COALFIRE

Redesign the audit, risk, and compliance platform to achieve a revolutionizing compliance and auditing experience.

Overview

Coalfire is a cybersecurity company that provides cloud expertise and technology solutions to ensure its customers’ security and compliance. They came to us to redesign their innovative audit, risk, and compliance platform into something usable and scalable for their customers. We were tasked to rethink its platform while also considering low-hanging fruit that could be implemented as MVP.
My Role

Design Strategy
Wireframing
Prototyping
Visual Design
User Testing
Duration

September - December, 2021

Overview

Coalfire is a cybersecurity company that provides cloud expertise and technology solutions to ensure its customers’ security and compliance. They came to us to redesign their innovative audit, risk, and compliance platform into something usable and scalable for their customers. We were tasked to rethink its platform while also considering low-hanging fruit that could be implemented as MVP.
My Role

Strategy, Wireframing, Prototyping, Visual Design, User Testing
Duration

September - December, 2021

CHALLENGE

We were challenged to transform an existing Audit, Risk, and Compliance (ARC) platform into an intuitive experience where users could keep track of their compliance visually on an ongoing basis.

Approach

Before any design work, we immersed ourselves in the current product, analyzing the current state of usability, interviewing users and stakeholders, and doing a competitor analysis. We also conducted a 2-day workshop where we created user personas, journey maps, and prioritization. From there, we wireframed the ideal workflows and collaborated closely with stakeholders to get feedback. Afterward, we applied the visual polish that elevated the platform to a modern and timeless appeal.

Outcome

By understanding the various use cases, needs, and challenges of the users, we created a flexible system that would allow users to track their compliance throughout the year, no matter how many frameworks they used.
Users could easily upload documents, manage versions, assign the appropriate people to upload documents, and communicate with auditors in one place.
On the auditors’ end, they could see the users’ progress, be notified of any new documents or policies to review, and readily accept or mark them as incompliant.