This is an example focus group transcript. To increase readability, the names of participants are minimised to initials within the text. All names can be expanded and minimised again using the NAME button.

For large-scale project transcripts, each speaker’s input is synced to the correct time they speak in the recording; click on any part of the text to be taken directly to that point.


S: SAAD:  [ARABIC]  it depends ‘on’ the case-

A: ALANOUD: Situation. And how bad it is.
S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC] 

S: SAAD:  [ARABIC]  patient/file  [ARABIC]  security breach  [ARABIC] 

A: ALANOUD:  [ARABIC] 
 [ARABIC]     [ARABIC]  Macintosh.
S: SAAD: Why?  [ARABIC] 
 [ARABIC]  breach of security, confidentiality.
A: ALANOUD:  [ARABIC] 

S: SAAD:  [ARABIC]  to report this kind of breach.

A: ALANOUD:  [ARABIC] 
 [ARABIC] 
S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC] 
 [ARABIC] 
S: SAAD:  [ARABIC]  formal procedure  [ARABIC] 
 [ARABIC]  What risk do you think people failing to comply with the security policies  [ARABIC]   [ARABIC]  security policy  [ARABIC] 
A: ALANOUD:  [ARABIC] 

S: SAAD:  [ARABIC]  security policy

A: ALANOUD:  [ARABIC] 
 [ARABIC] 
S: SAAD:  [ARABIC]  Do the IT Management display a security notice around the hospital?

A: ALANOUD:  [ARABIC] 
S: SAAD: LCD screens,  [ARABIC] 

A: ALANOUD:  [ARABIC]  

S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC] 
S: SAAD: [UNCLEAR]’So mobile’  [ARABIC] 

A: ALANOUD:  [ARABIC] 

S: SAAD:  [ARABIC]  talk with the management  [ARABIC] 

A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC] 

S: SAAD:  [ARABIC]  physician clinical staff  [ARABIC] 
 [ARABIC] 
A: ALANOUD:  [ARABIC] 

S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC]  policy implementation, the people here follow all the rules all the time? 

A: ALANOUD: No.
S: SAAD: Or in terms of security, most people follow them most of the time, or somewhere in between?

A: ALANOUD:  [ARABIC]  somewhere in between.
 [ARABIC]    [ARABIC] 
S: SAAD:  [ARABIC]  
Can you think about a reason in your work environment why someone may not follow one of the security policies? For example, [UNCLEAR]’password’/encription policies
A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC]  
 [ARABIC]  
S: SAAD: But account  [ARABIC] 

A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC]  healthcare system  [ARABIC] 

A: ALANOUD:  [ARABIC] 
 [ARABIC] 
S: SAAD:  [ARABIC]  OK, you have a level of trust between you-

A: ALANOUD: Yes.
S: SAAD:  [ARABIC] 
 [ARABIC]  penalty, if someone there abuse it; or maybe she-
A: ALANOUD:  [ARABIC] 
 [ARABIC]   [ARABIC] 
S: SAAD:  [ARABIC]  Are there any policy/procedure that [UNCLEAR] don’t comply with? 

A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC]  behaviour  [ARABIC]  one example?  [ARABIC] 
 [ARABIC]   OK, I will give her my-
A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC] 
 [ARABIC] 
S: SAAD: OK,  [ARABIC]  Why do you do this? [UNCLEAR]

A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC] , OK. Do you think the security policy gets in the way of people doing their job? 
 [ARABIC] 
A: ALANOUD: Yes.
S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC] 
so when recovery  [ARABIC] 
A: ALANOUD:  [ARABIC]  
 [ARABIC]   [ARABIC] 
S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC]  physicians  [ARABIC]    
complain the security policy  [ARABIC] 
A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC]  they adopt it  [ARABIC] 
 [ARABIC]  work around any policy so far  [ARABIC] 
A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC] 
 [ARABIC] 
A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC]  
  enforcement  [ARABIC]  compliance for information security.
A: ALANOUD:  [ARABIC] 
documented  [ARABIC] 
S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC]  abusing 
 [ARABIC] 
S: SAAD:  [ARABIC]  penalty  [ARABIC] 

A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC]  punishment?

A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC] 
 [ARABIC]  knowledge and previous experience
A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC]  
 [ARABIC]  they shared the password  [ARABIC] 
S: SAAD:  [ARABIC]  hospital checked whether their employee comply with the security policy?  [ARABIC] 

A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC]  if they do  [ARABIC] 

S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC] 
S: SAAD: OK, so  [ARABIC] 

A: ALANOUD:  [ARABIC] 

S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC]  

S: SAAD: Would someone get caught if they did follow the security policy?  [ARABIC] 

A: ALANOUD: [UNCLEAR]
S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC] 
S: SAAD: Because [UNCLEAR] experience?

A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC] 
what sanction or punishment are used people that get caught?
A: ALANOUD: I have no idea.
S: SAAD: No idea.
 [ARABIC]    [ARABIC]   [ARABIC] 
A: ALANOUD:  [ARABIC]  
too much  [ARABIC]    [ARABIC]  too much.
S: SAAD: So you think any punishment related to security policy inappropriate so far? 

A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC] 
what would you do if someone doesn’t follow the security policy? Have [UNCLEAR] a report?
A: ALANOUD:  [ARABIC] 

S: SAAD: Would you report them to [the] IT department?  [ARABIC] 

A: ALANOUD:  [ARABIC]  No.
S: SAAD: No [UNCLEAR]’so far?’. Have you ever come across something that you consider to be a security vulnerability, that the hospital/IT management hasn’t thought of?  [ARABIC] 
   [ARABIC] 
A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC]  you are willing to- 

A: ALANOUD:  [ARABIC]  intern  [ARABIC]  

S: SAAD:  [ARABIC]  more security.

A: ALANOUD:  [ARABIC] 
S: SAAD: So  [ARABIC]  no, or yes, or-

A: ALANOUD: No.  [ARABIC] 

S: SAAD:  [ARABIC]  why? Why  [ARABIC]  security vunerabiltiy  [ARABIC] 

A: ALANOUD:  [ARABIC] 

S: SAAD:  [ARABIC]  don’t care  [ARABIC] 

A: ALANOUD: I don’t care  [ARABIC] 
S: SAAD:  [ARABIC]  what do you think about the security culutre here in hospital,
between you  [ARABIC] ?
A: ALANOUD:  [ARABIC] 
 [ARABIC]  more than the culture.
S: SAAD:  [ARABIC] 
security culture  [ARABIC]  security culture  [ARABIC]   [ARABIC] 
A: ALANOUD:  [ARABIC] 
 [ARABIC] , but I don’t hesitate.  [ARABIC] 
S: SAAD:  [ARABIC]  So [UNCLEAR] weak security-

A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC] 
closing question; how would you say that information security and the hospital [UNCLEAR]’compare with that’  [ARABIC]   [ARABIC]  security policy  [ARABIC]  security contract/issues 
A: ALANOUD:  [ARABIC]  whoever shares  [ARABIC] 
 [ARABIC] 
S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC] 
  [ARABIC] 
S: SAAD:  [ARABIC]  policy  [ARABIC] ?

A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC] 
  [ARABIC]    [ARABIC] 
A: ALANOUD:  [ARABIC] 
 [ARABIC] 
S: SAAD:  [ARABIC] 

A: ALANOUD:  [ARABIC] 
S: SAAD:  [ARABIC]  only 4 minutes  [ARABIC] 

The end of a session is marked by the “END OF TRANSCRIPT” sign at the bottom of every page.

--- END OF TRANSCRIPT ---


-VIEW MODE-


 
00:00:00