# Managing Access to Confidential Documents: A Case Study of an Email Security Tool
## Appendix A Interview Questions  
* How would you rate your familiarity with the encryption concept on a scale from 1 to 4 (1: I've never heard of this, 2: I've heard of this but I don't know what it is, 3: I know what this is but I don't know how it works, 4: I know generally how this works)  
In your own words, could you describe what encryption means? * When you send an email to an entity using Gmail, do you think there's anyone besides the person who can read and access the content of your email? (YES) Who do you think reads your email? (No) Why do you not think no one reads your email? (I do not know) Could you please elaborate? * Do you think that Google gives the government direct access to your email if it is requested? Why do you think that? * How did you know about our study? **Task 1**  
(Researcher's Script) _I will send you an email for the first task and then ask you a few questions about this task. Could you please send me your email address in the Zooms' Chat so I can send you an email?_  
_Ok, when you open the email that I sent, please share your screen and check the email for a few seconds._  
* What is your impression when you see this email? How would you respond if you received this email from an entity you do not know? Why? How would you respond if you received this email from an entity you know? Why? * Please rate how easy or difficult you think it would be for you to understand the text in this email on a scale from 1 to 4 (1: Very difficult, 2: Somewhat difficult, 3: Somewhat easy, 4: Very easy)
* Please rate how familiar you are with the concept of \"encrypted email\" as described in this email on a scale from 1 to 4? (1: Not at all familiar, 2: Slightly familiar, 3: Moderately familiar, 4: Very familiar)  
(Researcher's Script) _You can stop sharing your screen!_  
**Task 2**  
(Researcher's Script) _I will provide you with two links in the Zoom chat. The first link is for the video and the second one is for the slides. Please first click on the first link and watch the video that introduces Virtru. After you watch the video, you can click on the second link for the slides to easily follow the steps of setting up Virtru._  
* Please compose an email using Virtru and explore its security features for two minutes. No need to send it to anyone. Make sure to think aloud while performing this task. **Task 3**  
(Researcher's Script) _Now, I will share a link to Google Drive in the chat box, and you need to download three documents from Google Drive on your device that you can easily access to perform the following tasks. These documents are the Employee information form, W-9 form, and Health record information form. Please let me know if you have completed downloading._  
_Now, in the following task, you will be asked to compose an email with Virtru and attach one of these documents. I will send the email address in the Chatbox (email address), imagiting that this email could belong to Human Resources Department, Doctor's office, or a certified public accountant based on the given scenario._  
* Do you have any questions so far before moving to the next task? 1. **First Scenario** (Researcher's Script) _Now, please open the document titled \"Employee Information Form\" and take a moment to read this form. Let me know when you have completed the reading. Please imagine that all information in this form, including sensitive information such as the social security number, belongs to you. No need to fill out this form because it is just an example._  
* Do you consider this form to include sensitive information? (Yes) Why do you think it includes sensitive information? (No) Why do you think it does not contain sensitive information? * Please rate this document's information sensitivity (Not at all sensitive, Slightly sensitive, Moderately sensitive, Very sensitive)
* How satisfied are you when you share your SSN in the Employee Information Form with the Human Resources Department using your regular/standard emailwithout Virtru?