Building a trustworthy system that effectively protects the confidentiality, integrity, and accessibility of its data to meet information security requirements is mainly the purview of the developers. However, stakeholders (especially Subject Matter Experts, or “SMEs”) have an ethical responsibility as well. It’s quite possible for the SMEs to affect trustworthiness by placing constraints on the user experience ( UX) design contrary to good design practice. These constraints can adversely affect system integrity, degrading system trustworthiness. Furthermore, the rationale driving the constraint may be unethical from a business (and not technical) perspective.
