

These differing perspectives provide both opportunities and challenges in our work together, often causing us to experience dissonance in the process as we move in and out of our individual comfort zones. As a team, we each bring unique disciplinary and methodological perspectives to the research we do. Our multi-disciplinary team includes a computer scientist, a cognitive psychologist, a human factors psychologist, and a qualitative researcher/sociologist. Beginning the Journey: Seeking Enlightenment We also offer a methodological roadmap for how to design and conduct rigorous qualitative studies that explore and examine the user experience of cybersecurity. Having now worked together on multiple qualitative studies, we believe sharing our story can help others who want to explore the use of qualitative methods in this space. Certainly one of those aha moments was the realization that qualitative methods are an important and valuable tool for data collection and analysis in the cybersecurity space. We also discuss our learning along the way-including the many “aha” moments we had.

We trace our journey from mutual skepticism, to understanding, to acceptance using illustrations from our data. This article outlines our experience as a multi-disciplinary team studying user perceptions of and experiences with cybersecurity. We were not really prepared for qualitative data analysis with data like the quote above-how do you even begin to analyze this in a systematic, rigorous way? So if you want to steal the message about I made blueberry muffins over the weekend then go ahead and steal that.” (A study participant)Īs researchers steeped in quantitative methods, during our work studying cybersecurity and trust, we quickly realized that the quantitative tools we were most comfortable utilizing were inadequate to analyze this type of data.

I don’t work for the state department and I am not sending sensitive information in an email.

“ It doesn’t appear to me that it poses such a huge security risk.
