Table 1. Interview guide Category... | Emerald Publishing

Table 1.

Interview guide

Category	Questions
Introduction	Can you state your age?
Introduction	How long have you been at the organisation?
Action-related	Do you feel compliance with cybersecurity regulations is reasonable for your work role?
	How do you feel about the actions you are required to take to comply with cybersecurity regulations?
	Do you feel the actions you are required to take influence you in your job role? (negatively or positively). Can you give an example?
	Do you feel the actions you are required to take influence your regular job responsibilities? If so, how?
	Have you ever abandoned doing a task due to cybersecurity? Can you give an example?
Advice-related	Do you feel the information shared by the company using training and documented regulations surrounding cybersecurity is clear and easy to understand? Do you think there is too little or too much information?
Advice-related	How do you feel about the advice you receive from the company about cybersecurity?
Cognitive	Are you required to participate in large amounts of cybersecurity training? If so, how does this affect you and your behaviour? Can you give an example?
Cognitive	Are there large amounts of regulations you are required to understand? If so, how does this affect you and your behaviour? Can you give an example?
Attitudinal	What is your attitude towards cybersecurity as a whole? Considering all the factors we have discussed above, has your attitude towards cybersecurity changed over time? If so, how?
Other	Do you have anything else you would like to share about how you feel about cybersecurity and cybersecurity fatigue?

Category	Questions
Introduction	Can you state your age?
Introduction	How long have you been at the organisation?
Action-related	Do you feel compliance with cybersecurity regulations is reasonable for your work role?
	How do you feel about the actions you are required to take to comply with cybersecurity regulations?
	Do you feel the actions you are required to take influence you in your job role? (negatively or positively). Can you give an example?
	Do you feel the actions you are required to take influence your regular job responsibilities? If so, how?
	Have you ever abandoned doing a task due to cybersecurity? Can you give an example?
Advice-related	Do you feel the information shared by the company using training and documented regulations surrounding cybersecurity is clear and easy to understand? Do you think there is too little or too much information?
Advice-related	How do you feel about the advice you receive from the company about cybersecurity?
Cognitive	Are you required to participate in large amounts of cybersecurity training? If so, how does this affect you and your behaviour? Can you give an example?
Cognitive	Are there large amounts of regulations you are required to understand? If so, how does this affect you and your behaviour? Can you give an example?
Attitudinal	What is your attitude towards cybersecurity as a whole? Considering all the factors we have discussed above, has your attitude towards cybersecurity changed over time? If so, how?
Other	Do you have anything else you would like to share about how you feel about cybersecurity and cybersecurity fatigue?

Source(s): Authors’ own work