Synthesizing Insights

Research Project 1 (RP1) — U2

Andy Weeger

Neu-Ulm University of Applied Sciences

August 27, 2026

Opening Remarks

Listening Recap

Multiple practitioners.
Multiple positions.

Synthesizing the insights means analyzing multiple data points.
It does not mean finding one true opinion.

Learning Outcomes

By the end of this unit, you will be able to:

  • Elicit and structure diverse practitioner claims through live capture and open coding, without collapsing them into one averaged account.
  • Identify the disciplinary lens, technical, behavioral, organizational, or economic, implicit in a claim, and tag it by kind: practice, challenge, or question.
  • Cluster claims into a candidate phenomenon and knowledge problem, integrating multiple perspectives into one problem framing while keeping the tensions between them visible.

Perspectival Variety

Pluralism in Practice

Who speaks from which position?
What assumptions about the world are embedded in each account?

Treat each input as evidence of a position, not just a claim. Ask, for each: from where does this person see the challenge, and what does that perspective let them see that others cannot?

Epistemic Pluralism in IS

The disciplines below study the same phenomenon, each from a different angle.

  • Scholars in information technology, software engineering, and computer science study the technical and computational attributes of digital technology as such.
  • Scholars in behavioral, cognitive, and psychological sciences study individuals’ exposure, use, appropriation, and general behaviors around digital technology.
  • Scholars in organisational science, management, and business study how corporate environments shape, and are shaped by, digital technology.
  • Economists study the large-scale effects of digital technology diffusion and innovation on organisations, markets, and societies.

Contradictions as Signal

Treat unexpected contradictions between inputs as signals worth investigating.

Treat it as more interesting than a topic that is already obvious to everyone else.

Notes and Summary

Live Capture

You can’t transcribe live; create mnemonic triggers instead: so-called jottings

Jottings are brief, in-the-moment notes that serve as mnemonic triggers to reconstruct full, vivid fieldnotes later (Emerson et al., 2011): cryptic keywords, vivid snippets of dialogue, and sequences, not polished prose.

  1. Capture in vivo phrasing: verbatim snippets and indigenous terms, not your own summaries.
  2. Note their role or context in a few words.
  3. Flag anything that surprises you, or contradicts an earlier talk, immediately.

Example

CISO fin.serv. — no auto, human OKs every action. slow but safe??

Structured Notes

You need a repeatable way to turn your jottings into something you can compare across talks.

  1. Capture the claim: what, specifically, did this person say, in close to their own words?
  2. Tag the kind: is this a practice claim (what they do, or how they approach the challenge), a challenge claim (what puzzles them, an unresolved problem), or a question claim (something they ask, or clearly imply, without answering it themselves)?
  3. Attribute the position: what role or vantage point plausibly shapes this claim?
  4. Flag tensions: does this claim sit comfortably with, or contradict, another input you have already noted?

Example

  • Claim: Every agent action needs human sign-off before it executes.
  • Kind: practice
  • Position: Financial services CISO
  • Tension: none yet, this is the first input touching this issue

Map-of-Perspectives

Identifying Candidate Topics

Structured notes become a topic only once you compare them across inputs.

What does that comparison involve?

Across your inputs on agentic AI and cybersecurity, only some of what you heard will obviously relate to something else you heard. Building the map means finding which claims belong together, and naming the phenomenon and knowledge problem they point to.

Raw Inputs

Contributions from the field take the form of practical examples, challenges, and sometimes even the questioning of assertions.

It is your task to identify questions that give rise to further research.

The inputs you got from open coding:

  1. Practice claim: what they do, or how they approach the challenge;
  2. challenge claim: what puzzles them, an unresolved problem they name; and
  3. question claim: something they ask, or clearly imply, without answering it themselves.

Claim Clustering

Which of your claims, of any kind, point at the same underlying issue?

  1. Analyze your claims, tagged practice, challenge, or question.
  2. Group any that touch the same underlying issue in the domain, not just the same surface topic.
  3. Name what the group is actually about, in one sentence. That is your candidate phenomenon.
  4. Ask what nobody in the cluster, and as far as you can tell nobody in the literature, has resolved. That is your candidate knowledge problem, the question for which new knowledge is needed.

Topic Mapping

Notes field Candidate topic element
A cluster of related claims, practice, challenge, or question The phenomenon
What nothing in the cluster, or the literature, resolves The knowledge problem, your candidate question
A contradiction between two claims in a cluster A tension, evidence the knowledge problem is real
Table 1: From perspective notes to a candidate topic

Building a Map

  1. Turn each cluster into one branch: place its claims as separate boxes, grouped together.
  2. Add one box below the claims for the phenomenon, and one more below that for the knowledge problem, using the labels named while clustering.
  3. Draw arrows from each claim to the phenomenon, and from the phenomenon to the knowledge problem.
  4. Wherever two claims in a cluster genuinely contradict, connect them directly with a separate, labeled tension link instead of routing through the phenomenon box.
  5. Repeat once per cluster; two or three separate branches is the normal outcome, not a sign the clustering went wrong.
%%{init: {'flowchart': {'rankSpacing': 30, 'nodeSpacing': 12, 'subGraphTitleMargin': {'top': 8, 'bottom': 8}}}}%%
flowchart TD
    %% Base styling
    classDef claimBox fill:#f5f5f5,stroke:#000000,stroke-width:1px,color:#000000;
    classDef phenomBox fill:#dedede,stroke:#000000,stroke-width:1.5px,color:#000000;
    classDef problemBox fill:#bcbcbc,stroke:#000000,stroke-width:2px,color:#000000;

    DOMAIN["Domain: Agentic AI and Cybersecurity"]

    %% ==========================================
    %% CLUSTER 1
    %% ==========================================
    subgraph T1["Cluster 1: Human Oversight vs. Automated Velocity"]
        direction LR
        C1["<b>Claim 1 [Practice]</b><br/><i>FinServ CISO:</i> Every agent action requires<br/>mandatory human sign-off before execution."]:::claimBox
        C2["<b>Claim 2 [Challenge]</b><br/><i>Vendor Lead:</i> Mandatory sign-off makes agents useless;<br/>clients demand real-time autonomous remediation."]:::claimBox
        C3["<b>Claim 3 [Question]</b><br/><i>SecOps Analyst:</i> At what operational speed does<br/>human oversight become purely nominal theater?"]:::claimBox
        C1 <-.->|TENSION: Safety vs. Velocity| C2
        C2 ~~~ C3
    end

    PH1["<b>Phenomenon 1</b><br/>Friction between operational velocity and human oversight<br/>in autonomous high-stakes execution."]:::phenomBox
    KP1["<b>Knowledge Problem 1</b><br/>How can organizations balance standing autonomy and continuous auditability<br/>without bottlenecking response time?"]:::problemBox

    DOMAIN --> T1
    T1 --> PH1
    PH1 --> KP1

    %% ==========================================
    %% CLUSTER 2
    %% ==========================================
    subgraph T2["Cluster 2: Machine Identity & Delegation Gaps"]
        direction LR
        C4["<b>Claim 4 [Challenge]</b><br/><i>Healthcare IT:</i> IAM infrastructure lacks any model<br/>for autonomous multi-agent delegation."]:::claimBox
        C5["<b>Claim 5 [Challenge]</b><br/><i>Public Sector Lead:</i> Runbooks assume human actors;<br/>agent tasks trigger false-positive rogue alerts."]:::claimBox
        C6["<b>Claim 6 [Practice]</b><br/><i>Cloud Architect:</i> We issue static admin tokens so agents<br/>can resolve cross-system infrastructure tickets."]:::claimBox
        C4 ~~~ C5
        C5 ~~~ C6
        C4 <-.->|TENSION: Least Privilege vs. Static Escalation| C6
    end

    PH2["<b>Phenomenon 2</b><br/>Mismatch between legacy security architectures and<br/>non-deterministic autonomous agent workflows."]:::phenomBox
    KP2["<b>Knowledge Problem 2</b><br/>How must IAM architectures evolve to govern ephemeral, non-human agency<br/>without defaulting to over-privileged service accounts?"]:::problemBox

    KP1 ~~~ T2
    T2 --> PH2
    PH2 --> KP2

    %% ==========================================
    %% CLUSTER 3
    %% ==========================================
    subgraph T3["Cluster 3: Multi-Agent Accountability & Forensics"]
        direction LR
        C7["<b>Claim 7 [Challenge]</b><br/><i>Forensics Lead:</i> Tracing non-deterministic reasoning loops<br/>across interacting agents is impossible post-incident."]:::claimBox
        C8["<b>Claim 8 [Question]</b><br/><i>Legal Counsel:</i> If an agent hallucinates a defensive countermeasure<br/>and breaks systems, who bears liability?"]:::claimBox
        C9["<b>Claim 9 [Practice]</b><br/><i>Risk Officer:</i> We archive raw prompt-response text logs<br/>to establish defensible compliance audit trails."]:::claimBox
        C7 ~~~ C8
        C8 ~~~ C9
        C7 <-.->|TENSION: Dynamic Reasoning vs. Static Logs| C9
    end

    PH3["<b>Phenomenon 3</b><br/>Opacity and causal ambiguity of multi-agent reasoning chains<br/>in post-incident digital forensics."]:::phenomBox
    KP3["<b>Knowledge Problem 3</b><br/>What constitutes legally defensible forensic provenance<br/>for emergent, multi-agent autonomous decisions?"]:::problemBox

    KP2 ~~~ T3
    T3 --> PH3
    PH3 --> KP3
Figure 1: An example Map-of-Perspectives (invented for illustration; not a transcript of real industry input)

Exercise

Cluster your own claims into candidate phenomena and knowledge problems.

  1. Lay out all the claims you have noted so far, tagged practice, challenge, or question.
  2. Group any that point at the same underlying issue, even loosely.
  3. For each group, name the phenomenon in one sentence, and the knowledge problem it raises in another.
  4. Mark a tension wherever two claims in a group genuinely contradict.
15:00

Homework

Finish structuring notes for your remaining industry inputs, then build your map.

  1. Write up structured notes for any inputs you have not yet processed, using the four-step procedure.
  2. Lay out all your claims and cluster them into candidate phenomena.
  3. For each cluster, name the knowledge problem it raises, and mark any tensions between claims.
  4. Identify the one candidate phenomenon and knowledge problem you are currently leaning toward as your tension.

This map, and the tension you select from it, is what you carry into U4: Topic, where domain, phenomenon, and knowledge problem become the formal criteria for an effective research topic.

Q&A