Data Analysis 129

5.6.1 Data Analysis Process

Qualitative data will be primarily taken from interviews, edited field notes and e-mail responses not mentioned earlier. While quantitative data will be based on website analysis of annual reports and mail-survey responses.

5.6.1.1 Data Analysis Procedures for Qualitative Data

To guide the analysis of qualitative data in the phase, the Three-Phase Analysis Model by Miles and Huberman (1994) as shown in Figure 5.4, consisting of data reduction, data display, drawing and verifying conclusion was planned to be used. Before the interview data were analysed, the researcher aimed to transcribe the conversations between the interviewer and interviewees from the recorded audio files. For validation purposes, the transcribed interview data will need to be proofread by the interviewees of this study in case of mistyped and wrong words and meanings during the transcription process.

It was intended that there will be two stages of qualitative analysis, the first stage is to conduct software analysis and the second stage is to undertake manual table analysis. The main goal of using manual table analysis was to ensure that the results of the first technique were valid (answerable according to research questions and conceptual framework) and reliable (results repeated in the second technique) and also to complement the first software analysis technique if some of the results/data were missed during the automatic analysis process.

Figure 22Figure 5.4 Procedures for Qualitative Data

The researcher planned to follow Miles and Huberman (1994) for analysing the qualitative data over the two types of analysis techniques.

Data  Reduction  Interview Data  Transcriptions  Edited field  notes  Conclusion  Drawing  Data  Display 

Software analysis

The qualitative data such as transcriptions, edited field notes and e-mail responses will be exported into Leximancer Version 3.07 analysis software (Leximancer Manual, 2009) to reduce and display the data; analysing the data in such a way helps to draw and verify conclusions. A series of processes was planned to be undertaken in the Leximancer analyses. These include improving transcripts within the software setting requirements and formats, removing unrelated concepts and grouping interview data into files according to dimensions and cases. It was planned that the parameters of this study be set into database software settings based on the topic of the interview questions, research questions and conceptual framework, where this stage is critical in order to reduce and display the required data for analysis.

Leximancer analyses are entirely text grounded, the next aim of analysis will be to use qualitative analysis (interpretative technique) for interpreting the displayed data such as concept maps of Leximancer and extracting evidence (e.g., words, sentences) of real world views by participants.

Manual content analysis

Manual content analysis, a traditional technique, was planned to be used in analysing the interview data. The columns and rows of a table will be used to organise the data.

There will be two major steps involved in this process: first, set up the analysis framework; and second, report results and findings. It was planned in the analysis framework table that all the interview transcripts will be reduced, organised and displayed using themes (themes developed in Chapter 3) against issues gained from the interviews. Later, the research questions will be used for arranging the results of analysed data before drawing the conclusions.

5.6.1.2 Data Analysis Procedures for Quantitative Data Website Analysis

It was planned that there will be three analytical stages involved in the website analysis. The first stage will be searching the sentences relating to the “security” term across the annual reports sections widely. The reason for using a single word of “security” is to capture sentences that discuss logical-IT related and also non-IT related. It is believed that each corporation has its own culture, some refer to security as physical in nature and some refer to it as logical-IT related in nature. The researcher does not want to miss the rich meanings over the term ‘security’ used in the reports.

Over the security results found in the first stage, the second stage will be more focused on examining whether companies have already discussed logical or IT related. The filtering process in this stage is to remove data relating to non-IT. The results of the searches on IT-related will be placed according to dimensions, formal, technical and informal. The qualitative method will be utilised to identify several similar words used, as some terms might be interchangeably used by various corporations. For example, corporation Y uses ‘information security’ referring to IS/IT security but in corporation Z the term used was different but holds similar meaning, such as ‘IT security’. That is why ‘security’ was to be searched in the first place to avoid any missing statements related to IS/IT security.

Then, the final stage will be extracting the sentences related to logical IT-related into the study’s framework. The results of the final stage will be significant in this study to answer the research questions and support or reject the conceptual framework of IS/IT security governance.

Mail Survey

It was planned in the case of analysing quantitative data that a statistical package software be adopted. A range of procedures and available functions are provided by the software for answering the research questions and to test the model of IS/IT security governance. As most of the data to be collected had adopted a 5 point likert- scale, the researcher aimed to produce descriptive statistics to

examine the average (means) of respondents’ agreement towards the IS/IT security governance practices in their corporations.

Apart from that, three steps will be undertaken to acquire the mail survey data, which are: [1] ethics approval, [2] distribution of mail survey, [3] administration of the survey responses.

In the first step of procedure, the researcher planned to obtain approval from the Ethics Committee.

To achieve the second step which is distribution of the mail survey, the researcher aimed to use the sample population of this study, namely, Group A, Group B and Group C. It was planned that the corporate mailing addresses be obtained from the Bursa Malaysia’s websites. Post-paid envelopes for returned mail survey will be prepared with a set of instructions on how to return the survey.

The researcher believes that the final stage of administration of mail survey will be critical and planned to make the Universiti Malaysia Sarawak the secretariat centre.