I'm conducting a thematic analysis for my interview methodology (part of my thesis). The interview focuses on validating the metrics used to compare web application security testing tools, which I've identified from my literature review. I'm currently confused about codes and themes. I'm finding it confusing. As I mentioned, I've conducted a literature review and identified 37 metrics. Should I take those 37 metrics as codes, or is there something else I should use as a code? If there's something else, could you provide one or two examples? Please help me. If my 37 metrics are codes then I'm thinking of using 4 themes:

Commonly Used Metrics Additional Metrics Metrics that are Considered Unimportant Evolving Landscape of Web Application Security

Can someone please clarify this?

Similar questions and discussions