Since our main interest is in comparing the relationship between the internal audit and information security functions across organizations, we used the columns in our matrix to represent the four institutions where we conducted interviews and the rows to represent the questions we asked. There are a number of choices concerning the level and type of data to enter in cells (Miles and Huberman 1994, 241).