SCF Connect
B2B SaaS GRC platform built on the Secure Controls Framework
Enables organizations to implement, manage, and scale their cybersecurity posture, risk management, and compliance frameworks in real time.
MY ROLE / UX/UI Designer (Lead Product Design)
The Challenge
The Root Cause
Reflect Real-Time Updates / Organizations struggled to keep up with daily shifts in compliance regulations.
Complex Certification Workflows / The end-to-end certification process was fragmented and overwhelming.
Live Product Iteration / Designed and deployed enhancements directly onto an active platform.
The Solution
Clear Interface Orientation / An agile interface reflects real-time updates without confusing active users.
Unified Compliance Registry / Documentation, evidence collection and tracking live in one centralized hub.
Scalable UI & Pattern Consistency / New features and client-driven updates preserve existing user habits.
Phase 1.Persona Alignment & Ecosystem Mapping
As certification requirements evolved, end-user roles and responsibilities shifted alongside them.
To match real-world workflows, I revisited and updated our core personas while mapping the clear hierarchy and specific responsibilities of each role across the entire certification process.
Establishing clear role-based permissions ensured that every user saw only what they were authorized to access.
Mapping these boundaries before making app updates guaranteed that new features aligned with strict access controls, keeping workflows secure and operational without disrupting daily use.
Phase 2.Key Feature Additions & Workflow Optimization
External Artifact Request Flow
Problem
- Operational delays and Consultant Bottlenecks
Old Workflow - Manual file collection via fragmented emails and external drives before platform upload.
UX Solution
- Third-Party Artifact Portal
An automated, role-restricted collection workflow removes off-platform friction. - Targeted Request Invites
Direct email invitations specify required artifacts and provide secure access links. - Isolated Upload Interface
Dedicated, single-purpose workspace allowing third parties to upload documentation securely without accessing broader platform features.
The Impact
- Reduced Administrative Overhead
Eliminates manual off-platform document collection. - Accelerated Compliance Readiness
Direct submissions shorten evidence-gathering turnaround times. - Secure, Isolated Scalability
Enables external collaboration without compromising platform access rules.
Previously, the upload form only allowed internal users to attach documentation directly.
Kept 'Upload Now' as the default view while enabling one-click switching to the third-party request form via intuitive radio buttons.
Allows third parties to attach as many supporting artifacts as needed alongside contextual messages.
Triggers immediate submission receipts for all parties and grants consultants direct in-app access to review uploaded files.
In-Context Task Onboarding
Problem
- Problem Complexity
Users frequently felt lost due to the compliance procedure.
UX Solution
- Single-View Onboarding Toggle
Empowers users to activate a dedicated onboarding layer (on control view). - Step-by-Step Task Support
Serves as an embedded guide that briefly explains every required step in the workflow. - Clear Action Hierarchy
Eliminates guesswork by surfacing the immediate next step, keeping users oriented and confident throughout the process.
The Impact
- Minimized Drop-Off & Errors
Keeps users on track without requiring external documentation or support intervention. - Faster Task Execution
Shortens time-to-completion by clarifying requirements directly at the point of action.
Phase 3.Marketing Website Update
As platform capabilities expanded, the marketing site lagged behind.
To reflect its true value, I introduced a dynamic homepage slider showcasing real app screens and new features for instant clarity.
I also redesigned the subscription matrix to explicitly detail included tools alongside pricing—eliminating tier ambiguity and reducing sales friction.
