As we celebrated International Women’s Day last month under the tagline “Choose to Challenge,” I took time to reflect on my own journey.
I have read a number of articles on why we, as women, often don’t make it to the top. A number of theories have been suggested, most of which revolve around women’s supposed reluctance to be bold, assertive and confident. Research cited in a number of articles suggests that women often suffer from “Imposter Syndrome” while men are willing to take on risks and at times drive processes with which they are not familiar.
This argument got me thinking about the ISACA standard 1005 Due Professional Care and asking myself whether there is a measure that we apply when determining the level of due care we provide in our work. The note provided in the standard is that “due professional care implies reasonable care and competence, not infallibility or extraordinary performance.” The supporting Standard Guideline 2005 highlights the following as the areas to take into consideration when assessing one’s professional care when undertaking audit assignments. Below, I have selected key points from the guideline that are relevant to challenges affecting women.
2005.2 Professional Skepticism and Competence
2005.2 Practitioners should keep informed of and comply with developments in professional standards to demonstrate understanding and professional competence sufficient to achieve the IT audit and assurance objectives.
ISACA provides a number of certificates and certifications that women can take advantage of so that they develop the right knowledge and skills to be able to rise in the auditing world. As the world moves into the fourth Industrial Revolution (Industry 4.0), women should take advantage of emerging technology certifications and certificates such as the Certificate of Cloud Auditing Knowledge (CCAK) so that they can be part of teams doing new and high-profile projects, including carrying out cloud audits. Women in this field would also benefit from taking advantage of other certificates and certifications on cybersecurity management and audit. Having the right knowledge and skills is the first step in moving into the area in which one would like to specialize.
2005.3 Application
2005.3.3 Practitioners should serve the interests of stakeholders in a lawful and honest manner, while maintaining high standards of conduct and character, and should not engage in acts discreditable to the profession.
The imposter syndrome makes one doubt her ability and can make one feel like a fraud. While this perception is not true, it impedes women from taking a leap. When assessing assignments to undertake, women should not shy away from undertaking technical audits. The standard clearly sets the measure of professional care as reasonable and not extraordinary performance.
2005.4 Life Cycle of the Engagement
2005.4.1 Practitioners assigned to the project should collectively possess the needed skills, knowledge and relevant competencies to perform the audit assignment.
Women should seek skill transfer opportunities in areas touching on their interests and discuss with their supervisors how they can be trained and upskilled. The skill transfer journey should not be rushed but, as much as possible, targets should be set and details worked out on how the process will be carried out. If given the opportunity to acquire a new skill, it is important to take note that the audit assignment professional care revolves around the entire team and not necessarily on an individual.
2005.5 Communication
2005.2 During the audit engagement, practitioners should appropriately communicate with the auditees and relevant stakeholders to ensure their cooperation.
Audit is a profession that affords auditors the opportunity to enhance their communication skills, both written and verbal. As much as possible, women should be given opportunities to lead audit opening and closing meetings. Young upcoming women leaders should be invited to audit committee meetings to afford them an opportunity to learn the relevant communication skills needed to progress in the profession.
In conclusion, I would urge women not to be overly critical of their abilities but rather to get the right education, learn the right skills and develop the competencies required to excel in whatever area in which they desire to grow their careers within the tech space.
It is also important to have a career plan. This will help one note the skills and competency needed to successfully compete in whatever role she seeks. Set targets on how you intend to attain the relevant knowledge and skills to demonstrate the required competency.
Remember, it’s not extraordinary performance, but rather reasonable professional care that is required. I am looking forward to seeing what the next generation of women will achieve.
