Change Is Good

Shortly after its launch in 2014, I bought a Microsoft Surface Pro 3. If you studied for the Certified Information Systems Auditor (CISA) exam using the review manual or online review course, studied for the Certified in Risk and Information Systems Control (CRISC) exam using the online review course, took the Certified in the Governance of Enterprise IT (CGEIT) exam or read an “IS Audit Basics” column anytime since 2016, you likely read words penned on that computer. And if they caused you any frustration, I am sorry about that.

Last December, on a trip to ISACA to participate in the CGEIT Item Development Working Group, the Surface powered off after roughly two hours on the plane even though I had another five hours to go and needed to work on those CGEIT items. It was time for a new battery or, given its age, a replacement computer.

After much research, I eventually bought a new computer in May of this year. I am now writing this on an Apple iPad Pro with the magic keyboard. I could have bought another Surface (I did like that machine), but I wanted to learn something new. And new, it is. Initially I found it somewhat frustrating as the iPad gives a different view of my work. It is a more “app-centric” (you open the app first) approach than an “object”-based one (on Windows I would double click on an object from a folder). However, I have adapted, learning much about the Apple ecosystem, and I am enjoying the experience, including (I believe) better privacy protections, which was a key concern for me.

The purpose of this anecdote is to demonstrate that change can be good. I say that as after 3.5 years and 21 articles, this will be the last time I blog about or write an “IS Audit Basics” column. I have no doubt that the new columnist will, just like my iPad, have a different view of our work. I equally have no doubt that you will learn something new and enjoy the experience.

This being my last column did, however, give me cause to pause to consider, what makes good IT auditing? Indeed, what makes a good IT auditor? Fundamentally, as with many professions and indeed life itself, I believe that this comes down to ethics. Therefore, I have taken the opportunity to introduce the Ethical OS Toolkit, which has been designed to facilitate better product development, faster deployment and more impactful innovation, all while striving to minimize technical and reputational risk.

Editor’s note: For further insights on this topic, read Ian Cooke’s recent Journal article, “IS Audit Basics: Ethics in Information Technology,” volume 6, 2020.