There are lots of web resources about focus groups (e.g.
http://www.focusgrouptips.com/ for one). They talk about the types
of questions, the order in which the questions may be asked and also
give tips for moderating a group.
I expect that there will be limited response to your question here
(bu
Wish I had the definitive response here. Instead I'll offer a
resource you may not have been aware of.
Last week's SOUPS papers may give you some further ideas of security
risks, user behavior related to security and privacy, and usability of
various security schemes. http://cups.cs.cmu.edu/soup
