1. Security vs Usability intermediate

    A B2B SaaS with 900 tenants makes SAML single sign-on mandatory for every enterprise-plan tenant after a security review, and local passwords are deleted. Six weeks later an identity provider outage locks about 40 tenants out for three hours and support has no way to help. What did the mandate buy, what did it pay, and what should have existed first?

    2 min answer ssoidentityavailabilitybreak-glass
  2. Security vs Usability advanced

    A consumer finance product must balance fraud controls against onboarding friction. How should that trade-off be made rather than argued?

    2 min answer slicefraudfrictionrisk
  3. Security vs Usability intermediate Multiple choice

    A payments console requires a hardware-key tap at login. About 3% of its monthly sessions create a payout or change bank details and 97% only read reports; support handles roughly 40 lost-key tickets a month and 12% of users keep a browser session open for days. Which change reduces the loss the control exists to prevent while lowering total friction?

    3 min answer step-up-authenticationfriction-budgetsession-theftpayments
  4. Security vs Usability intermediate

    A security control is being circumvented by most of the team. What do you conclude and what do you do?

    2 min answer securityusabilityworkaroundsfriction
  5. Security vs Usability advanced

    A security control materially reduces risk and adds friction to a developer workflow used thousands of times a day. How should the trade-off be made?

    2 min answer securityusabilityfrictionworkarounds