D4.3 User interaction and user experience concept – v1

Deli e able D4.3
Use in e ac ion and use expe ience concep – 1
Edi o (s):
Angela Fessl
Responsible Pa ne :
Know-Cen e GmbH
S a us-Ve sion:
Final
Da e:
31.10.2024
Type:
R
Dis ibu ion le el (SEN, PU):
PU
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 2 o 103
www.eme ald-he.eu
P ojec Numbe :
101120688
P ojec Ti le:
EMERALD
Ti le o Deli e able:
D4.3 – Use in e ac ion and use expe ience concep –
1
Due Da e o Deli e y o he EC
31.10.2024
Wo kpackage esponsible o he
Deli e able:
WP4 - Use in e ac ion and use expe ience
de elopmen
Edi o (s):
Angela Fessl, Simone F anza, Leonie Disch (KNOW)
Con ibu o (s):
Ch is ian Banse (FHG)
F anz Deimling (FABA)
Ma inella Pe occhi (CNR)
C is ina Reguei o Sende os, C is ina Ma ínez Ma ínez,
Iñaki E xaniz E azkin (TECNALIA)
Re iewe (s):
Mika Leskinen (NIXU)
C is ina Ma ínez Ma ínez (TECNALIA)
Juncal Alonso Iba a (TECNALIA)
App o ed by:
All Pa ne s
Recommended/manda o y
eade s:
WP1, WP2, WP3, WP5, WP6
Abs ac :
Ini ial e sion o he epo on he de eloped mock-ups
o he use in e ac ion und use expe ience concep .
Keywo d Lis :
Pape -based mock-ups, Clickable mock-ups, Use
jou neys
Licensing in o ma ion:
This wo k is licensed unde C ea i e Commons
A ibu ion-Sha eAlike 4.0 In e na ional (CC BY-SA 4.0
DEED h ps://c ea i ecommons.o g/licenses/by-sa/4.0/)
Disclaime
Funded by he Eu opean Union. Views and opinions
exp essed a e howe e hose o he au ho (s) only and
do no necessa ily e lec hose o he Eu opean Union.
The Eu opean Union canno be held esponsible o
hem.
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 3 o 103
www.eme ald-he.eu
Documen Desc ip ion
Ve sion
Da e
Modi ica ions In oduced
Modi ica ion Reason
Modi ied by
0.1
08.10.2024
Fi s d a e sion
Angela Fessl (KNOW)
0.2
10.10.2024
QA Re iew
Mika Leskinen (NIXU)
0.3
17.10.2024
In eg a ion o he QA Re iew
commen s
Angela Fessl (KNOW)
0.4
28.10.2024
Final e iew
C is ina Ma ínez/ Juncal
Alonso (TECNALIA)
0.5
29.10.2024
In eg a ion o he inal e iew
commen s
Angela Fessl/Leonie Disch/
Simone F anza (KNOW)
1.0
31.10.2024
Submi ed o he Eu opean
Commission
C is ina Ma ínez/Juncal
Alonso (TECNALIA)
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 4 o 103
www.eme ald-he.eu
Table o con en s
Te ms and abb e ia ions ............................................................................................................... 9
Execu i e Summa y ..................................................................................................................... 10
1 In oduc ion ......................................................................................................................... 11
1.1 Abou his deli e able .................................................................................................. 11
1.2 Documen s uc u e ..................................................................................................... 12
2 Me hodology ....................................................................................................................... 13
2.1 In e iew wi h Pilo Pa ne s ....................................................................................... 14
2.2 Pe sonas, Scena ios, and Use Jou neys Wo kshops .................................................. 15
2.2.1 P ocedu e .......................................................................................................... 15
2.3 EMERALD UI & Componen Wo kshops ...................................................................... 16
2.3.1 P ocedu e .......................................................................................................... 16
2.4 EMERALD Te minology ................................................................................................ 19
3 Mock-ups de i ed om In e iews wi h Pilo Pa ne s ...................................................... 20
4 Mock-ups de eloped wi h he Use Jou neys ..................................................................... 25
4.1 Summa y o Pe sonas and Scena ios ........................................................................... 25
4.2 Use Jou neys and Mock-ups ....................................................................................... 26
4.2.1 Use Jou ney 1: Eme son – B ing you own ce i ica ion scheme..................... 26
4.2.2 Use Jou ney 2: Dylan – In e nal Con ol Owne Con ol Implemen a ion....... 33
4.2.3 Use Jou ney 3: Cha lie – P epa a ion o an audi by an in e nal audi o ........ 40
5 Clickable P o o ypes ............................................................................................................ 48
5.1 Gene al EMERALD UI ................................................................................................... 48
5.1.1 Se ing up and managing Ce i ica ion Ta ge s ................................................. 50
5.1.2 Se ing up and managing Audi Scopes ............................................................. 56
5.2 In eg a ion o Assessmen and Managemen o O ganisa ional E idence (AMOE) in o
he EMERALD UI .................................................................................................................. 63
5.2.1 Resul s o Wo kshop 1 ....................................................................................... 63
5.2.2 Resul s o Wo kshop 2 ....................................................................................... 65
5.2.3 Func ionali y and clickable p o o ype o AMOE ................................................ 65
5.3 In eg a ion o Cloudi o -O ches a o in o he EMERALD UI ...................................... 65
5.3.1 Resul s o Wo kshop 1 ....................................................................................... 65
5.3.2 Func ionali y and clickable p o o ype o Cloudi o -O ches a o ..................... 67
5.3.3 Resul s o Wo kshop 2 ....................................................................................... 68
5.4 In eg a ion o he Mapping Assis an o Regula ions wi h In elligence (MARI) in o he
EMERALD UI ......................................................................................................................... 68
5.4.1 Resul s o Wo kshop 1 ....................................................................................... 68
5.4.2 Func ionali y and Clickable P o o ype o MARI ................................................. 70
5.4.3 Resul s o Wo kshop 2 ....................................................................................... 75
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 5 o 103
www.eme ald-he.eu
5.5 In eg a ion o he Reposi o y o Con ols and Me ics (RCM) in o he EMERALD UI .. 75
5.5.1 Resul s o Wo kshop 1 ....................................................................................... 76
5.5.2 Func ionali y and clickable p o o ype o RCM .................................................. 77
5.5.3 Resul s o Wo kshop 2 ....................................................................................... 82
5.6 In eg a ion o he T us wo hiness Sys em (TWS) in o he EMERALD UI .................... 83
5.6.1 Resul s o Wo kshop 1 ....................................................................................... 83
5.6.2 Func ionali y and clickable p o o ype o he TWS ............................................ 85
5.6.3 Resul s om Wo kshop 2 .................................................................................. 87
6 Conclusions .......................................................................................................................... 88
7 Re e ences ........................................................................................................................... 89
8 APPENDIX A: Mock-ups de i ed om he in e iews ......................................................... 91
8.1 Mock-ups o managing an audi scope ...................................................................... 91
8.2 Mock-ups p esen ing he o e iew o an audi scope ................................................ 94
8.3 Mock-ups p esen ing he con ols ............................................................................... 96
9 APPENDIX B: Mock-ups de i ed om he use jou neys .................................................. 101
9.1 Addi ional Mock-ups de eloped o Use Jou ney 1 ................................................. 101

D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 6 o 103
www.eme ald-he.eu
Lis o Tables
TABLE 1. LIST OF THE PERSONAS, SCENARIOS AND USER JOURNEYS WORKSHOPS ....................................... 15
TABLE 2. OVERVIEW OF THE WORKSHOPS: EMERALD UI & COMPONENTS .............................................. 16
Lis o Figu es
FIGURE 1. OVERALL METHODOLOGY USED FOR DEVELOPING THE EMERALD UI ........................................ 14
FIGURE 2. TEMPLATE FOR DEVELOPING THE USER JOURNEYS ................................................................... 16
FIGURE 3. EXAMPLE OF A PREPARED MIRO BOARD FOR TWS WITH THE THREE DIFFERENT FRAMES................ 18
FIGURE 4. PAPER-BASED MOCK-UPS - EMERALD DESIGN ..................................................................... 21
FIGURE 5. PAPER-BASED MOCK-UPS - EMERALD LANDING PAGE .......................................................... 21
FIGURE 6. PAPER-BASED MOCK-UPS - SETUP OF A NEW AUDIT SCOPE ...................................................... 22
FIGURE 7. PAPER-BASED MOCK-UPS - AUDIT SCOPE OVERVIEW ............................................................... 23
FIGURE 8. PAPER-BASED MOCK-UPS - SHOW INFORMATION ABOUT A CONTROL ........................................ 24
FIGURE 9. USER JOURNEY 1: EMERSON – BRING YOUR OWN CERTIFICATION SCHEME ................................. 28
FIGURE 10. PAPER-BASED MOCK-UPS - USER JOURNEY 1 - STEP 2: ADD BYOCS TO THE EMERALD UI
LANDING PAGE ........................................................................................................................ 29
FIGURE 11. PAPER-BASED MOCK-UPS - USER JOURNEY 1 - STEP 2: SET A SCHEME NAME AND SELECT THE
SCHEMES ................................................................................................................................ 30
FIGURE 12. PAPER-BASED MOCK-UPS - USER JOURNEY 1 – STEP 2: ADD CONTROLS FROM EXISTING SCHEME TO
NEW SCHEME .......................................................................................................................... 31
FIGURE 13. PAPER-BASED MOCK-UPS - USER JOURNEY 1 – STEP 2: DEFINE OWN CONTROL ........................ 32
FIGURE 14. PAPER-BASED MOCK-UPS - USER JOURNEY 1 – STEP 3: SELECT NEW SCHEME FOR A NEW AUDIT
SCOPE .................................................................................................................................... 32
FIGURE 15. USER JOURNEY 2: DYLAN – ICO CONTROL IMPLEMENTATION ................................................ 35
FIGURE 16. PAPER-BASED MOCK-UPS - USER JOURNEY 2 - STEP 1: OPEN AN EXISTING AUDIT SCOPE ............ 36
FIGURE 17. PAPER-BASED MOCK-UPS - USER JOURNEY 2 – STEP 1: AUDIT SCOPE OVERVIEW WITH THE LIST OF
CONTROLS .............................................................................................................................. 37
FIGURE 18. PAPER-BASED MOCK-UPS - USER JOURNEY 2 – STEP1: FILTERING OF CONTROLS ....................... 38
FIGURE 19. PAPER-BASED MOCK-UPS - USER JOURNEY 2 – STEP 1: LIST OF OPEN CONTROLS ...................... 39
FIGURE 20: PAPER-BASED MOCK-UPS - USER JOURNEY 2 – STEP 2: ASSIGNING A CONTROL TO EMPLOYEES OR
DEPARTMENTS ......................................................................................................................... 39
FIGURE 21. PAPER-BASED MOCK-UPS - USER JOURNEY 2 – STEP 3: PERSONAL WORKSPACE AND NUMBER OF
OPEN TASKS ............................................................................................................................ 40
FIGURE 22. USER JOURNEY 3: CHARLIE – PREPARATION OF AN AUDIT BY AN INTERNAL AUDITOR .................. 42
FIGURE 23. PAPER-BASED MOCK-UPS - USER JOURNEY 3 – STEP 2: SETTING UP A NEW AUDIT SCOPE ........... 43
FIGURE 24. PAPER-BASED MOCK-UPS - USER JOURNEY 3 – STEP 2: AUDIT SCOPE OVERVIEW ...................... 44
FIGURE 25. PAPER-BASED MOCK-UPS - USER JOURNEY 3 – STEP 3: FILTERING FOR NON-COMPLIANT CONTROLS
............................................................................................................................................. 45
FIGURE 26. PAPER-BASED MOCK-UPS - USER JOURNEY 3 – STEP 4: CHECK THE REASON OF NON-COMPLIANCE
............................................................................................................................................. 46
FIGURE 27. PAPER-BASED MOCK-UPS - USER JOURNEY 3 – STEP 4: DETAILED INFORMATION ABOUT NON-
COMPLIANCE ........................................................................................................................... 46
FIGURE 28. PAPER-BASED MOCK-UPS - USER JOURNEY 3 – STEP 5: DOWNLOAD THE REPORT ...................... 47
FIGURE 29. OVERVIEW OF THE EMERALD UI VISUALISATION STREAMS .................................................. 49
FIGURE 30. EMERALD LANDING PAGE .............................................................................................. 49
FIGURE 31. CERTIFICATION TARGET - SETUP CERTIFICATION TARGET ........................................................ 50
FIGURE 33. CERTIFICATION TARGET - DESCRIPTION OF HOW TO INSTALL AN EVIDENCE COLLECTOR ................ 51
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 7 o 103
www.eme ald-he.eu
FIGURE 32. CERTIFICATION TARGET - EVIDENCE COLLECTORS FOR THE RESPECTIVE TARGET OF EVALUATION.... 51
FIGURE 34. CERTIFICATION TARGET - AMOE – OVERVIEW OF METRICS AND CORRESPONDING POLICY FILES ... 52
FIGURE 35. CERTIFICATION TARGET - AMOE – UPLOAD A POLICY DOCUMENT AND SELECT THE RESPECTIVE
METRICS THAT SHOULD BE EXTRACTED FROM IT ............................................................................. 53
FIGURE 36. CERTIFICATION TARGET - EKNOWS - DEFINE WHERE TO FIND THE RESOURCES FOR EKNOWS ......... 54
FIGURE 37. CERTIFICATION TARGET - SCREENSHOT OF THE TWS SETUP PAGE ........................................... 55
FIGURE 38. CERTIFICATION TARGET - SELECT AN EXISTING CERTIFICATION TARGET FROM THE LIST TO OPEN IT 55
FIGURE 39. AUDIT SCOPE – SETUP A NEW AUDIT SCOPE ......................................................................... 56
FIGURE 40. AUDIT SCOPE - SELECT AN EXISTING AUDIT SCOPE ................................................................. 57
FIGURE 41. AUDIT SCOPE – ENTRY PAGE OF AN AUDIT SCOPE ................................................................. 58
FIGURE 42. AUDIT SCOPE – OVERVIEW PAGE OF A CONTROL .................................................................. 59
FIGURE 43. AUDIT SCOPE – ASSESSMENT OVERVIEW OF THE METRICS ASSIGNED TO A CONTROL ................... 59
FIGURE 44. AUDIT SCOPE – OVERVIEW OF AN ORGANISATIONAL METRIC .................................................. 60
FIGURE 45. AUDIT SCOPE – UPLOAD A POLICY DOCUMENT AND SELECT METRICS ....................................... 61
FIGURE 46. AUDIT SCOPE – ASSIGNMENT OF INDIVIDUALS OR DEPARTMENTS TO A CONTROL ....................... 61
FIGURE 47. AUDIT SCOPE – SHOW HISTORY OF CHANGES FOR THE RESPECTIVE CONTROL ............................. 62
FIGURE 48. AUDIT SCOPE – SHOW HISTORY CHANGES OF A CONTROL IN DETAIL ......................................... 62
FIGURE 49. AMOE - SCREENSHOT OF THE MIRO BOARD WITH YELLOW AND VIOLET STICKY-NOTES TO CAPTURE
THE FUNCTIONALITY AND FEATURES FOR AMOE ........................................................................... 64
FIGURE 50. ORCHESTRATOR - SCREENSHOT OF THE MIRO BOARD WITH YELLOW AND VIOLET STICKY-NOTES TO
CAPTURE THE FUNCTIONALITY AND FEATURES FOR THE ORCHESTRATOR ............................................ 66
FIGURE 51. CLOUDITOR-ORCHESTRATOR – RESOURCE GRAPH SHOWING ALL TECHNICAL EVIDENCE ............... 68
FIGURE 52. MARI - SCREENSHOT OF THE MIRO BOARD WITH YELLOW AND VIOLET STICKY-NOTES TO CAPTURE
THE FUNCTIONALITY AND FEATURES FOR THE MARI COMPONENT .................................................... 70
FIGURE 53. CERTIFICATION SCHEME - OVERVIEW PAGE ......................................................................... 71
FIGURE 54. MARI - OVERVIEW OF CONTROLS AND MAPPED METRICS ...................................................... 72
FIGURE 55. MARI - PRESENTATION OF A METRIC DEFINITION ................................................................. 72
FIGURE 56. MARI - SELECT TWO OR MORE SCHEMES FOR MAPPING THEIR CONTROLS................................. 73
FIGURE 57. MARI - MAPPING CONTROLS FROM EUCS TO BSI C5 .......................................................... 74
FIGURE 58. MARI - MAPPING CONTROLS FROM BSI C5 TO EUCS .......................................................... 75
FIGURE 59. RCM - SCREENSHOT OF THE MIRO BOARD WITH YELLOW AND VIOLET STICKY-NOTES TO CAPTURE
THE FUNCTIONALITY AND FEATURES FOR RCM .............................................................................. 77
FIGURE 60. RCM - CERTIFICATION SCHEME OVERVIEW PAGE – OVERVIEW PAGE ....................................... 78
FIGURE 61. RCM – BROWSE EUCS SCHEME: VIEW HIGH LEVEL CATEGORIES ............................................. 79
FIGURE 62. RCM – BROWSE EUCS SCHEME: VIEW SUB-CATEGORIES ....................................................... 79
FIGURE 63. RCM - OVERVIEW OF THE CONTROLS BELONGING TO A CATEGORY .......................................... 80
FIGURE 64. RCM - OVERVIEW OF THE LIST OF METRICS ASSIGNED TO A CONTROL ...................................... 81
FIGURE 65. RCM - PRESENTATION OF AN IMPLEMENTATION GUIDELINE FOR A CONTROL ............................ 81
FIGURE 66. RCM - UPLOAD A NEW CERTIFICATION SCHEME ................................................................... 82
FIGURE 67. TWS - SCREENSHOT OF THE MIRO BOARD WITH YELLOW AND VIOLET STICKY-NOTES TO CAPTURE
THE FUNCTIONALITY AND FEATURES FOR THE TWS ........................................................................ 84
FIGURE 68. TWS - SCREENSHOT OF AN AUDIT SCOPE WITH THE “GREEN SYMBOL” FOR THE INTEGRITY CHECK 86
FIGURE 69. TWS - SCREENSHOT OF AN AUDIT SCOPE WITH THE “RED SYMBOL” FOR THE INTEGRITY CHECK .... 86
FIGURE 70. TWS - SCREENSHOT OF A TWS REPORT WHEN THE DATA INTEGRITY IS NOT GIVEN ANYMORE ...... 87
FIGURE 71. PAPER-BASED MOCK-UPS - OPEN AN EXISTING AUDIT SCOPE .................................................. 91
FIGURE 72. PAPER-BASED MOCK-UPS – UPDATE THE CERTIFICATION SCHEME OF AN EXISTING AUDIT SCOPE ... 92
FIGURE 73. PAPER-BASED MOCK-UPS - MAKE A COPY OF AN EXISTING AUDIT SCOPE .................................. 93
FIGURE 74. PAPER-BASED MOCK-UPS - SHOW OVERVIEW OF A CATEGORY AND THE RESPECTIVE CONTROLS.... 94
FIGURE 75. PAPER-BASED MOCK-UPS - SHOW AN OVERVIEW OF THE CONTROLS ONLY (WITHOUT CATEGORIES)
............................................................................................................................................. 95
FIGURE 76. PAPER-BASED MOCK-UPS - SUGGESTION OF HOW TO PRESENT DIFFERENT TYPES OF EVIDENCE FOR A
CONTROL (V1) ......................................................................................................................... 96
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 8 o 103
www.eme ald-he.eu
FIGURE 77. PAPER-BASED MOCK-UPS - SUGGESTION OF HOW TO SHOW DIFFERENT TYPES OF EVIDENCE FOR ONE
CONTROL (V2) ......................................................................................................................... 97
FIGURE 78. PAPER-BASED MOCK-UPS - SUGGESTION OF HOW TO PRESENT INFORMATION ABOUT NON-
COMPLIANCES ......................................................................................................................... 98
FIGURE 79. PAPER-BASED MOCK-UPS - SUGGESTION OF HOW TO ASSIGN A CONTROL TO A COLLEAGUE OR A
WHOLE DEPARTMENT ............................................................................................................... 99
FIGURE 80. PAPER-BASED MOCK-UPS - SUGGESTION OF THE HISTORY LOG INFORMATION VIEW OF A CONTROL
........................................................................................................................................... 100
FIGURE 81. PAPER-BASED MOCK-UPS - USER JOURNEY 1: UPDATING A SELF-DEFINED SCHEME .................. 101
FIGURE 82. PAPER-BASED MOCK-UPS - USER JOURNEY 1: SELECT AN EXISTING SELF-DEFINED CERTIFICATION
SCHEME ............................................................................................................................... 102
FIGURE 83. PAPER-BASED MOCK-UPS - USER JOURNEY 1: EDIT AN EXISTING SELF-DEFINED CERTIFICATION
SCHEME ............................................................................................................................... 103
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 9 o 103
www.eme ald-he.eu
Te ms and abb e ia ions
AI
A i icial In elligence
AI-SEC
AI Secu i y E idence Collec o
AMOE
Assessmen and Managemen o O ganisa ional E idence
BYOCS
B ing You Own Ce i ica ion Scheme
BSI
Bundesam ü Siche hei in de In o ma ions echnik
CaaS
Ce i ica ion-as-a-se ice
CISO
Chie In o ma ion Secu i y O ice s
CSP
Cloud Se ice P o ide
DoA
Desc ip ion o Ac ion
EC
Eu opean Commission
ENS
Esquema Nacional de Segu idad
EUCS
Eu opean Cybe secu i y Ce i ica ion Scheme o Cloud Se ice
GA
G an Ag eemen o he p ojec
ICO
In e nal Con ol Owne
KPI
Key Pe o mance Indica o
MARI
Mapping Assis an o Regula ions wi h In elligence
NLP
Na u al Language P ocessing
OSCAL
Open Secu i y Con ols Assessmen Language
RCM
Reposi o y o Con ols and Me ics
TWS
T us wo hiness Sys em
UI
Use In e ace
UX
Use Expe ience
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 16 o 103
www.eme ald-he.eu
• Scena io s eps: he uppe pa o he empla e allows o spli he scena io in o
di e en s eps (see Figu e 2, poin 1).
• In e ac ion wi h he EMERALD UI: Fo each s ep o he scena io, a desc ip ion o he
in e ac ion wi h he EMERALD UI should be added (see Figu e 2, poin 2).
• Mock-ups: Below we ha e added some mock-ups ha migh i o he co esponding
scena io (see Figu e 2, poin 3).
The esul ing Use Jou neys o he h ee pe sonas a e p esen ed in de ail in Sec ion 4.
2.3 EMERALD UI & Componen Wo kshops
A e ha ing done a se o in e iews and ocus g oups wi h he pilo pa ne s, and a e ha ing
done a i s wo kshop on Pe sonas & Scena ios, and especially Use Jou neys, we se up a
wo kshop se ies wi h all EMERALD componen owne s (see Table 2). The goal o his wo kshop
se ies is o ind ou how o in eg a e all EMERALD componen s in o he EMERALD UI.
Table 2. O e iew o he wo kshops: EMERALD UI & Componen s
Componen
Pa I
Pa II
Pa III
AMOE
31.07.2024
22.08.2024
Cloudi o -O ches a o
31.07.2024
11.10.2024
MARI
23.07.2024
09.10.2024
17.10.2024
RCM
24.07.2024
10.09.2024
TWS
01.08.2024
26.08.2024
eknows / Codyze
09.10.2024
No planned ye
AI-SEC / Cloudi o -Disco e y
No planned ye
No planned ye
2.3.1 P ocedu e
To se up he wo kshop se ies, we sen ou an in i e o all EMERALD p ojec pa ne s. We
asked hem o ill in a Doodle o schedule wo da es o each componen . The i s wo kshop
da e o each componen mee ing (Wo kshop – Pa I) was se o he las wo weeks o July
and beginning o Augus 2024. The second wo kshop se ies (Wo kshop – Pa II) ook place
Figu e 2. Templa e o de eloping he use jou neys

D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 17 o 103
www.eme ald-he.eu
end o Augus and mid o Sep embe 2024. In all wo kshops, we used Mi o
3
as an online
collabo a i e whi eboa d.
Wo kshop (Pa I): Each wo kshop ollowed he same s uc u e. A he beginning o each
wo kshop, we p esen ed he goal o he wo kshop namely o ind ou how o in eg a e he
EMERALD componen in o he EMERALD UI. Fo each o he componen s we ha e c ea ed a
Mi o boa d wi h h ee di e en ames as p esen ed in Figu e 3. In he i s Mi o ame, we
sho ly summa ized he pu pose o he espec i e componen . In a i s discussion ound we
discussed wi h he componen owne he espec i e componen o see i we ha e unde s ood
i s pu pose co ec ly o i some hing was missing. Subsequen ly we discussed wi h he
componen owne how o in eg a e he componen in o he UI om wo pe spec i es – he
i s one was abou how o se -up he componen (i necessa y) and he second one was abou
he in eg a ion o he componen in o he UI when wo king wi h i .
• “Se -up” o he componen : In he second ame o he Mi o Boa d, we made a ailable
p ede ined mock-ups o he EMERALD landing page, possibili ies o se up EMERALD as
well as neu al mock-ups. Then we discussed wi h he componen owne s ep-by-s ep
wha was needed o se ing up he componen (i necessa y) asking ques ions such as:
Which in o ma ion is needed o se up he componen ? Which in o ma ion should be
p esen ed in he UI? Which unc ionali y should be o e ed by he UI?
• “Wo king” wi h he componen : In he hi d ame, we added on he one hand mock-
ups we ha e p epa ed ega ding how we hough he componen could be in eg a ed
in o he UI. On he o he hand, we again added emp y mock-ups o lea e oom o
inno a ion and c ea i i y. Again, we asked simila ques ions ega ding he isualisa ion
and unc ionali y.
3
Mi o: h ps://mi o.com/
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 18 o 103
www.eme ald-he.eu
Figu e 3. Example o a p epa ed Mi o boa d o TWS wi h he h ee di e en ames
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 19 o 103
www.eme ald-he.eu
Wo kshop (Pa II): The goal o each ollow-up wo kshop was o p esen he c ea ed clickable
p o o ypes de eloped in Figma
4
o discuss i hey wo k in a way ha is in line wi h wha he
componen owne s would like o ha e and i he p o o ype ul ils all equi ed unc ionali ies.
Simila o he i s wo kshop, we i s p esen ed he esul s om wo pe spec i es – he se -up
phase (whe e applicable) and he wo king phase. As hose phases a e s ongly dependen on
he di e en componen s, he wo kshops we e ailo ed o he componen owne ’s needs and
he componen ’s in eg a ion in o he UI. Fo example, o se up a cloud se ice, egis e ed
e idence ex ac o s need o be added o he cloud se ice o e ie e he assessmen esul s
om Cloudi o -O ches a o . Fo AMOE no se -up is necessa y, and i mus be possible o
upload he espec i e policy documen s o he di e en con ols o schemes.
2.4 EMERALD Te minology
Du ing he de elopmen o he pape -based and clickable mock-ups, he conso ium discussed
and uni ied he naming con en ion o he whole EMERALD p ojec . “Ce i ica ion a ge ” is a
(cloud) se ice ha will be ce i ied acco ding o a speci ic ce i ica ion scheme; i ep esen s
wha a sys em o se ice does and how i does i (including he a chi ec u e). “Audi scope”
(p e iously called audi ins ance) is a de ailed desc ip ion o wha will be audi ed; i consis s o
a combina ion o he ce i ica ion a ge and a espec i e ce i ica ion scheme. Mo e
in o ma ion abou he EMERALD e minology can be ound in D1.3 [16].
As he de elopmen o he EMERALD e minology ook place a e he de elopmen o he i s
pape -based mock-ups, he pape -based mock-ups p esen ed below (Sec ion 3 and 4) con ain
he p e ious e minology – namely “audi ins ance” (ins ead o audi scope). The clickable
mock-ups (Sec ion 5) con ain al eady he co ec EMERALD e minology.
4
Figma: h ps://www. igma.com
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 20 o 103
www.eme ald-he.eu
3 Mock-ups de i ed om In e iews wi h Pilo Pa ne s
In he con ex o WP4, we ha e conduc ed di e en ypes o in e iews. On he one hand, we
conduc ed an in e ac i e in e iew session wi h all pilo pa ne s a he gene al assembly in
Bilbao (Ma ch 2024). The goal o his session was o ge insigh s abou he pilo pa ne s, hei
pain poin s and needs du ing he se -up and conduc ion o audi p ocesses, and o ge i s
ideas o insigh s whe e he EMERALD UI could suppo hem. On he o he hand, we
conduc ed in e iews wi h all pilo pa ne s indi idually. The goal o hese in e iews was o
elici in-dep h insigh s abou he wo k o audi o s (A), compliance manage s (CM), and (chie
in o ma ion) secu i y o ice s (CISO) in ela ion o con inuous cloud audi ing p ocesses. F om
hese, we we e able o de i e conc e e wo k p ocesses and 17 ini ial equi emen s (as
p esen ed in D4.1 [1]) o he de elopmen o he EMERALD UI/UX.
Mo e in o ma ion abou he in e ac i e in e iew session and he in e iews conduc ed wi h
he pilo pa ne s was p esen ed in D4.1 [1].
Based on he insigh s gained om he di e en ypes o in e iews, as well as he de i ed
UI/UX equi emen s, we de i ed a i s se o pape -based mock-ups. These mock-ups we e
d awn wi h Powe Poin o ge a i s imp ession o how he EMERALD UI/UX could look like
and which unc ionali ies should be a ailable.
Al oge he , we we e able o c ea e a ound 20 mock-ups consis ing o he ollowing pa s:
• EMERALD Look & Feel: Be o e s a ing wi h he de elopmen o he mock-ups, we
de eloped an ini ial EMERALD Design, as depic ed in Figu e 4, which was hen used
h oughou all he mock-ups.
• EMERALD Landing Page: We de eloped a i s e sion o how he EMERALD Landing
Page could look like, as depic ed in Figu e 5.
• Se -up an audi scope: We d ew a i s mock-up abou how an EMERALD audi scope
(p e iously called a ge o e idence) could be se up, as shown in Figu e 6.
• O e iew o an audi scope: A e ha ing c ea ed an audi scope, we p epa ed some
mock-ups o wha he audi scope o e iew page migh look like as, p esen ed in
Figu e 7.
• Managing indi idual con ols: We de eloped a mock-up showing he espec i e
in o ma ion pe con ol, including an o e iew o he con ol, e idence, non-
compliance, me ic, assignmen , and his o y, as p esen ed in Figu e 8.
Be awa e, ha in his i s se o mock-ups only he needs o he pilo pa ne s we e
conside ed. Up o his poin , we had no alked in de ail wi h he componen owne s,
consequen ly hese mock-ups did no ye ep esen he needs o each componen , no hei
unc ionali ies and ea u es. This means ha he mock-ups p esen ed below we e no
comple ed and needed u he e inemen s and con inuous design i e a ions.
Figu e 4 p esen s he i s idea o he EMERALD design, conside ing he o e all EMERALD
p ojec design and he colou pale e designed o he p ojec .
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 21 o 103
www.eme ald-he.eu
Figu e 5 p esen s he landing page which should p o ide di ec access o he mos ele an
unc ionali ies and ea u es o EMERALD, including he espec i e EMERALD componen s. In
he i s d a , we added all EMERALD componen s explici ly he e, howe e , as he EMERALD
Figu e 4. Pape -based Mock-ups - EMERALD Design
Figu e 5. Pape -based Mock-ups - EMERALD Landing Page

D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 22 o 103
www.eme ald-he.eu
UI should be an in eg a ed UI including all EMERALD componen s, his would be changed.
Figu e 6 shows he ini ial e sion o how- o se up an audi scope (s ill called “audi ins ance” in
he mock-up). In addi ion o naming he audi scope, i allows he use o selec a p ede ined
cloud se ice and he espec i e ce i ica ion scheme (s ill called “s anda d” in he mock-up).
Fu he mo e, i is possible o upload policy documen s. Wha is missing is he ela ion o he
echnical e idence, which would be add essed a a la e s age.
Figu e 7 shows wha he o e iew page o an audi scope migh look like. On op i p esen s
in o ma ion ega ding he audi scope, he selec ed ce i ica ion a ge (s ill called “cloud
se ice” in he mock-up), he ce i ica ion scheme (called “s anda d” in he mock-up) and he
assu ance le el. Below i p o ides some boxes wi h o e iew in o ma ion abou he
compliance and non-compliance s a es ac oss all con ols, gene al s a us in o ma ion abou
he indi idual con ols as well as a box ega ding he upload o he policy documen s. Below i
p esen s a sea ch ba allowing o sea ch o speci ic con ols and hen p esen s a lis o he
ca ego ies and con ols o he espec i e ce i ica ion schemes, unc ionali ies o il e ing he
lis and accessing he indi idual con ols.
Figu e 6. Pape -based Mock-ups - Se up o a new audi scope
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 23 o 103
www.eme ald-he.eu
Figu e 8 p esen s a de ailed iew o a con ol. In o ma ion abou he audi scope and he
con ol a e on op o he mock-up. Below a use can swi ch ia se e al “ abs” o he di e en
in o ma ion including: i) o e iew o he con ol - p esen ing some gene al in o ma ion, ii)
e idence – showing he pieces o e idences ex ac ed o he con ol, iii) non-compliance – i
his con ol would be non-complian , he easons would be p esen ed he e, i ) me ic
in o ma ion – p esen s which me ics we e assigned o he con ol, ) assignmen in o ma ion
– showing in o ma ion on who is esponsible o he con ol, i) and a his o y – showing how
he implemen a ion o he con ol has e ol ed o e ime.
Figu e 7. Pape -based Mock-ups - Audi scope o e iew
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 24 o 103
www.eme ald-he.eu
Fu he mock-ups can be ound in he APPENDIX A: Mock-ups de i ed om he in e iews.
Figu e 8. Pape -based Mock-ups - Show in o ma ion abou a con ol
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 25 o 103
www.eme ald-he.eu
4 Mock-ups de eloped wi h he Use Jou neys
The i s Pe sonas, Scena ios, and Use Jou ney wo kshop was conduc ed in June 2024. This
wo kshop was di ided in o wo pa s. In he i s pa (05.06.2024) ou pe sonas we e
de eloped, in he second pa (12.06.2024), h ee conc e e scena ios and co esponding use
jou neys we e de eloped.
4.1 Summa y o Pe sonas and Scena ios
In his sec ion, a sho summa y o he de eloped pe sonas and scena ios a e p esen ed. The
de ailed esul s o he de eloped pe sonas and scena ios a e epo ed in D4.1 [1].
In he i s pa o he wo kshop, ou di e en pe sonas we e de eloped, which a e
summa ized below:
• Eme son – Compliance Manage in Financial Se ices Ins i u ion: Eme son ocuses on
isk managemen o hi d-pa y cloud se ices, assesses con ols based on isk and
egula ion, manages con ac ual ag eemen s, and moni o s compliance. The o e all
goal o Eme son is o ensu e i) ha all se ice p o ide s a e complian wi h gi en
s anda ds, and ii) sa e y by mi iga ing isks associa ed wi h audi equi emen s.
Challenges e e o he communica ion ac oss depa men s. EMERALD could help in
he day- o-day asks by p o iding a cen alized poin o e idence, me ics, and
con ols, by au oma ing edious p ocesses and managemen o nume ous audi s and
educing he wo kload.
• Riley – Cloud Se ice Compliance Manage : Riley is a junio compliance analys whose
esponsibili ies a e o ganizing audi s and managing he scheduling o di e en
compliance schemes. Riley's goals a e o suppo he company in being us wo hy,
pe ec ing audi p ocesses, being up o da e wi h secu i y s anda ds, and pe o ming
asks mo e e icien ly. Riley’s pain poin s e e o i) eliance on o he s o inish asks
imely, ii) lack o e icien audi ools, and iii) lack o unde s anding o complex
ce i ica ion amewo ks. EMERALD should help Riley wi h he day- o-day asks by
speeding up he wo k.
• Dylan – In e nal Con ol Owne : Dylan is an expe ience p oduc owne and is
esponsible o leading he head o p oduc ion eam and o e seeing and planning
p oduc de elopmen and backend se ices. Rega ding audi s, Dylan’s asks consis o
de ining me ics, collec ing e idence o con ols, assigning and delega ing con ol
implemen a ion o he eam aiming a ha ing no non-compliance o all se ices.
EMERALD could help Dylan by allowing o i) simply delega e asks, ii) p o ide an
o e iew o assigned con ols and iii) display assessmen esul s.
• Cha lie – In e nal Audi o : Cha lie is a senio audi o , and Cha lie's esponsibili ies
include managing he audi p ocess, planning, epo ing, and main aining con ac wi h
cus ome s. Cha lie o e s empla es o he cus ome s/colleagues wi h he goal o i)
p o ide easy access o in o ma ion/e idence, ii) educe isks, iii) ul il audi KPIs, and
i ) help cus ome s. Challenges e e o ge ing in con ac wi h he esponsible pe son
and e ie ing he ele an in o ma ion. The EMERALD UI could help by p o iding an
o e iew o he equi ed in o ma ion and suppo he c ea ion o espec i e epo s.
In he second pa o he wo kshop, h ee di e en scena ios we e de eloped o Eme son,
Dylan, and Cha lie, which a e summa ized as ollows:
• Scena io 1: Eme son – B ing You Own Ce i ica ion Scheme: In his scena io,
Eme son is asked wi h c ea ing a cus om ce i ica ion scheme by selec ing and
combining con ols om exis ing schemes (e.g. EUCS, BSI C5), a p ocess e e ed o as
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 32 o 103
www.eme ald-he.eu
Figu e 13 p esen s he possibili y o add a new sel -de ined con ol.
Figu e 14 p esen s how o selec he newly c ea ed scheme o se ing up a new audi scope.
Figu e 13. Pape -based Mock-ups - Use Jou ney 1 – S ep 2: De ine own con ol
Figu e 14. Pape -based Mock-ups - Use Jou ney 1 – S ep 3: Selec new scheme o a
new audi scope

D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 33 o 103
www.eme ald-he.eu
In addi ion o he mock-ups p esen ed abo e, h ee u he mock-ups we e de eloped ha
show how o edi he sel -de ined scheme. These mock-ups a e added in APPENDIX B: Mock-
ups de i ed om he use jou neys, in Sec ion 9.1.
4.2.2 Use Jou ney 2: Dylan – In e nal Con ol Owne Con ol
Implemen a ion
The scena io o Dylan was also di ided in o six s eps, as depic ed in Figu e 15. Fo each s ep,
i s Dylan’s ask is desc ibed and hen he in e ac ion wi h he EMERALD UI.
S ep 1:
• Dylan’s Task: Dylan opens he EMERALD UI o check i he e a e any new con ols ha
need o be wo ked on.
• Dylan’s In e ac ion wi h he EMERALD UI: Dylan opens he EMERALD UI in hei web-
b owse and signs in wi h hei c eden ials. They a e hen edi ec ed o he EMERALD
Dashboa d whe e all assigned con ols can be easily seen.
S ep 2:
• Dylan’s Task: I Dylan inds a new con ol, bu hey canno p o ide he e idence by
hemsel es, hey assign i o colleague Y.
• Dylan’s In e ac ion wi h he EMERALD UI: In he de ail iew o a con ol, Dylan assigns
a colleague o hei s as i s implemen e . EMERALD no i ies hei colleague abou a new
con ol.
S ep 3:
• Y’s Task: Y iews he pe sonal con ol Todo lis .
• Y’s In e ac ion wi h he EMERALD UI: Y na iga es o hei pe sonal con ol o e iew
and opens he de ailed iew o a con ol.
S ep 4:
• Y’s Task: Y checks i he e a e al eady ecommended me ics ha can be used. Y
assigns he me ics o he con ol.
• Y’s In e ac ion wi h he EMERALD UI: Y opens he MARI componen and selec s a se
o me ics o he con ol.
S ep 5:
• Y’s Task: Y checks all me ics o hei implemen a ion s a us. I hey a e no ye
implemen ed, hey a e assigned.
• Y’s In e ac ion wi h he EMERALD UI: Y can see he implemen a ion s a us o he
necessa y me ics in he o e iew o he con ol. I hey a e no ye implemen ed, hey
can also be assigned o ano he colleagues – colleague Z - in he iew.
S ep 6:
• Z’s Task: Z implemen s he me ic and makes su e he e idence is included in he
EMERALD solu ion.
• Z’s and Dylan’s In e ac ion wi h he EMERALD UI: Z sees he lis o me ics o be
implemen ed. Z implemen s he me ic and con i ms he implemen a ion once i is
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 34 o 103
www.eme ald-he.eu
done. Dylan ge s no i ied abou he new s a us o he con ol. The dashboa d is
upda ed. Dylan sees he new s a us o hei con ols.
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 35 o 103
www.eme ald-he.eu
Figu e 15. Use Jou ney 2: Dylan – ICO Con ol Implemen a ion
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 36 o 103
www.eme ald-he.eu
4.2.2.1 Mock-ups: Dylan – In e nal Con ol Owne Con ol Implemen a ion
Based on he use jou ney om Dylan, we ha e c ea ed a se o mock-ups ha maps pa s o
he use jou ney o he mock-ups. In he case o use jou ney 2, we ocus on he mock-ups o
il e ing o non-complian con ols (S ep 1) and o assigning an open con ol o a colleague
(S ep 2).
Figu e 16 shows how o selec an exis ing audi scope.
Figu e 16. Pape -based Mock-ups - Use Jou ney 2 - S ep 1: Open an exis ing audi
scope
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 37 o 103
www.eme ald-he.eu
Figu e 17 p esen s he o e iew page o an exis ing audi scope and he lis o he espec i e
con ols.
Figu e 17. Pape -based Mock-ups - Use Jou ney 2 – S ep 1: Audi scope o e iew
wi h he lis o con ols

D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 38 o 103
www.eme ald-he.eu
Figu e 18 p esen s he o e iew o an audi scope and he possibili y o il e o open con ols
– hese a e con ols ha ha e no been deal wi h so a .
Figu e 18. Pape -based Mock-ups - Use Jou ney 2 – S ep1: Fil e ing o con ols
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 39 o 103
www.eme ald-he.eu
Figu e 19 p esen s he lis o open con ols.
Figu e 20 p esen s he UI o assigning a con ol o ei he an indi idual pe son o o a whole
depa men .
Figu e 19. Pape -based Mock-ups - Use Jou ney 2 – S ep 1: Lis o open con ols
Figu e 20: Pape -based Mock-ups - Use Jou ney 2 – S ep 2: Assigning a con ol o
employees o depa men s
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 40 o 103
www.eme ald-he.eu
Figu e 21 p esen s an example o how he indi idual wo kspace looks like. Addi ionally, i
shows he pe son’s assigned numbe o asks.
4.2.3 Use Jou ney 3: Cha lie – P epa a ion o an audi by an in e nal
audi o
The scena io o Cha lie was di ided in o i e s eps as depic ed in Figu e 22. Fo each s ep, i s
Cha lie’s ask is desc ibed and hen he in e ac ion wi h he EMERALD UI.
S ep 1:
• Cha lie’s Task: Cha lie is an in e nal audi o a a Cloud Fe o and is esponsible o he
managemen o he audi p ocesses agains EUCS, including he p epa a ion o he
audi . Cha lie needs o e iew all he con ols and check i all ha e hei espec i e
e idence assigned o hem.
• Cha lie’s In e ac ion wi h he EMERALD UI: no in e ac ion is equi ed.
S ep 2:
• Cha lie’s Task: Cha lie en e s he EMERALD UI/UX, looks o he con ols ela ed o
EUCS high.
• Cha lie’s In e ac ion wi h he EMERALD UI: 1) Cha lie logs in o he EMERALD UI/UX. 2)
Cha lie selec s he componen s o be audi ed. 3) Cha lie selec s he EUCS scheme. 4)
Cha lie looks o he associa ed con ols.
S ep 3:
• Cha lie’s Task: Cha lie checks he non-con o mi ies o he associa ed e idence.
Figu e 21. Pape -based Mock-ups - Use Jou ney 2 – S ep 3: Pe sonal wo kspace and
numbe o open asks
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 41 o 103
www.eme ald-he.eu
• Cha lie’s In e ac ion wi h he EMERALD UI: 5) Cha lie clicks on he ed lag /icon o
he con ols ha a e no complian .
S ep 4:
• Cha lie’s Task: When Cha lie disco e s a non-compliance, Cha lie wan s o see which
o he me ic/assessmen esul is causing ha non-compliance so ha hey can
in o m he compliance manage .
• Cha lie’s In e ac ion wi h he EMERALD UI: Cha lie opens he de ailed iew on he
non-con o mi ies cause: no eaching he h eshold, me ic no measu ed (connec ion
los , e c...), non- us wo hy e idence, e c.
S ep 5:
• Cha lie’s Task: Once Cha lie has e iewed all he non-compliances hey comple e an
in e nal epo o he compliance manage .
• Cha lie’s In e ac ion wi h he EMERALD UI: Cha lie expo s he summa y o he non-
con o mi ies (including he de ailed in o ma ion).
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 48 o 103
www.eme ald-he.eu
5 Clickable P o o ypes
To de elop he in eg a ed EMERALD UI, we aim o b ing oge he he needs om he pilo
pa ne s and he echnical pa ne s. Wi h he pilo pa ne s, we ha e conduc ed in e iews
and ocus g oups, and ha e de eloped pe sonas, scena ios, and use jou neys in di e en
wo kshops. F om he insigh s gained, we ha e de i ed a i s se o pape -based mock-ups (see
Sec ion 3). Subsequen ly we conduc ed indi idual wo kshops wi h he di e en componen
owne s o i) ge hei eedback abou he pape -based mock-ups; ii) ind ou which
unc ionali ies and ea u es needed o be added; and iii) iden i y wha else was missing. Based
on hese discussions, we we e able o s a he de elopmen on he clickable mock-ups.
I is impo an o no ice ha he de elopmen o he clickable mock-ups is s ill wo k-in-
p og ess du ing he ime o w i ing his deli e able. This means ha he de elopmen is
nei he comple e no ha e e y hing is al eady in place. In he upcoming mon hs, he e will be
egula eedback loops wi h he pilo pa ne s and componen owne s o imp o e he
EMERALD UI, un il i ul ils he needs o all pa ne s. Thus, all sc eensho s o he clickable
p o o ype p esen ed in he nex sec ions a e s ill unde de elopmen and a e subjec o
change. Addi ionally, no all elici ed ea u es and unc ionali ies ha e been implemen ed ye ;
his will be men ioned whe e applicable. The inal e sion o he clickable p o o ype will be
a ailable in M24 (Oc obe 2025) o he p ojec .
5.1 Gene al EMERALD UI
The o e all EMERALD UI should p o ide a use in e ace (UI) “… which is ailo ed o he use s’
needs du ing all s ages o an audi and guides hem h ough he p ocess o iden i ying
p oblems op down – om high le el equi emen s down o speci ic implemen a ion in
documen s (e.g., policies) o echnical speci ica ions.“ as desc ibed in he DoA [2]. The e o e, in
WP4 se e al ac i i ies wi h pilo pa ne s as well as componen owne s we e conduc ed o
elici he needs o he di e en pa ne s (as desc ibed in Sec ions 2, 3, and 4).
F om hese ac i i ies, we we e able o de i e h ee majo isualisa ion s eams so ha he
EMERALD UI can suppo all ele an s ages du ing an audi : S eam 1: Se ing up and
managing he Ce i ica ion Ta ge ; S eam 2: Se ing up and managing he Audi Scope; S eam
3: Se ing up and managing he ce i ica ion schemes. Addi ional isualisa ions include he
au hen ica ion, ole, and access managemen , as well as he managemen o “My ToDo Lis ”.
An o e iew o he EMERALD UI, he di e en isualisa ion s eams, and he ela ed EMERALD
componen s is p esen ed in Figu e 29.
In he ollowing we pu he ocus on he h ee main isualisa ion s eams ha will be desc ibed
in mo e de ail.
• S eam 1: Se ing up and managing Ce i ica ion Ta ge s: This s eam ocusses on he
selec ion o ce i ica ion a ge s (e.g. cloud se ices...), allows o selec and se up he
di e en e idence ex ac o s including eknows, Codyze, AI-SEC, Cloudi o -Disco e y,
and AMOE, and allows o se he se ings o he TWS. This s eam will be p esen ed in
he subsequen Sec ion 5.1.1 as well as in Sec ion 5.2 and Sec ion 5.3.
• S eam 2: Se ing up and managing Audi Scopes: This s eam ocuses on se ing up
he audi scopes, hus selec ing he ce i ica ion a ge and he co esponding
ce i ica ion scheme o be p epa ed o an audi . Fu he mo e, i shows he
assessmen esul s o he e idence ex ac o s and allows o manage all con ols
ega ding hei compliance o non-compliance (AMOE, Cloudi o -O ches a o );
addi ionally di e en con ols can be assigned o di e en people and depa men s.

D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 49 o 103
www.eme ald-he.eu
This s eam will be p esen ed in he subsequen Sec ion 5.1.2 as well as in Sec ion 5.2
and Sec ion 5.3.
• S eam 3: Se ing up and managing he ce i ica ion schemes: This s eam ocuses on
he upload o he ce i ica ion schemes, he possibili y o b owse h ough hem as well
as he mapping o con ols and me ics, and he mapping o con ols ac oss di e en
schemes. This s eam is p esen ed in Sec ion 5.4 and Sec ion 5.5 dealing wi h he
in eg a ion and he in e play o he MARI and RCM componen s in he EMERALD UI.
Cu en ly, he main en y poin o he EMERALD amewo k looks as p esen ed in Figu e 30. I
p o ides he en y poin s o he managemen o he ce i ica ion a ge s and audi scopes, as
well as access o he ce i ica ion schemes. No depic ed now a e he access o he
au hen ica ion, ole, and access managemen , and he My ToDo lis .
Figu e 29. O e iew o he EMERALD UI Visualisa ion S eams
Figu e 30. EMERALD Landing Page
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 50 o 103
www.eme ald-he.eu
5.1.1 Se ing up and managing Ce i ica ion Ta ge s
When en e ing he “Se up Ce i ica ion Ta ge ” iew, he EMERALD UI guides he use s ep-by-
s ep h ough he se up p ocess. This is isualized wi h a kind o me o map ep esen a ion
always isible on op o he iew, so ha he use s always knows whe e hey a e.
Fo se ing up he ce i ica ion a ge , he use mus ill in in o ma ion such as he cloud
se ice i le, a desc ip ion, and he cloud se ice ags. A e he use has sa ed he ce i ica ion
a ge , i ecei es a unique iden i ie called Cloud Se ice Token om he O ches a o . The
use can s ill edi all in o ma ion; howe e , he id is ixed. This is p esen ed in Figu e 31.
The nex s ep in he se up o he ce i ica ion a ge is o a ach he e idence collec o s as
depic ed in Figu e 33.
To ins all a new e idence collec o ha should be displayed in he lis , a use can click on he
“Add new” Bu on as shown in Figu e 33, poin 4. Acco dingly, a new iew is opened ha
p esen s a de ailed desc ip ion o how o se up he espec i e e idence collec o as p esen ed
in Figu e 32. I mus be clea ly s a ed ha he ins alla ion o he e idence ex ac o s canno be
done ia he EMERALD UI.
Figu e 31. Ce i ica ion Ta ge - Se up Ce i ica ion Ta ge
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 51 o 103
www.eme ald-he.eu
Figu e 33. Ce i ica ion Ta ge - E idence collec o s o he espec i e a ge o
e alua ion
Figu e 32. Ce i ica ion Ta ge - Desc ip ion o how o ins all an e idence collec o
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 52 o 103
www.eme ald-he.eu
Fo each e idence ex ac o he s a us can be se , namely i he ex ac o should be ac i e,
disabled o gene ally paused as p esen ed in Figu e 33, poin 5.
Addi ionally, when clicking on he espec i e iew icon on he igh side o he e idence
ex ac o s as shown in Figu e 33, poin 1, 2, and 3, u he in o ma ion is shown abou he
e idence ex ac o .
Fo example, when clicking on he iew icon o Assessmen and Managemen o
O ganisa ional E idence (AMOE) (see Figu e 33, poin 2), he iew p esen ed in Figu e 34 is
opened. In he lis below, an o e iew is p o ided abou he me ics ha a e al eady ex ac ed
om he espec i e policy documen s. In addi ion, new policy documen s can be uploaded.
A new policy documen can be added ia d ag & d op. I a policy documen was added, he ile
is no immedia ely uploaded bu a new iew is p esen ed – see Figu e 35. He e, he use can
selec hose me ics ha should be ex ac ed om he policy documen ha is o be uploaded.
Figu e 34. Ce i ica ion Ta ge - AMOE – O e iew o me ics and co esponding
policy iles
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 53 o 103
www.eme ald-he.eu
I is impo an o no ice ha du ing he se up o he ce i ica ion a ge i migh no be clea
which policy documen s will be used. The e o e, i is no manda o y o upload hese
documen s du ing he se up phase. Policy documen s can added be la e he e o also in he
audi scope iew, whe e he con ols and me ics a e managed (see Figu e 44).
When clicking on he iew icon o he sou ce code and API e idence (eknows) (see Figu e 33,
poin 1), he iew p esen ed in Figu e 36 is opened.
Fo he o he e idence collec o s such as Codyze, AI-SEC and Cloudi o -Disco e y, he
discussions a e ongoing on how hey will be a ached o he EMERALD UI and which
unc ionali ies will be p esen ed he e.
Figu e 35. Ce i ica ion Ta ge - AMOE – Upload a policy documen and selec he
espec i e me ics ha should be ex ac ed om i

D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 54 o 103
www.eme ald-he.eu
The las s ep in he se up o he ce i ica ion a ge is o add he se ings ega ding he
T us wo hiness Sys em (TWS), hus, o de ine when he TWS should be upda ed when and
how o en – au oma ically and/o on demand, as depic ed in Figu e 37. Op ions ha should be
a ailable a e:
• Always, when en e ing a espec i e audi scope
• On demand by he use
• Au oma ically e e y 1, 5, 10, o 15 minu e(s).
Figu e 36. Ce i ica ion Ta ge - eknows - De ine whe e o ind he esou ces o eknows
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 55 o 103
www.eme ald-he.eu
Fo managing an exis ing ce i ica ion a ge , a use can selec he ce i ica ion a ge om he
lis , as depic ed in Figu e 38.
Figu e 37. Ce i ica ion Ta ge - Sc eensho o he TWS Se up Page
Figu e 38. Ce i ica ion Ta ge - Selec an exis ing ce i ica ion a ge
om he lis o open i
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 56 o 103
www.eme ald-he.eu
5.1.2 Se ing up and managing Audi Scopes
When en e ing he “Se up Audi Scope” iew ia he EMERALD Landing Page (see Figu e 30), a
o m is opened ha needs o be illed in by he use as shown in Figu e 39. The o m consis s
o he audi scope name, he ce i ica ion a ge ha needs o be selec ed om a lis , he
espec i e ce i ica ion scheme, also selec ed om he lis o a ailable schemes in he
EMERALD amewo k, and he desi ed assu ance le el o EUCS (basic, medium, and high). Fo
o he schemas like BSI C5, ENS, e c. his ield is no a ailable.
A e ha ing clicked on he “Sa e” Bu on, he new audi scope is c ea ed.
Figu e 39. Audi Scope – Se up a new audi scope
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 57 o 103
www.eme ald-he.eu
To eopen and manage an al eady exis ing audi scope, one needs o click on he “Manage
Audi Scope” on he EMERALD landing page (see Figu e 30). Be o e being able o manage he
audi scope, a use mus selec he audi scope hey would like o wo k wi h, as p esen ed in
Figu e 40.
Figu e 40. Audi Scope - Selec an exis ing audi scope
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 64 o 103
www.eme ald-he.eu
Figu e 49. AMOE - Sc eensho o he Mi o Boa d wi h yellow and iole s icky-no es
o cap u e he unc ionali y and ea u es o AMOE

D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 65 o 103
www.eme ald-he.eu
5.2.2 Resul s o Wo kshop 2
The second wo kshop wi h he AMOE componen owne ook place on he 22nd o Augus
2024. In his wo kshop, he s a us o he clickable mock-ups, gained insigh s, and open
ques ions we e discussed. So a elici ed insigh s ha e been implemen ed in he cu en
e sion o he clickable mock-ups, howe e , he e is s ill some u he oom o imp o emen .
5.2.3 Func ionali y and clickable p o o ype o AMOE
F om bo h wo kshops, we we e able o de i e he ollowing lis o unc ionali ies ha ha e
been conside ed o in eg a ing AMOE in o he EMERALD UI:
“Se up” AMOE:
• AMOE i sel needs no eal se ings ha need o be en e ed ia he EMERALD UI o
unc ion.
“Wo king” wi h AMOE:
• Upload policy documen s and assign me ics: The e need o be wo places whe e he
upload o policy documen s should be a ailable: du ing he se up and managemen o
ce i ica ion a ge s and du ing he managemen o audi scopes. Addi ionally,
whene e a policy documen is uploaded, i should be possible o de ine which me ics
should be ex ac ed om he espec i e documen . Bo h oppo uni ies ha e been
implemen ed in he EMERALD UI, in he ce i ica ion a ge in Sec ion 5.1.1, as shown
in Figu e 34 and Figu e 35, and in he audi scope in Sec ion 5.1.2, as shown in Figu e
44 and Figu e 45.
• Show e idence ex ac ion esul s: Fo each me ic, he assessmen hin and he
e idence de i ed om AMOE should be shown. This unc ionali y is implemen ed in
he audi scope in Sec ion 5.1.2 and shown in Figu e 43 and Figu e 44. Addi ionally, i
should be possible o open he policy documen and see whe e he ex ac ed e idence
has been ound, e.g., he espec i e ex in he espec i e pa ag aph.
We a e awa e ha AMOE has some u he unc ionali ies (e.g., a iew ha shows he
ex ac ed e idence in he documen ) ha need o be conside ed o he UI, howe e , his is
wo k in p og ess.
5.3 In eg a ion o Cloudi o -O ches a o in o he EMERALD UI
The Cloudi o is he cen al componen o he EMERALD amewo k, and comp ises ou sub-
componen s named: O ches a o , E idence S o e, Assessmen , and E alua ion. I o ches a es
he ce i ica ion p ocess (collec ion, assessmen , and e alua ion o e idence) and connec s
mul iple componen s. I holds all dynamic in o ma ion abou he cu en audi p ocess
including he ce i ica ion a ge , he e alua ed cloud se ices, he assessmen esul s, and he
inal ce i ica ion s a e.
Cloudi o -O ches a o is mos ly ela ed o he isualisa ion s eams 1 and 2 (see Figu e 29). In
he EMERALD UI i needs o p esen he ollowing majo unc ionali ies: i s , when se ing up a
ce i ica ion a ge i allows o selec he a ailable ce i ica ions schemes ( om RCM); second,
i allows o iew he assessmen esul s om all e idence ex ac o s; and hi d, i is esponsible
o making he inal ce i ica ion decisions.
5.3.1 Resul s o Wo kshop 1
The i s wo kshop wi h he Cloudi o -O ches a o componen owne (F aunho e ) was held
on he 31s o July 2024. Fo his wo kshop, a Mi o boa d was p epa ed and used o guide he
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 66 o 103
www.eme ald-he.eu
discussion and ack he insigh s gained. Addi ionally, he wo kshop was eco ded ia Teams
and la e e isi ed. The o e all goal o his wo kshop was o ge a be e unde s anding o he
Cloudi o -O ches a o in gene al and how i s in eg a ion in o he EMERALD UI could look like.
The wo kshop was s uc u ed as ollows:
• Cloudi o -O ches a o unc ionali y: A he beginning o he wo kshop, we discussed
wi h he pa icipan s wha he Cloudi o -O ches a o unc ionali y is all abou om
he WP4 poin o iew. This was necessa y o cla i y any possible ambigui ies o
misunde s andings and o be su e ha he pu pose o Cloudi o -O ches a o is clea
o all in ol ed pa ies igh om he beginning. In he Mi o Boa d a espec i e ame
was p epa ed, p esen ing a sho summa y wi h he mos ele an unc ionali ies o
he Cloudi o -O ches a o ha was used o he discussion.
• “Se -up” and “Wo king wi h” he Cloudi o -O ches a o : The e a e no conc e e
se ings o be aken be o e he Cloudi o -O ches a o can be used. As his componen
is an o ches a o o he whole ce i ica ion p ocess and combines mul iple
componen s, he discussion ocused mo e on he opic o whe e in he UI he
Cloudi o -O ches a o should p o ide which in o ma ion.
Du ing he whole wo kshop, all pa icipan s we e in i ed o add s icky no es di ec ly o he
Mi o boa d (see Figu e 50, yellow s icky-no es). And a e wa ds, he WP4 eam wen h ough
he eco ding again and added u he no es o he boa d (see Figu e 50, iole s icky-no es).
Figu e 50. O ches a o - Sc eensho o he Mi o Boa d wi h yellow and iole s icky-
no es o cap u e he unc ionali y and ea u es o he O ches a o
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 67 o 103
www.eme ald-he.eu
5.3.2 Func ionali y and clickable p o o ype o Cloudi o -O ches a o
F om he i s wo kshop, we we e able o de i e he ollowing lis o unc ionali ies ha need
o be conside ed ega ding he Cloudi o -O ches a o in he EMERALD UI:
“Wo king” wi h Cloudi o -O ches a o :
When wo king wi h Cloudi o -O ches a o , he EMERALD UI needs o o e he ollowing
unc ionali ies.
• E idence Ex ac o s: Cloudi o -O ches a o is esponsible o managing he e idence
ex ac o s ega ding ce i ica ion a ge s; hus, Cloudi o -O ches a o is in ol ed when
se ing up a ce i ica ion a ge and assigning he espec i e ex ac o s as p esen ed in
Sec ion 5.1.1.
• Assessmen Resul s and E idence: Cloudi o -O ches a o is esponsible o managing
assessmen esul s and e idence. The e o e, whene e he EMERALD UI is p esen ing
assessmen esul s Cloudi o -O ches a o is in ol ed, as al eady p esen ed in Sec ion
5.1.1 and Sec ion 5.1.2. Whene e an assessmen esul is shown, a use should ha e
he possibili y o d ill-down om he assessmen esul down o he e idence.
Addi ionally, o echnical e idence he e will be a ailable a ce i ica ion g aph as
p esen ed in Figu e 51, whe e o each esou ce all p ope ies and collec ed e idence
can be displayed.
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 68 o 103
www.eme ald-he.eu
We a e awa e ha he Cloudi o -O ches a o has many mo e unc ionali ies ha needs o be
conside ed o he UI, howe e , his is wo k in p og ess and will he e o e no be p esen ed in
his deli e able.
5.3.3 Resul s o Wo kshop 2
The second wo kshop wi h he Cloudi o -O ches a o componen owne ook place on he
11 h o Oc obe 2024. In his wo kshop, he s a us o he clickable mock-ups, gained insigh s,
and open ques ions we e discussed, and he esul s will be subsequen ly implemen ed in he
upcoming mon hs. The e o e, hese imp o emen s a e no p esen ed in his deli e able.
5.4 In eg a ion o he Mapping Assis an o Regula ions wi h
In elligence (MARI) in o he EMERALD UI
The Mapping Assis an o Regula ions wi h In elligence (MARI) componen is an in elligen
sys em ha au oma ically selec s sui able me ics o demons a ing compliance wi h
ce i ica ion schemes. I le e ages ad anced AI echniques, including Na u al Language
P ocessing (NLP), o analyse secu i y con ols and ecommend op imal me ics.
MARI is ela ed o he isualisa ion s eam 3. I needs o p esen he ollowing h ee majo
unc ionali ies In he EMERALD UI: Fi s , he EMERALD UI should show he me ics ha a e
au oma ically assigned by MARI o a con ol o a espec i e ce i ica ion scheme. Second, he
EMERALD UI should p esen how con ols o a ce i ica ion scheme co esponds wi h con ols
o o he ce i ica ion schemes. Thi d, he EMERALD UI should allow o ake o e con ol-me ic
assignmen s om exis ing audi scopes.
5.4.1 Resul s o Wo kshop 1
The i s wo kshop wi h he MARI componen owne (CNR) ook place on he 23 d o July 2024.
Fo his wo kshop a Mi o boa d was p epa ed and used o guide he discussion and o ack
Figu e 51. Cloudi o -O ches a o – Resou ce G aph showing all echnical e idence
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 69 o 103
www.eme ald-he.eu
he insigh s gained. Addi ionally, he wo kshop was eco ded ia Teams and la e e isi ed. The
o e all goal o his wo kshop was o ge a be e unde s anding o he MARI componen in
gene al and how i s in eg a ion in o he EMERALD UI could look like. The wo kshop was
s uc u ed as ollows:
• MARI unc ionali y: A he beginning o he wo kshop, we ga e he pa icipan s a
sho summa y o wha he MARI componen is doing om he WP4 poin o iew. This
was necessa y o cla i y any possible ambigui ies o misunde s andings and o be su e
ha he pu pose o he MARI componen is clea o all in ol ed pa ies igh om he
beginning. In he Mi o Boa d a espec i e ame was p epa ed, p esen ing a sho
summa y wi h he mos ele an unc ionali ies o he MARI componen ha was used
o he discussion.
• “Se -up” o MARI: The e a e no conc e e se ings o be aken be o e he MARI
componen can be used. The only se ing ha needs o be aken du ing he mapping
be ween he con ols and me ics is he numbe o me ics o sugges o a speci ic
con ol.
• “Wo king” wi h MARI: Du ing he discussions i became clea ha he MARI
componen should suppo wo majo unc ionali ies ha need o be ep esen ed in
he EMERALD UI: he mapping o a se o me ics o espec i e con ols o a
ce i ica ion scheme, and he mapping o con ols ac oss di e en ce i ica ion
schemes.
Du ing he whole wo kshop, all pa icipan s we e in i ed o add s icky no es di ec ly o he
Mi o boa d (see Figu e 52, yellow s icky-no es). And a e wa ds, he WP4 people wen h ough
he eco ding again and added u he no es o he boa d (see Figu e 52, iole s icky-no es).

D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 70 o 103
www.eme ald-he.eu
5.4.2 Func ionali y and Clickable P o o ype o MARI
F om he i s wo kshop, we we e able o de i e he ollowing lis o unc ionali ies ha need
o be conside ed ega ding he in eg a ion o he MARI componen in o he EMERALD UI:
“Se -up” o MARI:
• MARI needs no eal se ing o unc ion. The only unc ionali y ha needs o be
a ailable in he EMERALD UI so a is o s a e how many me ics should be maximally
sugges ed o a con ol when mapping con ols o me ics (no implemen ed in he
clickable p o o ype ye ).
“Wo king” wi h MARI:
When wo king wi h MARI, he EMERALD UI needs o o e he ollowing unc ionali ies.
• Mapping be ween me ics and con ols: The EMERALD UI needs o show o a con ol
all he me ics ha we e mapped o he con ol by MARI. The eby he me ics need o
be so ed ega ding he esul s o hei ma ching. The be e he ma ch be ween he
me ic and he con ol, he highe he me ic will be shown in he lis . As he mapping
algo i hm is no 100% accu a e, he use should be able o adap he me ics pe
con ol acco ding o hei needs.
Rema k: he mapping be ween me ics and con ols needs always o be ela ed o an
audi scope.
• Mapping o con ols be ween di e en ce i ica ion schemes: The EMERALD UI needs
a iew ha allows o see he mapping o con ols be ween di e en schemes. This
Figu e 52. MARI - Sc eensho o he Mi o Boa d wi h yellow and iole s icky-no es o cap u e he
unc ionali y and ea u es o he MARI componen
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 71 o 103
www.eme ald-he.eu
means ha he use should be able o selec a con ol om a ce i ica ion scheme and
hen be shown which con ol(s) om o he schemes co espond o he one selec ed.
• Allow o ake o e con ol-me ic assignmen s om exis ing audi scopes: The
EMERALD UI should o e an easy- o-use in e ace ha allows use s o ake o e he
mapping o con ols and me ics om o he audi scopes (no ye implemen ed).
The abo e-men ioned unc ionali ies a e implemen ed as ollows.
5.4.2.1 Mapping be ween me ics and con ol
When en e ing he “Ce i ica ion Schemes” a ea, i is possible o en e he iews o he
mapping o con ols and me ics as depic ed in Figu e 53, poin 1 pe scheme o o en e he
iew o mapping con ols be ween di e en schemes as depic ed in Figu e 53, poin 2.
When clicking on he bu on o mapping me ics and con ols o a scheme (Figu e 53, poin 1),
ano he iew is opened showing he espec i e ca ego ies and con ols o he espec i e
schema (Figu e 54). When opening a ca ego y and selec ing a con ol, he co esponding
me ics ha we e sugges ed by MARI a e shown, see Figu e 54, on he igh side. The me ics
a e so ed acco ding o hei ele ance o he con ol; he mos ele an ones a e on op o
he lis and p esen ed wi h a da ke backg ound han hose ha a e no so impo an .
Figu e 53. Ce i ica ion Scheme - O e iew page
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 72 o 103
www.eme ald-he.eu
Fo each me ic, he use has hen he possibili y o iew he me ic de ini ion, edi he me ic,
o dele e he me ic. Figu e 55 p esen s he iew o a me ic including i s a ibu es.
Figu e 54. MARI - O e iew o con ols and mapped me ics
Figu e 55. MARI - P esen a ion o a me ic de ini ion
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 73 o 103
www.eme ald-he.eu
5.4.2.1 Mapping be ween con ols o di e en schemes
When en e ing he “Ce i ica ion Scheme” a ea, i is possible o en e he iew o mapping
con ols be ween di e en schemes as depic ed in Figu e 53, poin 2 abo e. Be o e being able
o map con ols o di e en schemes wi h each o he , he use mus selec a leas wo
di e en schemes as p esen ed in Figu e 56.
Figu e 56. MARI - Selec wo o mo e schemes o mapping hei con ols
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 80 o 103
www.eme ald-he.eu
When clicking on one o he ca ego ies, he espec i e con ols a e shown, as depic ed in
Figu e 63. Fo each con ol, he desc ip ion, he assu ance le el, as well as he assigned
me ics a e shown.
When clicking on he iew bu on o a con ol as shown in Figu e 63 poin 1, mo e
in o ma ion abou he espec i e me ics o he con ol a e p esen ed, see Figu e 64. When
clicking on he iew bu on o one me ic in Figu e 64 , he in o ma ion abou he me ic is
p esen ed as shown in Figu e 55.
Figu e 63. RCM - O e iew o he con ols belonging o a ca ego y

D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 81 o 103
www.eme ald-he.eu
When clicking on he guideline bu on o a con ol as shown in Figu e 63, poin 2, he
guideline o implemen ing he con ol is p esen ed as depic ed in Figu e 65.
Figu e 64. RCM - O e iew o he lis o me ics assigned o a con ol
Figu e 65. RCM - P esen a ion o an implemen a ion guideline o a con ol
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 82 o 103
www.eme ald-he.eu
I a con ol has no implemen a ion guideline a ached, hen i depends on he use s’ ole o
wha is shown: ei he he open guideline bu on is disabled o a guideline bu on wi h a plus is
p esen ed ha opens hen he possibili y o c ea e a new desc ip ion o an implemen a ion
guideline.
5.5.2.2 Upload a new ca alogue
When a new secu i y scheme is published, i should be possible o easily impo his scheme
in o EMERALD, hus, in o he RCM and make i a ailable o he EMERALD use s. The e o e,
his scheme needs o be made a ailable ei he as a .cs o OSCAL.
Rema k: I is impo an o no e ha his unc ionali y will only be a ailable o speci ic oles –
like a e y expe ienced compliance manage o adminis a o who know how he ile o ma
mus look like.
When clicking on he “Upload scheme” bu on as shown in Figu e 60, a iew opens ha allows
o upload a new scheme as shown in Figu e 66. Only .cs iles o OSCAL iles a e allowed o
being uploaded. When he new scheme is success ully uploaded i will be lis ed in he lis o
ce i ica ion schemes like he ones p esen ed in Figu e 60.
5.5.3 Resul s o Wo kshop 2
The second wo kshop wi h he RCM componen owne ook place on he 10 h o Oc obe 2024.
In his wo kshop, he s a us o he clickable mock-ups, gained insigh s, and open ques ions was
discussed, and he esul s will be subsequen ly implemen ed in he upcoming mon hs.
The e o e, hese imp o emen s a e no p esen ed in his deli e able.
Figu e 66. RCM - Upload a new ce i ica ion scheme
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 83 o 103
www.eme ald-he.eu
5.6 In eg a ion o he T us wo hiness Sys em (TWS) in o he
EMERALD UI
The T us wo hiness Sys em (TWS) p o ides a secu e mechanism o EMERALD o main ain an
audi ail o e idence and assessmen esul s. I s goal is o enhance he in eg i y and
anspa ency o he ce i ica ion p ocess, and o ensu e he eliabili y o he e idence and
e alua ion ou comes by implemen ing a gene al-pu pose Blockchain ne wo k. Using
blockchain echnology, TWS gua an ees he in eg i y o all da a and ac s du ing he
ce i ica ion p ocess in a e i iable way he eby inc easing he audi o s' le el o us .
Rega ding he TWS, he EMERALD UI needs o show he in eg i y s a us o he e idence and
assessmen esul s. Mo e speci ic, he EMERALD use s need o see a one glance in he
EMERALD UI i he in eg i y o he e idence and assessmen esul s is gi en o no .
5.6.1 Resul s o Wo kshop 1
The i s wo kshop wi h he TWS componen owne (TECNALIA) ook place on he 1s o Augus
2024. Fo his wo kshop a Mi o boa d was p epa ed and used o guide he discussion and o
ack he insigh s gained. Addi ionally, he wo kshop was eco ded ia Teams. The o e all goal
o his wo kshop was o ge a be e unde s anding o he TWS in gene al and how i s
in eg a ion in o he EMERALD UI could look like.
• TWS unc ionali y: Fi s , we ga e he pa icipan s a sho summa y o wha he TWS is
doing om he WP4 poin o iew. This was necessa y o cla i y any possible
ambigui ies o misunde s andings and o be su e ha he pu pose o he TWS is clea
igh om he beginning. In he Mi o Boa d a espec i e ame was p epa ed,
p esen ing a sho summa y wi h he mos ele an unc ionali ies o he TWS ha was
used o he discussion.
• “Se -up” o he componen : We hen discussed which ea u es and/o unc ionali ies
a e ele an o se ing up he TWS. F om hese discussions, se e al pape -based
mock-ups we e added o he espec i e sec ion in he Mi o boa d.
• “Wo king” wi h he componen : And as a hi d s ep, we discussed he ea u es and/o
unc ionali y ha needs o be a ailable when wo king wi h he TWS. Again, also o
hese discussions, se e al pape -based mock-ups we e added o he espec i e sec ion
in he Mi o boa d.
Du ing he whole wo kshop, all pa icipan s we e in i ed o add s icky no es di ec ly o he
Mi o boa d (see Figu e 67, yellow s icky-no es). And a e wa ds, he WP4 people wen h ough
he eco ding again and added u he no es o he boa d (see Figu e 67, iole s icky-no es).
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 84 o 103
www.eme ald-he.eu
Figu e 67. TWS - Sc eensho o he Mi o boa d wi h yellow and iole s icky-no es o cap u e he unc ionali y and ea u es o he TWS
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 85 o 103
www.eme ald-he.eu
5.6.2 Func ionali y and clickable p o o ype o he TWS
F om he i s wo kshop, we we e able o de i e he ollowing lis o unc ionali ies ha need
o be conside ed in he EMERALD UI:
“Se -up” o he componen :
• Se ings: When se ing up a ce i ica ion a ge , he e needs o be he possibili y o
de ine when and how o en he TWS should be upda ed – au oma ically and/o on
demand. Op ions ha should be a ailable a e:
o Always, when en e ing a espec i e audi scope
o On demand by he use
o Au oma ically e e y 1, 5, 10, o 15 minu e(s).
“Wo king” wi h he componen :
• When being in an audi scope, he s a us o he in eg i y check should always be isible
a one glance.
o I he in eg i y check is ok, he TWS s a us symbol is p esen ed in g een.
o I he in eg i y check is no ok, he TWS s a us symbol is p esen ed in ed.
o Addi ionally, i he in eg i y check is no ok, he e should be he possibili y o
ge a epo highligh ing due o which con ols he in eg i y is no gi en any
mo e – including he con ol, he espec i e me ic, he esou ce name, he
ype, and he e idence id.
• Depending on he se ings selec ed abo e, he e needs o be a possibili y o upda e
he in eg i y check on demand.
The se up unc ionali y was al eady desc ibed in Sec ion 5.1.1 as las s ep o he se up
ega ding he ce i ica ion a ge (shown in Figu e 37).
A e ha ing en e ed an audi scope, on he igh uppe co ne o he mock-up, he s a us o
he in eg i y check – he e i ica ion o e idence and assessmen esul s - is always shown. Fo
example, in Figu e 68 he in eg i y check is shown in g een s a ing ha he in eg i y o he
e idence and he assessmen esul s a e gi en. On he igh side o he g een symbol, he e is
a kind o “Re esh” bu on ha allows o igge manually an in eg i y check.

D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 86 o 103
www.eme ald-he.eu
Figu e 69 shows a pic u e whe e he TWS symbol is p esen ed in ed, meaning ha he
e idence and/o assessmen esul s ha e been ampe ed wi h.
Figu e 68. TWS - Sc eensho o an audi scope wi h he “g een symbol”
o he in eg i y check
Figu e 69. TWS - Sc eensho o an audi scope wi h he “ ed symbol”
o he in eg i y check
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 87 o 103
www.eme ald-he.eu
Righ o he TWS symbol he e is a olde icon. When clicking on his icon, a new window is
opened showing he esul s o he TWS and whe e he in eg i y is no longe gi en. This
in o ma ion can be downloaded in o m o a epo as p esen ed in Figu e 70.
5.6.3 Resul s om Wo kshop 2
In he second wo kshop wi h he TWS componen owne , which ook place on he 26 h o
Augus 2024, we p esen ed he clickable mock-ups and how we in eg a ed he TWS in o he
EMERALD UI. The goal o his wo kshop was o ind ou i he implemen ed mock-ups
co espond wi h he hough s and needs o he TWS componen owne s and o collec hei
eedback and sugges ions o imp o emen . In he case o he TWS, he componen owne was
happy wi h he TWS in eg a ion, and no u he imp o emen s we e sugges ed du ing he
wo kshop.
Figu e 70. TWS - Sc eensho o a TWS epo when he da a in eg i y is no gi en
anymo e
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 88 o 103
www.eme ald-he.eu
6 Conclusions
This deli e able has p esen ed he me hodology used in T4.3 - Designing a use in e ac ion and
use expe ience concep and he i s se o pape -based and clickable mock-ups achie ed by
applying di e en me hods in he con ex o he EMERALD p ojec . In mo e de ail:
• Fi s , om he a ious in e iews and ocus g oups wi h he pilo pa ne s, we we e
able o de i e a i s se o pape -based mock-ups.
• Second, om he de elopmen o pe sonas, scena ios, and use jou neys, we we e
able o enhance he exis ing pape -based mock-ups o allow conc e e use in e ac ions
ha he EMERALD UI needs o ul il.
• Thi d, wi h he di e en wo kshops wi h he EMERALD componen owne s, we we e
able o s a he de elopmen o he i s clickable p o o ype o he EMERALD UI.
As all esul s p esen ed in his deli e able a e wo k in p og ess, we will con inue wo king on
hem un il M24. In mo e de ail:
• We will con inue he in e iew and ocus g oups wi h he pilo pa ne s, o ge u he
insigh s on which ea u es and unc ionali ies a e needed o he EMERALD UI.
• We will con inue wi h he de elopmen o he pe sonas, scena ios, and use jou neys -
as so a no all ele an EMERALD oles ha e been conside ed so a – o con inuously
imp o e and e ine he EMERALD UI so ha i suppo s he needs o all EMERALD
s akeholde s.
• We will con inuously mee wi h he di e en componen owne s o implemen all
manda o y UI elemen s and unc ionali ies.
• Addi ionally, we will egula ly ask all EMERALD pa ne s o y ou he clickable
p o o ype and p o ide aluable and necessa y eedback o be able o con inuously
imp o e he EMERALD UI, o allow o a seamless use expe ience o con inuous
audi ing in he cloud cybe secu i y domain, o e ing easy- o-use, explainable
wo k lows o suppo he audi o s’ wo k and he audi s conduc ed.
This documen is he i s e sion o he esul s o he EMERALD UI/UX. In M24 o he
EMERALD p ojec , we will p o ide an upda ed e sion o his documen (D4.4 Use in e ac ion
and use expe ience concep – 2 [2]) wi h in-dep h wo k p ocesses and a inal se o he
equi emen s o he UI/UX.
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 89 o 103
www.eme ald-he.eu
7 Re e ences
[1]
EMERALD Conso ium, “D4.1- Resul s o he UI-UX equi emen s analysis and he wo k
p ocesses - 1,” 2024.
[2]
EMERALD Conso ium, “D4.4 Use in e ac ion and use expe ience concep – 2,” 2025.
[3]
EMERALD Conso ium, “EMERALD - Annex 1 - Desc ip ion o Ac ion - GA 101120688,”
2022.
[4]
S. M. Denne lein, V. Tombe g, T. T easu e-Jones, D. Theile , S. Linds aed and T. Ley, “Co-
designing ools o wo kplace lea ning: A me hod o analysing and acing he
app op ia ion o a o dances in design-based esea ch,” In o ma ion and Lea ning
Sciences, ol. 121, no. 3/4, pp. 175-205, 2020.
[5]
A. Fessl, V. Pamme -Schindle , K. Pa a, S. Feye ag, M. Mõ us, J. Janus and T. Ley, “A
Coope a i e Design Me hod o SMEs o Adop New Technologies o Knowledge
Managemen : A Mul iple Case S udy,” JUCS - Jou nal o Uni e sal Compu e Science, ol.
26, no. 9, pp. 1189-1212, 2020.
[6]
E. B.-N. Sande s and P. J. S appe s, “Co-c ea ion and he new landscapes o design,”
CoDesign, ol. 4, no. 1, pp. 5-18, 2008.
[7]
F. Kensing and J. Blombe g, “Pa icipa o y Design: Issues and Conce ns,” Compu e
Suppo ed Coope a i e Wo k (CSCW), ol. 7, no. 3, pp. 167-185, 1998.
[8]
S. Bødke and K. G ønbæk, “Coope a i e p o o yping: use s and designe s in mu ual
ac i i y,” In e na ional Jou nal o Man-Machine S udies, ol. 34, no. 3, pp. 453-478, 1991.
[9]
B. Wes e lund, Design Space Explo a ion: co-ope a i e c ea ion o p oposals o desi ed
in e ac ions wi h u u e a e ac s (Doc o al Disse a ion), 2009.
[10]
C. Snyde , Pape p o o yping: The as and easy way o design and e ine use in e aces,
Mo gan Kau mann, 2003.
[11]
C. Floyd, “A sys ema ic look a p o o yping,” App oaches o p o o yping, pp. 1-18, 1984.
[12]
P. Ehn, Wo k-o ien ed design o compu e a i ac s (Doc o al Disse a ion),
A be sli scen um, 1988.
[13]
D. Sa e , Designing o in e ac ion: c ea ing inno a i e applica ions and de ices.Sa e ,
Dan, New Ride s, 2010.
[14]
B. Ma in, B. Haning on and B. Haning on, 100 ways o esea ch complex p oblems,
de elop inno a i e ideas, and design e ec i e solu ions, Rockpo Publishe s Be e ly,
2012.
[15]
C. Howa d, Use Jou ney Mapping: A Tool o Be e Use Expe ience., UX Design
Ins i u e., 2020.
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 96 o 103
www.eme ald-he.eu
8.3 Mock-ups p esen ing he con ols
In he ollowing, se e al mock-ups a e p esen ed showing which in o ma ion could be
p esen ed ega ding indi idual con ols o a ce i ica ion scheme.
Fo each con ol a lo o in o ma ion needs o be shown. Figu e 8 in Sec ion 3 p esen s an
example o showing some gene al in o ma ion abou a con ol. Figu e 76 shows how possible
e idence ex ac ed o he cu en con ol could be p esen ed whe e o ganisa ional and
echnical e idence is di ided in o wo pa s.
Figu e 76. Pape -based Mock-ups - Sugges ion o how o p esen di e en ypes o
e idence o a con ol ( 1)

D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 97 o 103
www.eme ald-he.eu
Figu e 77 shows how possible e idence ex ac ed o he cu en con ol could be p esen ed,
whe e o ganisa ional and echnical e idence a e shown in a combined iew.
Figu e 77. Pape -based Mock-ups - Sugges ion o how o show
di e en ypes o e idence o one con ol ( 2)
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 98 o 103
www.eme ald-he.eu
Figu e 78 p esen s a sugges ion o how in o ma ion on possible non-compliances de ec ed can
be p esen ed o he espec i e con ol.
Figu e 78. Pape -based Mock-ups - Sugges ion o how o p esen in o ma ion abou non-
compliances
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 99 o 103
www.eme ald-he.eu
Figu e 79 p esen s a mock-up o wha an assignmen o a con ol o ei he an indi idual pe son
o o a whole depa men migh look like.
Figu e 79. Pape -based Mock-ups - Sugges ion o how o assign a con ol o a colleague o a whole
depa men
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 100 o 103
www.eme ald-he.eu
Figu e 80 shows wha a con ol his o y, showing all changes o he con ol, migh look like in
he EMERALD UI.
Figu e 80. Pape -based Mock-ups - Sugges ion o he his o y log in o ma ion iew
o a con ol
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 101 o 103
www.eme ald-he.eu
9 APPENDIX B: Mock-ups de i ed om he use jou neys
9.1 Addi ional Mock-ups de eloped o Use Jou ney 1
Figu e 81 p esen s again he landing page o he EMERALD UI. When clicking on he BYOCS
bu on a new ce i ica ion scheme can be c ea ed o an exis ing own-de ined ce i ica ion
scheme can be edi ed.
Figu e 81. Pape -based Mock-ups - Use Jou ney 1: Upda ing a sel -de ined scheme

D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 102 o 103
www.eme ald-he.eu
Figu e 82 p esen s how o selec an exis ing sel -de ined ce i ica ion scheme ha should be
changed.
Figu e 82. Pape -based Mock-ups - Use Jou ney 1: Selec an exis ing sel -de ined
ce i ica ion scheme
D4.3 – Use in e ac ion and use expe ience concep – 1 Ve sion 1.0 - Final. Da e: 31.10.2024
© EMERALD Conso ium Con ac No. GA 101120688 Page 103 o 103
www.eme ald-he.eu
Figu e 83 shows how o edi a sel -de ined ce i ica ion scheme in he EMERALD UI.
Figu e 83. Pape -based Mock-ups - Use Jou ney 1: Edi an exis ing sel -de ined
ce i ica ion scheme