UNFOLD is a web-based platform in the field of information security, designed to help companies implement appropriate technical and organizational measures tailored to their specific needs.
Unlike traditional approaches in this sector, UNFOLD places the user at the center, making information security more understandable, adaptable, and manageable.
The platform responds to legal requirements affecting a large number of companies in Germany, where organizations are obliged to implement and continuously update information security measures as part of an information security management system.
My role: UX/UI design and concept development for the web platform.
The Challenge
While information security requirements are legally mandated, the current approach places a heavy burden on security managers.Most companies face:
-
Highly complex standards
-
Repetitive requirements across different infrastructures
-
Time-consuming and inefficient update processes
Despite the fact that many requirements are largely identical, existing solutions often rely on generalized consulting or overly rigid systems, leaving little room for efficient customization.
The challenge was to design a platform that:
-
Simplifies a complex and technical domain
-
Adapts standardized measures to individual companies
- Reduces workload without compromising security or compliance
An analysis of existing market players, ranging from large consulting firms such as Deloitte to specialized providers like HiSolutions, revealed a clear gap.
Most solutions either communicate security in an overly corporate and abstract way, or emphasize trust and authority at the expense of usability.
UNFOLD aims to sit at the intersection between these approaches:
a balance between clarity and credibility, where complex information security concepts are translated into accessible, user-oriented experiences.
Platform Experience
The onboarding process begins on the Get Started page, where users can request a policy to be unfolded.From there, the platform introduces one of its key features: a Before–After comparison on the What We Deliver page.
This comparison highlights how UNFOLD differs from traditional cybersecurity approaches, based on:
-
Days of work
-
Amount of work (“the policy”)
-
Level of customization
-
Price
Through clear layouts and straightforward animations, the platform communicates its value in a direct and easily understandable way.
The data presented in this comparison is based on averages derived from primary research conducted for the project.
A second core feature is the Profile page, where users can:
-
Track the progress of their policy
-
Edit essential company information
-
Download completed sections of their policy
Any updates to the project appear as notifications within the profile, creating a transparent and automated workflow that is easy to follow over time.
Awareness & Education
In line with UNFOLD’s mission to make cybersecurity more approachable, the platform also offers Awareness Trainings.These are designed to educate company employees on cybersecurity topics, reinforcing good practices beyond compliance and embedding security awareness within the organization.
Results & Reflection
UNFOLD demonstrates how a user-centered approach can transform an inherently complex and technical field into a more accessible and efficient experience.By adapting standardized requirements to individual users, the platform reduces unnecessary workload while maintaining regulatory compliance.
From a design perspective, this project emphasized the importance of communication and hierarchy when working with abstract systems. Translating legal and technical requirements into clear, actionable interfaces reinforced the role of UX/UI design as a bridge between complexity and understanding.
The project highlights how thoughtful design can empower users, not by oversimplifying security, but by making it navigable and adaptable.