Simplifying Security Audits at Mendix
How I identified and tackled inefficiencies within the security auditing flow to improve the workflow of compliance teams.
Responsibilities
UX Design
HTML/CSS Support
Date
Q1 2024
Client
Mendix
How I identified and tackled inefficiencies within the security auditing flow to improve the workflow of compliance teams.
Responsibilities
UX Design
HTML/CSS Support
Date
Q1 2024
Client
Mendix
At Mendix, the low-code platform powering critical systems for ABN Amro and PostNL, security audits were becoming a bottleneck. With no centralized tracking, communication scattered across platforms, and inconsistent validation methods, their certification process was at risk. This case explores how we transformed their fragmented compliance system into a streamlined security framework.
Many users weren’t deeply technical and struggled to understand audit data quickly. I redesigned the interface to present audit insights in a more digestible, visual, and prioritized way.
There were inefficiencies in how audit findings were shared across teams. I helped introduce features or workflows that made comments, assignments, or follow-ups more collaborative and trackable, reducing delays and miscommunication.
Users had trouble distinguishing between critical and minor issues. I implemented a triaging or flagging mechanism so teams could address the most pressing problems first.
Validating the Problem
To confirm the need for AuditON, I interviewed multiple users to identify workflow bottlenecks and past audit data. The results showed that around 70% of certification delays were due to miscommunication and missing evidence.
Most of the research was done through Stakeholder interviews with security officers & compliance managers. These were some key findigns:
After launching AuditON, we tracked key performance indicators:
Annual Audit Completion Time
This speed was compared to their prior auditing process.
Error reduction from incorrect evidence submissions
Approximation based on input re-writes as opposed to the prior solution.
Half of the security officers started using our product in 2012
After this test phase, more security officers would be onboarded.
I iterated based on feedback and refined the design to include:
To validate the impact of AuditON, I'd use the HEART framework (focusing on Happiness, Engagement, Adoption, Retention, and Task Success) to measure how effectively it solves communication gaps, manual errors, and audit delays. Key tests would track user satisfaction through surveys. Other things such as task success and error rate could be tracked in-app (Quantitative).
