For Navient's mobile app, should resources be allocated to adding new features or enhancing the security of existing functionalities?

Introduction

The trade-off we're examining today is whether to allocate resources for Navient's mobile app towards adding new features or enhancing the security of existing functionalities. This decision is crucial for Navient, a major player in the student loan servicing industry, as it directly impacts user experience, trust, and the company's competitive position. I'll analyze this trade-off by considering user needs, business objectives, and technical constraints.

Step 1

Clarifying Questions (3 minutes)

• Context: I'm thinking Navient's app is primarily used for loan management. Could you confirm the app's main functionalities and user base?

Why it matters: Helps prioritize features vs. security based on core use cases Expected answer: Loan payments, account management, customer support for student loan borrowers Impact: High-security features might be more critical if handling sensitive financial data

• Business Context: Based on recent fintech trends, I assume improving security could be a regulatory requirement. How urgent are any compliance deadlines we're facing?

Why it matters: Regulatory compliance could override feature development priorities Expected answer: Moderate urgency, with some upcoming deadlines in the next quarter Impact: Might need to prioritize security enhancements in the short term

• User Impact: I'm guessing our users are primarily millennials and Gen Z. What's our current user satisfaction rate, and are there any specific pain points related to features or security?

Why it matters: Helps balance user desires with security needs Expected answer: 70% satisfaction, with some concerns about app performance and security Impact: Could influence whether to focus on new features or security improvements

• Technical: Considering the sensitive nature of financial data, I assume we're using industry-standard encryption. What's our current security posture, and are there any known vulnerabilities?

Why it matters: Determines the urgency and scope of security enhancements Expected answer: Good overall security, but some areas need updating Impact: Might need to allocate more resources to security if significant vulnerabilities exist

• Resource: Given the trade-off, I'm curious about our current team composition. What's the ratio of feature developers to security specialists on the mobile app team?

Why it matters: Influences the feasibility of pursuing either option Expected answer: 70% feature developers, 30% security specialists Impact: Might need to adjust team composition or consider outsourcing for the chosen direction