold metrics and charts deliver instant visibility.
06

Development & testing

Development The engineering team built a backend data stream and connected it to the customer's Perception Point accounts. I collaborated with devs to QA components, implement interaction states, and verify live-data behaviors.

Testing We ran the dashboard in a controlled production environment, verifying accuracy, performance, and load stability. Feedback from power users led to fine-tuning interaction flows and adjusting severity thresholds.

07

Results & impact

The dashboard was fully adopted across key customer accounts, enabling faster response, clearer visibility, and consistent security workflows.

32,378
Incidents reviewed
1,320h
Hours saved

Estimated via avg. review time.

8,000
Incidents found clean

≈ 80 hours saved.

2,500
User-requested investigations

≈ 250 hours saved.

120
Confirmed malicious

Faster incident response.

Satisfaction

High retention; stable production use for weeks without regressions.

08

Key takeaways

  • Real-time systems must minimize noise and surface what matters.
  • Deep user research shapes scalable design decisions.
  • Integrating with existing tools increases adoption and trust.