登录查看更多内容

How can you ensure secure and private user acceptance testing?

由人工智能和领英社区提供技术支持

User acceptance testing (UAT) is a crucial step in the UX research process, where you validate your design solutions with real users and stakeholders. However, UAT also involves some risks, such as exposing sensitive data, violating privacy regulations, or compromising security. How can you ensure secure and private UAT without compromising the quality and reliability of your UX research? Here are some tips to help you plan and conduct UAT in a safe and ethical way.

此文章中的业界达人

由社区从 3 条内容中精选。了解更多

Dimitri Pletschette

Product Manager | Driving Innovation & Digital Transformation | SAFe?, PSPO?, ITIL?
Bojan Vasic

Digital Technology Specialist at Philip Morris International | IBM Cybersecurity Analyst | Web Developer | OSINT |…

1 Choose the right tools

The tools you use for UAT can have a significant impact on the security and privacy of your data and participants. You need to choose tools that are compliant with the relevant laws and standards, such as GDPR, HIPAA, or ISO 27001. You also need to choose tools that offer encryption, authentication, and access control features, to prevent unauthorized access or leakage of data. Some examples of secure and private tools for UAT are Lookback, UserTesting, and Validately.

添加您的观点

Dimitri Pletschette

Product Manager | Driving Innovation & Digital Transformation | SAFe?, PSPO?, ITIL?
举报内容
After obtaining approval during IAT under the DEV or QA environment, the changes are deployed to STAGING. This environment is a non-indexed mirror of the production content and should be IP-allow-listed, SSO-protected, or password-protected. It's used for testing and validation by the business.

已翻译

赞
Bojan Vasic

Digital Technology Specialist at Philip Morris International | IBM Cybersecurity Analyst | Web Developer | OSINT | CC,CEH | (ISC)2 & ISACA Member | Web3
举报内容
Isolate the testing environment (ie. QA for example) from Production in order to prevent leak of sensitive information, use VPN and Access Control. There are many different techniques and tools available to setup and configure in order to conduct UAT on secure and private environment, but those mentioned above should be some fundamental standard procedures.

已翻译

赞

2 Obtain informed consent

Before you start UAT, you need to obtain informed consent from your participants. This means that you need to explain the purpose, scope, duration, and risks of the UAT, and how you will use, store, and share their data. You also need to give them the option to opt out, withdraw, or request deletion of their data at any time. You can use online forms, emails, or verbal agreements to obtain informed consent, but make sure you document it and keep it secure.

添加您的观点

3 Anonymize and pseudonymize data

Another way to protect the privacy of your participants is to anonymize or pseudonymize their data. Anonymization means that you remove any identifying information from the data, such as names, addresses, or phone numbers. Pseudonymization means that you replace the identifying information with fake or random data, such as codes, aliases, or numbers. Both methods can help you reduce the risk of exposing personal or sensitive data, but you need to be careful not to lose the context or meaning of the data.

添加您的观点

4 Limit data collection and retention

You should only collect and retain the data that is necessary and relevant for your UAT goals. You should avoid collecting or storing any data that is not directly related to your research questions, such as demographic, financial, or health data. You should also delete or archive the data as soon as possible, after you have analyzed and reported it. You should follow the principle of data minimization, which means that you should collect and retain the least amount of data for the shortest amount of time.

添加您的观点

5 Educate and communicate

Finally, you should educate and communicate with your participants, stakeholders, and team members about the security and privacy of UAT. You should inform them about the tools, methods, and policies you use to protect their data and rights. You should also train them on how to use the tools, how to report any issues or incidents, and how to follow the best practices and guidelines for UAT. You should also update them on the progress and results of UAT, and thank them for their participation and feedback.

添加您的观点

Bojan Vasic

Digital Technology Specialist at Philip Morris International | IBM Cybersecurity Analyst | Web Developer | OSINT | CC,CEH | (ISC)2 & ISACA Member | Web3
举报内容
Ensure that you create and maintain documentation of security and privacy procedures to be compliant with correct and relevant privacy regulations.

已翻译

赞

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

User Research

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How can you ensure secure and private user acceptance testing?

1

2

3

4

5

6

1 Choose the right tools

2 Obtain informed consent

3 Anonymize and pseudonymize data

4 Limit data collection and retention

5 Educate and communicate

6 Here’s what else to consider

User Research

给文章评分

感谢您的反馈

更多User Research相关文章

更多相关阅读内容

How can you ensure secure and private user acceptance testing?

1

2

3

4

5

6

1 Choose the right tools

2 Obtain informed consent

3 Anonymize and pseudonymize data

4 Limit data collection and retention

5 Educate and communicate

6 Here’s what else to consider

User Research

给文章评分

感谢您的反馈

查看其他技能