hard20 pts · first answer countsnon-functional-requirementstrade-offs

Security vs usability trade-off

Security wants a 15-minute session timeout. Call-centre agents keep getting logged out during long calls and must re-enter data. What should the BA do?

A.Remove the timeout to keep agents productiveB.Clarify the actual risk and usage, propose options such as a longer idle timeout with re-authentication for sensitive actions, and have the risk owner decideC.Keep the 15-minute timeout because security always winsD.Tell agents to click the screen every few minutes

Discussion 0

Join free to post in the discussion.

Security vs usability trade-off

Discussion 0

Related questions