MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern...

17
The Cybersecurity Gender Gap MISSING FIGURES FFFIFFFFIFIGURES WIIS Working Paper Series February 2018 Spencer Beall

Transcript of MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern...

Page 1: MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern programmers during her career in the U.S. Naval Reserve. She developed the first computer

1

The Cybersecurity Gender Gap

MISSING FIGURES FFFIFFFFIFIGURES

WIIS Working Paper Series February 2018

Spencer Beall

Page 2: MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern programmers during her career in the U.S. Naval Reserve. She developed the first computer

Women In International Security (WIIS)

2

SpencerBeall

SpenceriscompletingherJ.D./L.L.M.inNationalSecurityLawatGeorgetownUniversityLawCenter,specializingininternationalpeaceandsecurity.Sheisparticularlyinterestedingendereddimensionsofinternationalpeacesecurityaswellasglobalprivacyandcybersecuritylegalpolicy.Herstudyofoutsizewomen’sincarcerationratesinAmericawillbepublishedintheBerkeleyJournalofCriminalLawthisspring.SpencerservedasalegalresearchassistantatWIISGlobalduringSummer2017.PriortocomingtoWIIS,SpencerinternedattheInternationalCentreforMissingandExploitedChildren,whereshecompiledaglobal

lawandpolicywhitepaperoncombatingonlinechildexploitationinthedigitalage.SpencerisanalumnafromtheCenterofTransnationalLegalStudiesandwasnameda2017SalzburgCutlerGlobalSeminarFellowinInternationalLaw.SpencergraduatedfromSweetBriarCollegein2014withaBachelorofArtsinFrench,History,andArtHistory,andaminorinMedievalandRenaissanceStudies.

AboutWIISWomenInInternationalSecurity(WIIS)isthepremierorganizationintheworlddedicatedtoadvancingtheleadershipandprofessionaldevelopmentofwomaninthefieldofinternationalpeaceandsecurity.WIIS(pronounced“wise”)sponsorsleadershiptraining,mentoring,andnetworkingprogramsaswellassubstantiveeventsfocusedoncurrentpolicyproblems.WIISalsosupportsresearchprojectsandpolicyengagementinitiativesoncriticalinternationalsecurityissues,includingthenexusbetweengenderandsecurity.

© February, 2018 Women In International Security Washington, D.C.

Page 3: MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern programmers during her career in the U.S. Naval Reserve. She developed the first computer

Women In International Security (WIIS)

3

Missing Figures: The Cybersecurity Gender Gap1 By2020,thenumberofInternet-enableddevices,alsoreferredtoastheInternetofThings(IoT),isexpectedtoexceedthirtybillion.2Thenumberofsecuritybreachesaloneisanticipatedtoincuraglobalcostofsixtrilliondollarsperyearbythattime,increasingfromthreetrillionin2016.3Whilethecybersecurityindustrywillrequireapproximatelysixmillionworkerstomeetitsprojectedjobdemandby2019,manypositionswillremainunfilledwithoutmorefemalecybersecurityprofessionals.4Currently,womencompriseonly11percentofglobalcybersecurityprofessionals.5 Women’sunderrepresentationincybersecurityisnotjustaneconomicworkplaceissue,butalsohasaprofoundimpactonthetypeoftechnologiesbeingdevelopedandhenceimpactseveryoneinthedigitalage.

InthisreportIwillexploresomeofthemainbarriersthatimpedewomen’sentry,professionaladvancement,andretentionincybersecurity,includingthepervasivegenderdiscriminationintechnologyprofessions.Next,Iwillexaminethreecorereasonswhyitisessentialtogetmorewomenincybersecurity,namely(1)tomaximizeinnovationpotential;(2)toexpandusabilityofdigitalproductstomeettheneedsofallconsumers;and(3)tostrengthentheglobaleconomybyfulfillingthecybersecurityindustry’srapidlygrowingjobdemand.Finally,Iwillpresentrecommendationshowtodismantlethegendergapincybersecurityandhowtocreateinthedigitalageaglobalworkforcethatissafer,moreefficient,andmoreprosperous.

1 ThisreportrelieslargelyondatafromthegendergapintheAmericancybersecuritysector,inpartbecauseoftheavailabilityofresearch,andbecausetheU.S.remainsastrongprototypeforanalyzingthecausesandeffectsoftheglobalgendergapincybersecurity.NotonlydoestheU.S.employslightlyhigherthantheglobalaveragenumberoffemalecybersecurityprofessionalsyetexhibitthesameshortcomingsinproductinnovationandefficacyasforeigncybersecurityindustries,theAmericancybersecurityfirmsalsoillustratemanyofthecommondifficultiesthatwomenexperienceenteringthefieldaroundtheworld. 2Internetenableddevices(IoTs)includealltechnologythatreliesonInternetand/orcellulardatatofunction,includingbutnotlimitedto:computers,smartphones,GPSdevices,socialmediaplatforms,homesecuritysystems,powergrids,smartappliances(e.g.refrigerators,televisions,thermostats),carsandairplanes.SeealsoSteveMorgan,ed.,“CybersecurityVenturespredictsglobalcybersecurityspendingwillexceed$1trillionfrom2017to2021,”CybersecurityVentures(May31,2017),accessedJune7,2017,http://cybersecurityventures.com/cybersecurity-market-report/3SteveMorgan,“CybersecurityIndustryOutlook,2017to2021:Keyeconomicindicatorsforthecybersecurityindustryoverthenextfiveyears,”CybersecurityBusinessReport,CSO(Oct.20,2016),accessedJune6,2017,http://www.csoonline.com/article/3132722/security/cybersecurity-industry-outlook-2017-to-2021.htmlCybersecurityVenturespredictsglobalcybersecurityspendingwillexceed$1trillionfrom2017to2021,supra.4SeeRoyMaurer,“WhyAren’tWomenWorkinginCybersecurity?”SocietyforHumanResourceManagement(Jan,10,2017),accessedJune18,2017,https://www.shrm.org/resourcesandtools/hr-topics/talent-acquisition/pages/women-working-cybersecurity-gender-gap.aspxandSteveMorgan,“CybersecurityIndustryOutlook,2017to2021:Keyeconomicindicatorsforthecybersecurityindustryoverthenextfiveyears,”CybersecurityBusinessReport,CSO(Oct.20,2016),accessedJune6,2017,http://www.csoonline.com/article/3132722/security/cybersecurity-industry-outlook-2017-to-2021.html5ElizabethWeingarten,“TheGenderGapinCybersecurityJobsIsn’tGettingBetter,”Slate(Mar.17,2017),accessedJune5,2017,http://www.slate.com/articles/technology/future_tense/2017/03/a_new_study_suggests_the_cybersecurity_gender_gap_isn_t_getting_better.htmlWeingartencitesthe2017GlobalInformationSecurityWorkforceStudy:WomeninCybersecurity.AccordingtotheStudy,women’srepresentationintheNorthAmericancybersecurityindustry(14percent)isonlyslightlyhigherthanthisglobalaverage.

Page 4: MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern programmers during her career in the U.S. Naval Reserve. She developed the first computer

Women In International Security (WIIS)

4

WhereAretheWomen?Cybersecurityprofessionsaredefinedas“anyoccupationthat‘plans[or]carriesoutsecuritymeasurestoprotectanorganization’scomputernetworks’”fromdatabreachesviahackingorthespreadofmalware.6Cybersecurityensuresthatourairlines,powergrids,nuclearplants,emergencycommunicationssystems(e.g.911andFEMAalerts)andotheressentialnationalsecuritytechnologiesareprotectedfrommaliciousattacks.Cybersecurityplaysacriticalroleinthedevelopmentofapps,electronicservicesandIoTdevicesthatshapeourdailylives.Ourphones,onlineshoppingplatformslikeAmazon,electronicbankingsystems,medicalrecordstoragesystems,videoandmusicstreamingservices(e.g.Netflix,Spotify),socialmedia(e.g.Facebook,Snapchat,Instagram),homesecuritysystems,smartrefrigerators,andthermostatsaredependentoncybersecurity.7 Consideringthatmodernsocietydependsoncybersecurityfornearlyeveryaspectofdailylifeinthedigitalage—towork,shop,travel,communicate,formrelationships,protectourhealth,keepourselvessafefromterroristattacks,naturaldisastersandothercalamities,etc—itissurprisingthatwomen,whorepresent50percentoftheglobalworkforce,compriseonly11percentofglobalcybersecurityprofessionals.Whatmakesthisstatisticevenmoreremarkableisthatwomen—notmen—builtthefoundationsforthecybersecurityindustrythatwehavetodaybyprogrammingtheworld’sfirstcomputers.Inaddition,studiesshowthat52percentofwomenunderage29holdacomputersciencedegree,andwhenwomenentercybersecuritytheydosowithoverallhighereducationlevelsthanmen.8So,whyaretheresofewwomeninthisfield?Thereareatleastfivemainreasonsforthegendergapincybersecurity.

(1)StereotypesthatidentifycybersecurityasamasculineindustryComputerscience,alongwithmathandengineering,iswidelytypecastasamasculinefieldacrossalmostallculturesaroundtheworld.Weneedonlylookathowanyassociationbetween“women”or“girls”andthetopics,“cybersecurity,”“computerprogramming,”“coding,”“softwaredevelopment,”“SiliconValley,”and“technicalengineering,”consistentlygarnersattentioninnewspapers,magazines,andthemovie

6KatharineD’Hondt,WomeninCybersecurity,ThesisforMasterinPublicPolicy(2016),HarvardUniversityJohnF.KennedySchoolofGovernment,7(citingBureauofLaborStatistics,2015)7SeeJusticeSoniaSotomayor’sconcurringopinioninUnitedStatesv.Jones(2012):“[Welivein]…thedigitalage,inwhichpeoplerevealagreatdealofinformationaboutthemselvestothirdpartiesinthecourseofcarryingoutmundanetasks.Peopledisclosethephonenumbersthattheydialortexttotheircellularproviders;theURLsthattheyvisitandthee-mailaddresseswithwhichtheycorrespondtotheirInternetserviceproviders;andthebooks,groceries,andmedicationstheypurchasetoonlineretailers.”Sotomayor,J.(concurringopinion),UnitedStatesv.Jones,132S.Ct.945(2012).8Statisticsfromthe2017GlobalInformationSecurityWorkforceStudy(GISWS),conductedbytheCenterforCybersecurityandEducation.HeatherRiccuito,“RepresentationofWomeninCybersecurityRemainsStagnant,DespiteRecentEffortstoBalancetheScales,”SecurityIntelligence(Mar.15,2017),accessedJune17,2017,https://securityintelligence.com/representation-of-women-in-cybersecurity-remains-stagnant-despite-recent-efforts-to-balance-the-scales/

Page 5: MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern programmers during her career in the U.S. Naval Reserve. She developed the first computer

Women In International Security (WIIS)

5

screensforareason.9ThestereotypingofSTEMfields(Science,Technology,EngineeringandMathematics)asamasculinedomainisarecentdevelopment,however,asmenonlybegantodominatethetechnologyprofessioninthe1980s.Fromitsrootstothenearendofthe20thcentury,womenledcomputerscience.Theveryword“computer”referredtopeoplewhocalculatedballistictrajectoriesfortheU.S.Army.Womennotonlycomprisedthevastmajorityofthesecomputers,butalsothosewhowoulddeveloptheworld’sfirstelectronicmodels.JustoveronehundredyearsafterAdaLovelace(1815-1852)envisionedamachinethatcouldbeinstructedtocalculatesumsandproducewordsandpictures,sixwomenattheUniversityofPennsylvaniaprogrammedtheworld’sfirstelectroniccomputers.10WiththeworkofGraceHopper,FrancesAllen,andnumerousotherfemaleleadersinthecyberfield,womenbuiltthefoundationsforthedigitalage.11Menbegantosupplantfemaleprofessionalsincomputerscienceonlywhenpersonalcomputersbecamealucrativeprospect,marketedalmostexclusivelytomenandboys.12Today,thelackoffemalecybersecurityprofessionalshasbecomeaprominentdiscussionpointforwomen’sempowerment,specificallytopromotewomenandgirls’participationinSTEMeducationprogramstopreparewomenforjobsofthefutureinthedigitalage.13However,commonstereotypesthatmenarenaturallystrongerinSTEMfieldsthanwomencontinuetodrivedownwomen’sparticipationinSTEMeducationprograms.Studiesspanningthepasttwentyyearshaveconcludedthattheso-called“stereotypethreat”(inthiscase,thephenomenonbywhichwomenareculturallyconditionedtobelievethatmenperformbetterinSTEMfields)inhibitswomen’sentryintoSTEMjobs

9ErinHogeboom,“EncouragingToday’sHiddenFiguresinSTEM,”Forbes(Feb.24,2017),accessedJune9,2017,https://www.forbes.com/sites/noodleeducation/2017/02/24/encouraging-todays-hidden-figures-in-stem/#47d29b8e4c3910SeeLauraSydell,“TheForgottenFemaleProgrammersWhoCreatedModernTech,”NPR(Oct.6,2014),accessedJune7,2017,http://www.npr.org/sections/alltechconsidered/2014/10/06/345799830/the-forgotten-female-programmers-who-created-modern-techandMeeriKim,“70yearsago,sixPhillywomenbecametheworld'sfirstdigitalcomputerprogrammers,”ThePhillyVoice(Feb.11,2016),accessedJune7,2017,http://www.phillyvoice.com/70-years-ago-six-philly-women-eniac-digital-computer-programmers/11GraceHopperbecameoneofthefirstthreemodernprogrammersduringhercareerintheU.S.NavalReserve.Shedevelopedthefirstcomputerlanguagecompiler,A-0,aswellasthefirstprogrammingsystemthatoperatedonEnglish-languagecommandsinsteadofalgebraiccode.“GraceMurrayHopper(1906-1992):ALegacyofInnovationandService,”YaleNews(Feb.10,2017),accessedJune8,2017,http://news.yale.edu/2017/02/10/grace-murray-hopper-1906-1992-legacy-innovation-and-serviceFrancesAllencreatedsecuritycodesandprogramminglanguagesfortheNSAafterbecomingthefirstfemaleIBMfellow,whereshedevelopedcompilersforIBMsupercomputers.WilliamL.Hosch,“FrancesE.Allen,”EncyclopediaBritannica,accessedJune8,2017,https://www.britannica.com/biography/Frances-E-Allen12SteveHenn,“WhenWomenStoppedCoding,”NPR(Oct.21,2014),accessedJune8,2017,http://www.npr.org/sections/money/2014/10/21/357629765/when-women-stopped-codingSeealso,Mundy,supra.13JustafterPresidentTrumpannouncedproposalsforNASAbudgetcutsandtheeliminationofNASA’seducationdepartment—whichmanagesNASA’seffortstopromotewomenandminorityrepresentationinSTEMcareers—IvankaTrumpandBetsyDeVostouredtheNationalAirandSpaceMuseumandsponsoredashowingofHiddenFigurestohighlightwomen’sachievementsintechnologyandotherSTEMfields.ValerieStrauss,“TheironyinIvankaTrump’sandBetsyDeVos’spushforSTEMeducation,”TheWashingtonPost(Mar.28,2017),accessedJune6,2017,https://www.washingtonpost.com/news/answer-sheet/wp/2017/03/28/the-irony-in-ivanka-trumps-and-betsy-devoss-push-for-stem-education/?utm_term=.8c73cf7e7948.

Page 6: MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern programmers during her career in the U.S. Naval Reserve. She developed the first computer

Women In International Security (WIIS)

6

andsuccesswithintheprofession.14Inoneofthefirststudiesonthestereotypethreat,maleandfemalemathstudentsweregiventhesameonlinemathexam,withhalfofthesubjectsbeingtoldthatwomenmaynotperformaswellbecausemalestudentsaregenerallybetteratmath.Thedifferenceinscoreswasstriking.Womenscoredanaverageof20pointslowerthanmeninthegroupthatlistenedtothestereotypethreat,yettherewasalmostnomeasurabledifferencebetweenmaleandfemalescoresinthenon-threatgroup.15STEMgenderstereotypingbeginstoinfluencegirlsandboysintheearlystagesofchildhood.RecentstudiesofyoungchildrenindicatedthatgenderstereotypinginmathandotherSTEM-relatedfieldsaffectschildrenasyoungasfouryearsold,despiteminimaldifferenceingirls’andboys’actualcapacities.16Ifmanygirlsdonotsteerawayfrommathandsciencestudiescompletelyastheygrowolder,girlswhoaspiretocareersintechnologyareproneto“dis-identification,”wherethe“repeatedorlong-term[stereotype]threat…eventuallyundermine[s]aspirationsinanareaofinterest.”17Withbothmenandwomenbeing“equallylikely”toperpetuategenderstereotypesinSTEM,bothintheclassroomandintheworkplace,farfewerwomenpursuecareersincybersecurityandadvancetohigh-levelpositionswithintheindustry.18(2)Alackofglobalinvestmentinfemale-foundedtechcompaniesWhenAnnamariaKonyaTannon,headofInnovationandEntrepreneurshipfortheSchoolofEngineeringandAppliedScienceatTheGeorgeWashingtonUniversity,launchedherfirsttechstartupin1997,female-foundedtechcompaniesreceivedlessthanfourpercentofglobalventurecapitalfunding.19AfteryearsoftechnologicalinnovationthathavebroughtforthiPods,andmultigenerationsofsmartphonesandiPads,thecurrentglobalinvestmentinfemale-ledtechcompanieshasbarelybudged,accountingforlessthansixpercentofventurecapitalfunds.20Amongthe200SanFranciscoBayAreatechnologystartupcompaniesthatreceived“seriesA”venturecapitalfunding(betweenthreeand15milliondollars)in2015,womenfoundedonlyeightpercentofthem.21Whilewomen

14CatherineHill,ChristianneCorbett,andAndresseSt.Rose,WhySoFew?WomeninScience,Technology,Engineering,andMathematics,AAUW(Feb.2010),39-40,accessedJuly31,2017,http://www.aauw.org/files/2013/02/Why-So-Few-Women-in-Science-Technology-Engineering-and-Mathematics.pdf.15Id.at40.16ChristineK.Shenouda,EffectsofGenderStereotypesonChildren’sBeliefs,Interests,andPerformanceinSTEMFields,Ph.D.Dissertation,DepartmentofPsychology,MichiganStateUniversity(2014),1,accessedJuly31,2017,https://d.lib.msu.edu/etd/2751.Inonestudywherepreschool-agechildrenwhereinstructedtoreplicatepatternswithLEGOblocks,onehalfofthechildrenwereexposedtothestereotypethreatinbeingtoldthatboyscancompletethetaskfasterthangirls.Amongthatgroup,thegirlsperformedconsiderablyslowerthanboys,ascomparedtothenon-stereotypethreatgroup.(Shenouda,1).17Hill,etal.,supranote44at41.18Shenouda,supranote44,at5-6.19KonyaTannonforgedherwaytosuccessintechstartupsbyworkingintheSiliconValley.SheisalsotheFounderandCEOofEquitaAccelerator(anon-profitcorporationdedicatedtopromotingwomen-ledtechcompanies.20WomeninInnovation:ThePerfectMatch,Panelco-hostedbytheCenterforTransatlanticStudiesandtheEmbassyofDenmark,June13,2017.21“WhyVCsArentFundingWomen-ledStartups,”Knowledge@Wharton,WhartonSchoolofBusiness,UniversityofPennsylvania(May24,2016),accessedJuly31,2017,http://knowledge.wharton.upenn.edu/article/vcs-arent-funding-women-led-startups/

Page 7: MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern programmers during her career in the U.S. Naval Reserve. She developed the first computer

Women In International Security (WIIS)

7

launchapproximately38percentofnewcompaniesintheU.S.,onlybetweentwoandsixpercentofthesecompaniesreceiveventurecapitalfunding.22AccordingtoKatherineHays,founderandCEOofadtechstartup,Vivoom,“Maleventurecapitalists…[mostly]areverycomfortable…givingfemaleentrepreneurscapitalfor‘girlstuff’…[like]rent[ing]dressesorsell[ing]babywipesasasubscription.”23Thingschange,however,whenwomenaskforventurecapitaltolaunchabusinessina“masculine”fieldliketech.Thereasonswhywomenreceivelowerventurecapitalfundingarecircular.ThelackofwomeninSTEMprofessionsbasedongenderstereotypingoftechnologyfields,coupledwithrampantandgenderdiscriminationwithintheindustry,onlyperpetuatethisproblem.“Everyyearthatgoesbywherewecontinuetofundtheexactsamepoolofoverwhelminglymale,overwhelminglywhitefoundersisonewherewearemissingoutontheopportunities

tofindimportantnewinnovations.”-EthanMollick,ProfessorofManagement,TheWhartonSchool

(3)GenderdiscriminationinthecybersecurityworkplaceAmongrecentpublicationsdiscussinggenderdiscriminationinthecybersecurityworkplace,perhapsnolocationismorefrequentlycitedacrosstheglobethanSiliconValley,theepicenterofAmerica’stechindustry.LizaMundy,SeniorFellowatNewAmericaandauthorofCodeGirls,highlightedfemaleprofessionals’commondiscriminationacrossmultipleSiliconValleytechcorporationsthatillustratewhywomen’sentryandattritionratesremainsolowincybersecurity.AccordingtoMundy,womenintechfacediscriminationend-to-end,beinghired,paid,promoted,andvaluedsignificantlylessthanmen.24Manywomencitedinrecentstudiesreportedthatinadditiontoenduringbothovertandunconsciousgenderbiasandfacingoveralldifferenttreatmentthanmaleemployees,women’ssoftwaredesignsare“acceptedmoreoftenthanmen’s…butonlyiftheirgenderisunknown.”25In2014Google,Pinterest,Apple,Facebook,andmanyotherSiliconValleycompaniespledgedtodevotemillionsofdollarstochangecorporatehiringpracticesandhelpwomenenterleadershippositions.26Threeyearslater,however,femalestaffingnumbershave“barelybudged…[with]sexism[remaining]…justasperniciousasever.”27Inthe2015“ElephantintheValley”surveythatpolledfemaletechprofessionals,respondentsdrewattentiontosomeofthemanyfactorsthatunderminewomen’schancesofsuccessintechprofessions.Amongthevariousdatacollected,66percentoffemalerespondentsfeltexcludedfromimportantnetworkingopportunitiesattheircompaniesbecauseof

NewYork-basedstartupcompaniesonlyfaredslightlybetter,withfemale-ledstartupsaccountingfor13percentofventurecapitalrecipients.Id.22Id.(citingEthanMollick,ProfessorofManagementatTheWhartonSchool)23Id.24LizaMundy,“WhyisSiliconValleySoAwfultoWomen?”TheAtlantic(Apr.2017),accessedJune9,2017,https://www.theatlantic.com/magazine/archive/2017/04/why-is-silicon-valley-so-awful-to-women/517788/25Id.26Id.27Id.

Page 8: MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern programmers during her career in the U.S. Naval Reserve. She developed the first computer

Women In International Security (WIIS)

8

theirgender,75percentofwomenfacedquestionsaboutmaritalstatusandfamilycommitmentsduringhiringinterviews,and88percentofrespondentsexperiencedpersistentunconsciousgenderbiasfrommalecolleagues.28Fromthelackofmeaningfulchangeingenderdiscriminationinthetechnologyprofession,itisnosurprisethatwomenleavecybersecurityovertwiceasfrequentlyasmen.29

(4)LawsandpoliciesthatpromotegenderdiscriminationApproximately90percentofcountriesaroundtheworldenforcelawsthatdiscriminateagainstwomen.Manyoftheselawsandpolicies(bothsecularandreligious)havehelpedcreateandenforcegenderdiscriminationinthecybersecurityprofessionbyunderminingwomen’sadvancementinsocialandeconomicrolesinothersectors.InIndia,forexample,becauselaborlaws“protectexisting[male]workersattheexpenseofaspiringones,whichincludemostwomen,”womenrepresentonly30percentofIndia’slaborforce.30InothercountrieslikeSaudiArabia,religiouslawssignificantlyunderminefemaleagency.StrictapplicationsofSharialawprohibitwomeninSaudiArabiafrominteractingwithmenoutsideoftheirfamilies,tothedegreethatmostbusinesses,banks,andotherpublicareashavesegregatedentrancesformenandwomen.31Whenlawspreventwomenfrominteractingwithmenoutsidefamilymembers,theyeffectivelyprecludewomenfrombecomingvaluedmembersoftheworkforce.

(5)CorporatepracticesthatcatertomaleprofessionalsSomecorporatepracticesthatcontributetoareducedfemalepresenceincybersecurityprofessionsinclude:failurestosetandmaintaingenderquotas(bothinhiringandretention);unwillingnesstospecificallyattractandrecruitmorefemaleprofessionals;andunder-investigationofemployeegenderdiscriminationclaimsand/ornotenforcingzero-toleranceworkplacediscriminationpolicies.

28TraeVassallo,EllenLevy,et.al.,ElephantintheValley,2015Survey,accessedJune9,2017,https://www.elephantinthevalley.com.Someexamplesofunconsciousgenderbiasinclude:havingquestionsdirectedtomalecolleaguesevenwhenitwaswithinafemaleemployee’sareaofexpertise,andaskingwomentoperformlow-leveltasksthatmenarenotaskedtodo.29Mundy,supra.30DhruvaJaishankar,“TheHugeCostofIndia’sDiscriminationAgainstWomen,”TheAtlantic(Mar.18,2013),accessedJuly31,2017,https://www.theatlantic.com/international/archive/2013/03/the-huge-cost-of-indias-discrimination-against-women/274115/.Asanotherexample,duetoIndia’slongstandingcustomsofgivingpreferentialtreatment(e.g.education)toboysratherthangirls,approximatelyone-thirdofwomeninIndiaareilliterate,furtherunderminingwomen’sopportunitiesforprofessionaladvancement.Id.31“SevenThingsWomeninSaudiArabiaCannotDo,”TheWeek(Sept.27,2016),accessedJuly31,2017,http://www.theweek.co.uk/60339/nine-things-women-cant-do-in-saudi-arabia

Page 9: MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern programmers during her career in the U.S. Naval Reserve. She developed the first computer

Women In International Security (WIIS)

9

TwoMindsAreBetterThanOne:ThreeReasonsWhyWeNeedMoreWomenintheCybersecurityWorkforce

(1)MaximizinginnovationpotentialIfthenumberoffemaleprofessionalsincybersecurityremainsstagnant,itwillrestrictbothcybersecuritydevelopmentandthequalityofourdigitalproducts. Becausemenandwomenarebornwithequaltalentcapacities,talentisdrawnfromthesamedistribution.Whensocietiesartificiallyconstrainone-halfofthedistribution(e.g.vialaws,customs,and/orreligiousbeliefsthatdrivegenderinequality)weloseone-halfoftheglobalworkforce’screativity.32Diversifiedtaskforceswith“freshideas…toaddressever-evolvingproblems”aremorevitalthaneverinthedigitalage,whenthethreatofcybercrimecontinuestogrow.IfthesecurityofoneofourIoTs,electronicservices,apps,orotherdigitalproductsiscompromised,thesecurityofotherdevicesispronetobreach,exposinguserstoincalculabledangerswithinhours,orevenminutes.33Havingamorediversifieddesignteamthatreflectsproducts’actualusersiscriticaltoaccountforhowconsumersuse/misuseproducts,whatuserneedsandintereststheproductdoesnotmeet,andhowtooptimizeproductsecurity.AccordingtoSarahGeary,seniorcyberanalystatFireEye,ahackeronlyhastotargetoneperson’sdevicetodebilitate“…anentirebusinessorgovernment…”Becauseweliveinanagewhenforeigngovernmentsaretargetingindividualsmorefrequently,“…it’saproblemwhenthosewhoaredesigningcybersecurityproductsorinterventionsaren’trepresentative…”ofthepopulationthatusesthem.34Studiesindicatethatbecausewomensufferhigherratesofonlineharassment(particularlysextortion35andcyberstalking)36womenaremorelikelythanmentoutilizestrongerprivacysettingsonsocialmediaappsandInternetplatforms(e.g.Facebook,Instagram,Whatsapp).37Women,therefore,cancontributedifferentideasfordesigningnewmoreuser-friendlydigitalplatformsstrongerprivacyfeatures,whichwouldbothprovideabettervarietyofprivacyprotectionoptionstoconsumersandhelpcompaniesadheretobestpracticesonmanaginginformationprivacy.38AccordingtoAnnamariaKonyaTannon,headoftheInnovationandEntrepreneurshipfortheSchoolofEngineeringandAppliedScienceatTheGeorge

32KalpanaKochhar,SpeakeratthePanel,WomeninInnovation:ThePerfectMatch,co-hostedbytheCenterforTransatlanticStudiesandtheEmbassyofDenmark,June13,2017.33BruceSchneier,YourWi-FiConnectedThermostatCanTakeDowntheWholeInternet.WeNeedNewRegulations,”TheWashingtonPost(Nov.3,2016),accessedJuly31,2017,https://www.washingtonpost.com/posteverything/wp/2016/11/03/your-wifi-connected-thermostat-can-take-down-the-whole-internet-we-need-new-regulations/?utm_term=.d612eb077fa8(citingapaperdiscussinghowhackerscancreateanIoTwormthatcaninstantlyinfectthousandsofotherIoTdevices.EyalRonen,ColinO’Flynn,et.al,“IoTGoesNuclear:CreatingaZigBeeChainReaction”)34Weingarten,supra,note9.35LaurieSegall,“Adisturbinglookinsidetheworldofonlinesextortion,”CNNMoney(June23,2016),accessedJune8,2017,http://money.cnn.com/2016/06/23/technology/sextortion-thorn-study/index.html36The2016BureauofJusticeStatisticsreportindicatedthatwomencomprised41percentofreportedstalkingvictimizations,outnumberingthe31percentofreportedmalevictimizations.“Stalking,”TheBureauofJusticeStatistics(Feb.17,2016),accessedJune8,2018,https://www.bjs.gov/index.cfm?ty=tp&tid=97337Weingarten,supra,note9.38Id.

Page 10: MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern programmers during her career in the U.S. Naval Reserve. She developed the first computer

Women In International Security (WIIS)

10

WashingtonUniversity,“Whenyouhaveagenderbalancedteam,researchshowsthatyouhavemoreoptimaloutcomesandcomeupwithmorecreativeideas.Menneedtobethere,andwomendotoo.”

“Whywouldyoueliminatethebrillianceof50percentofthepopulation?”-JoyceBrocaglia,CEOofAltaAssociates,acyberexecutivesearchfirm39

(2)ExpandingusabilityHavingmorewomenincybersecuritydesignanddevelopmentlabswillensurethatexistingconversationenginesonsmartphones(e.g.Siri,Cortana),apps(medical,socialmedia,lifestyle,etc.),andotherdigitalplatformsforshopping,socialmedia,datastorage,etc.willbebetterequippedtomeetmoreconsumersneedsoutsideofthemaleprofilesthatcreatedthem,specificallywomenandchildren. Scientistshavealreadydiscovered“thewhiteguyproblem”inartificialintelligence,wherebymachinelearningalgorithmsthatformpredictionsbasedonlargeamountsofexistinginputdataintroducegenderaswellasracialbiasindecision-making.40AlgorithmsthatformthebasisforawidevarietyofmobileandInternetservices—fromelectronicjobapplicationsystemstoconversationengineslikeSirionsmartphones—functionsolelybasedontheinitialdataprogrammedintothem,whichthealgorithmsaccumulatetomakedecisionslater.41Whenalmostexclusivelyall-maledesignteamscreatethesealgorithms,Siriandotherrelatedtechnologiesoperateonsinglesexaggregateddata,resultinginproductsthataremostuser-friendlytothesexthatcreatedthem.Accordingtoa2016JAMAInternalMedicinestudy,althoughSiricouldprovidegender-neutralmedicaladviceinresponseto“Siri,I’mhavingaheartattack,”Siriwasunpreparedtoprovideassistanceonfemalehealthandsafetyissuessuchassexualassaultanddomesticviolence.Amongfoursmartphoneconversationengines(Siri,Cortana,SVoiceandGoogleNow)onsixty-eightphones,thestudyfoundthatonlyCortanawasabletoprovidetheNationalSexualAbuseHotlinenumberinresponsetothemessage“Iwasraped.”42Sirirepliedinstead:“Idon’tknowhowtorespondtothat,”indicatingthatmaledesignteamsdidnotthinkthisdatawasimportantenoughtoprogram.43Amorediversedesignteammighthaveincludedthisinformation. Clearly,thediscrepancyfromhavingadesignteamthatdoesn’taccuratelyrepresenttheneedsandinterestsofthetotalconsumerpopulationcanputusersatsignificantrisk. Thesameproblemsfromamale-dominatedcybersecurityindustryextendtoothertypesofappsanddigitalfeatures.Imagineifmenrepresented93percentofthedesign

39Id.40HannahDevlin,“Discriminationbyalgorithm:scientistsdevisetesttodetectAIbias,”TheGuardian(Dec.19,2016),accessedJune18,2017,https://www.theguardian.com/technology/2016/dec/19/discrimination-by-algorithm-scientists-devise-test-to-detect-ai-bias41Id.42AlicePark,“Here’sHowSiriRespondsto‘Iwasraped,’”Time.com(Mar.14,2016),accessedJune8,2017,http://time.com/4257568/siri-rape-smartphones/43Bycontrast,Sirihadnotroubleinterpretingtocertainhealthinquiriesthatexclusivelyaffectmen.Thestatement,“Siri,Ihaveerectiledysfunction,”immediatelypresentedalistofnearbyclinicsandphysicianrecommendations.

Page 11: MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern programmers during her career in the U.S. Naval Reserve. She developed the first computer

Women In International Security (WIIS)

11

teamsthatdevelopedwomen’sundergarments,clothing,footwear,makeup,hygieneproducts,andhaircare.Thisrepresentsthecurrentstateofappdevelopment. Womenrepresentonlysixpercentofappdevelopers,despitecomprising50percentoftheapp-usingpopulation.44WomenhavehelpedcreateappslikebSafethatarespeciallydesignedforwomenandgirls’interestsandphysicalneeds,includingservicesdesignedtohelpprotectwomenagainstsexualassaultanddatingviolence.45Withoutgreaterfemaleinvolvement,however,productslikethesethataredesignedwithwomeninmindwillremainlimited. Amoregender-balancedcybersecuritydesignteamcanalsohelpcreatemoreproductfeaturestoprotectchildrenonline.46Itmaybeeasytooverlookchildrenwithintheglobalconsumerpoolforappsandotherdigitalproducts,butchildrenrepresentasignificantportionofusersofsomeofthemostpopularsocialmediaapps(e.g.Snapchat,Kik,Whattsapp)andInternetservices(e.g.Google,Bing).Accordingtoa2015survey,theaverageAmericanchildreceiveshisorherfirstcellphoneatagesix.47Three-quartersofthechildrensurveyedalsohadtabletstoaccesstheInternet.48SimilarresearchconductedintheUKindicatedthatmorethanhalfofchildrenuseatleastoneformofsocialmediabyage10.49BecausechildrenareusingsmartphonesandInternet-enableddevicesatincreasinglyyoungages,mothers,femalecaregivers,andteachersmayhaveaclosereartowhatapps,games,andwebsitefeatureschildrenareusing,ormaybeginusing.Aswomenarealreadymorelikelytousestrongerprivacyprotectionsthanmenonsocialmediaplatforms,womencanhaveaparticularlyimportantroleindesigningprivacyfeaturestohelpmonitorchildren’sactivityandreceivealertstosuspiciousonlineinteraction. Withmorewomendesigners,productswillbecomemoreuser-friendlyforallconsumers,anditmayhelpsavelives.50

44DavidBolton,“Survey,Only6%ofAppDevelopersAreWomen,”Arc(Feb.27,2016),accessedJune15,2017,https://arc.applause.com/2016/02/27/average-app-developer-male-age-35/45bSafeprovidesdiscreteassistancetogirlsandyoungwomeninavarietyofsituations—fromautomaticallyalertingalistoffamilymembersandfriendsiftheuserindicatesthatsheisindanger,toprovidingafaketelephonecalltohelpauserleaveanuncomfortabledateorsocialsituation.45Similarappscouldbedevelopedthatwouldserveascommunityalertsforthepublictoreportsuspiciousactivityofsextraffickinganddomesticviolence.Someoftheseproductsinclude,SpitfireAthlete(providingpersonaltrainingassistancetowomenbasedonexerciseregimensoffemaleathletes),andHey!VINA(anapptohelpwomencultivatesame-sexfriendshipsanddevelopasenseofcommunityamongfemaleusers).JenavieveHatch,“Behold,ATinder-LikeAppforFemaleFriendships:BecauseFindingNewBFFsisjustasimportantasfindingadate,”HuffingtonPost(Feb.01,2016),accessedJune8,2018,http://www.huffingtonpost.com/entry/finally-tinder-for-friends_us_56abdaa0e4b0010e80ea299ehttp://spitfireathlete.com46Forthepurposesofthisreport,“children”isusedtorefertoanypersonunderage18,inaccordancewiththeConventionontheRightsoftheChild(CRC)andotherinternationallegalinstruments.ConventionontheRightsoftheChild,Nov.12,1989,1577U.N.T.S.3.Art.1,http://www.ohchr.org/EN/ProfessionalInterest/Pages/CRC.aspx47“StudyFindsAverageAgeOfKidsWhenTheyGetFirstCellPhoneIsSix,”ABC13EyewitnessNews(April7,2015),accessedJune8,2017,http://abc13.com/technology/study-53%-of-kids-get-a-cell-phone-at-age-6/636328/48Id.49TheDailyMailReporter,“Morethanhalfofchildrenusesocialmediabytheageof10:Facebookisthemostpopularsitethatyoungstersjoin,”TheDailyMail(Feb.5,2014),accessedJune15,2017,http://www.dailymail.co.uk/news/article-2552658/More-half-children-use-social-media-age-10-Facebook-popular-site-youngsters-join.html50Acrosstheglobe,teachingremainsafemale-dominatedprofession.IntheU.S.alone,womenrepresent75-80percentofkindergarten,elementary,andmiddleschoolteachers.MotokoRich,“WhyDon’tMoreMenGoInto

Page 12: MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern programmers during her career in the U.S. Naval Reserve. She developed the first computer

Women In International Security (WIIS)

12

(3)StrengtheningtheglobaleconomyEventhoughwomenaccountfor50percentoftheglobalworkforce,womenformonly11percentoftheglobalcybersecurityindustry,remainingthemostunderrepresentedtaskforceintheglobaleconomy.Withcybersecurityitselfbecomingoneofthelargestglobalbusinessesintheupcomingyears,countriesstandtolosemorethanonemaythinkifmorewomenarenotbroughtintotheworkplace.TheInternationalMonetaryFund(IMF)recentlyconductedresearchtoobservetherelationshipbetweenalowerwomentaskforceandnationalgrossdomesticproducts(GDPs)toseetheshortageoffemaleprofessionalsoncountries’economies.WhiletheUnitedStates(whichhasaslightlyhigherthanglobalaveragepercentageofwomenincybersecurity)couldlose12-14percentofitsGDP,othercountrieslikeSouthKoreacouldlose19-20percent.51 Understandingthat209,000cybersecuritypositionswentunfilledin2015,globaleconomicgrowthdoesnotlookpromisingwhenthisdemandwillincreasetosixmillionpositionsby2019.52Withoutmorewomentoclosethisgap,1.8millionglobalpositionswillremainunfilledby2022,significantlythreateningtheprogressofcybersecurityinatimewhentheworlddependsuponitmost.53

“…[S]huttingwomenoutof[cybersecurity],intentionallyorunintentionally,islikekeepingthemoff

thefactoryflooratthebeginningoftheIndustrialRevolution.”54—AnneMarieSlaughter,PresidentandCEOofNewAmerica.

RecommendationsWithpersistenteffortstocombatthesocialattitudes,genderstereotypes,andunconsciousbiasesthatperpetuategenderdiscrimination,andwiththedevelopmentandadoptionofappropriatecorporate,law,andpolicymakingstrategies,wecanresolvethegendergapincybersecurity.ManybelievethatgreaterinvestmentinSTEMeducationisthekeystoneinclosing

Teaching?”TheNewYorkTimes,(Sept.6,2014),https://www.nytimes.com/2014/09/07/sunday-review/why-dont-more-men-go-into-teaching.html.Eveninseeminglygender-neutralsituations,suchas,“Siri,IthinkI’mhavingastroke,”menandwomen’sexperiencesofthesamemedicalconditioncanbeverydifferent,andtheconversationenginemaynotbeabletorecognizecertainsymptomsthataffectwomenmorethanmen.Forexample,afemalevoiceinput,“Siri,myarmhurts,”maybeacommonsignofastrokeformanywomenthatmenmightneverexperience.Increasedwomen’sinvolvementinprogrammingconversationenginescanhelpimprovethistechnologytokeepmoreuserssafe.“WomenandStrokes:UniqueRisksandUncommonSymptoms,”TheDr.OzShow(Jan.14,2013),accessedJune7,2018,http://www.doctoroz.com/article/women-and-strokes-unique-risks-uncommon-symptoms51Kochhar,supra,note11.52“CybersecurityIndustryOutlook,2017to2021:Keyeconomicindicatorsforthecybersecurityindustryoverthenextfiveyears,”supra,note353Weingarten,supra,note9.54EliSugarman,“Womenincybersecurity:4questionsforNewAmerica’sAnne-MarieSlaughterandMeganGarcia,”InterviewwithAnne-MarieSlaughterandMeganGarcia,William&FloraHewlettFoundation(Nov.16,2015),accessedJune6,2017,http://www.hewlett.org/women-in-cybersecurity-4-questions-for-new-americas-anne-marie-slaughter-and-megan-garcia/

Page 13: MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern programmers during her career in the U.S. Naval Reserve. She developed the first computer

Women In International Security (WIIS)

13

thegendergapincybersecurity.55The2017GlobalInformationSecurityWorkforceStudy,WomeninCybersecurity,reportedthat52percentofmillennialwomenunderage30areeducatedincomputerscience.56However,whileeducationisapromisingfixtureitisnotgoingtosingle-handedlypushwomenintotheprofession,ormakethemstay.

Educationaloneisnotgoingtosolvethisproblem.Forexample,althoughmorewomenarenowgraduatingwithdegreesinlawandmedicinethaneverbefore,itdoesnotmeanwomenreceiveequaltreatmentintheirfield,orthatwomenhaveequalattritionratesinthelaborforceasmen.57AnAmericanCommunitySurveypresentingdatafrom2008to2010showedthatwomenarestillmorelikelythanmentoleavetheworkforceasearly-careerlawyersanddoctors(betweenages25and44).58

Tostrengthenwomen’sleadershipincybersecuritythreethingsneedtochange:

(1)Socialattitudes,genderstereotypesandunconsciousbias

“Themostdangerousphraseinthelanguageis,‘We’vealwaysdoneitthisway.’”-GraceHopper59

Eliminatingtheingrainedsocialattitudes,genderstereotypes,andunconsciousbiasthatpreventwomenfromenteringandadvancinginSTEMfieldsiscriticaltobringingmorewomenintocybersecurity.Beginningaschildren,parentsneedtogroomyoungboystobebettersupportersofwomenlaterinlifesothatwecanfinallyretrainthewayweworktogether.“Supportingwomenhasbeendangerouslyequatedwithbeinglessmasculine,”saysRyanRoss,ProgramDirectorfortheHalcyonIncubatorthatsupportsdevelopingstartupventures.Wehavetoworkasaculturetochangethat.Bothmenandwomenhaveequalresponsibilitiestohelpreversesocialattitudesandgenderstereotypesandbias.Somecriticalstepsinclude:

• Acknowledgingthatgenderdiscriminationisacontinuingproblem.InthewordsofLindaKozlowski,ChiefOperatingOfficerofEtsy,“Progressisdifficult‘ifpeopledon’t

55Insigningtwobillsintolawtopromotewomen’senrollmentinSTEMfields,PresidentTrump’sremarkedthat”…Itisgoingtochange,andit’sgoingtochangeveryrapidly.”MelanieArter,“TrumpSignsBillsSupportingWomenEntrepreneursandWomeninSTEMFields,”CNSNews(Feb.28,2017),accessedJune8,2017,http://www.cnsnews.com/news/article/melanie-arter/trumps-signs-bills-supporting-women-entrepreneurs-and-women-stem-fields56Weingarten,supra,note9.57Inadditiontothepaygapasprofessionals,womenarerarelyacceptedtotopeducationprogramsequallywithmen.Althoughwomenwhopursuehighereducationaremorelikelytoattendmedicalorlawschool,theycompriselessthan50percentofthestudentsatthetoplawschools.DebraCassensWeiss,“MenOutnumberWomenatMostTopLawSchools,ButtheImbalanceIsGreateratB-Schools,”ABAJournal(May09,2011),accessedJune8,2017,http://www.abajournal.com/news/article/men_outnumber_women_at_most_top_law_schools_but_the_imbalance_is_greater_at/.PhilipCohen,“MoreWomenAreDoctorsandLawyersThanEver—butProgressIsStalling,”TheAtlantic(Dec.11,2012),accessedJune8,2017,https://www.theatlantic.com/sexes/archive/2012/12/more-women-are-doctors-and-lawyers-than-ever-but-progress-is-stalling/266115/58Id.59CharlesGrosch,LibraryInformationTechnologyandNetworks,CRCPress(1994),183(quotingGraceMurrayHopperinher1987interview,InformationWeek,Mar.9,1987,52)

Page 14: MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern programmers during her career in the U.S. Naval Reserve. She developed the first computer

Women In International Security (WIIS)

14

believethere’saproblem.’”60Arecentsurveyof13,331adultsacrosstheU.S.showedthatthemajorityofmen(58percent)believethat“allobstacles[totheprofessionalgendergap]hadbeeneliminated,”61comparedto60percentofwomenwhoclaimedthatthegendergapremainsapersistentchallenge.62Ifmenandwomenhavesuchlargelyconflictingopinionsonthecurrentstateandseverityofthegendergap,meaningfulchangewillbeslowtocome.Menneedtorecognizethatgenderdiscriminationisacontinuingprobleminordertoaddressit.

• PursuingSTEMcareers,despitegenderstereotypes.With52percentofmillennial

womenunderage29havingcomputersciencedegrees,womenarealreadymorepreparedthanevertoentercybersecurityandotherSTEMprofessions.63Justaswomenmustcutagainstthepressureto“disidentify”withmath,science,engineeringandothertechnologyrelatedareasofstudy,menmustacknowledgethatnofieldisa“man’sfield.”64

• SchoolsmustincreaseinvestmentinSTEMeducationforgirlsandwomen,andraise

girls’awarenessofjobopportunitiesincybersecurity.65Accordingtoa2016studyconductedbyaUKnot-for-profitITsecurityaccreditationorganization,thelackoffemaleapplicantsthatresultsfromwomenbeinglessinformedoftheopportunitieswithinSTEMprofessionsisakeycontributortothecurrentgendergapincybersecurity.66Teachersandguidancecounselorshaveanimportantroletoplayininspiringgirlstoconsidercareersintech,acriticalstepinbringingmorewomenintocybersecurity.

• Bothmenandwomenmustfightagainstbothovertandunconsciousgender

discriminationintheworkplace,throughlegalactionifnecessary.67Ifwearegoingtoaspiretowardgenderequalityintheworkplace,weneedtoreiteratewhatbehaviorandattitudescannotbetolerated.ForAnitaHillandotheradvocates,classactionlawsuitsarecriticaltoeffectuatingchange“eveninthemostentrenched,male-dominatedindustries…especiallyifregulationisnotanimmediateorviablesolution.”68

60LauraEntis,“MenThinkObstaclestoGenderEqualityatWorkAreGone.WomenSeeitDifferently,”Fortune(July18,2017),accessedJuly31,2017,http://fortune.com/2017/07/18/gender-gap-tech/61Id.62Id.63Riccuito,supra.64Shenouda,supranote44,at5-665A2015ISACAstudyindicatedthatneitherhighschoolteachersnorguidancecounselorsmentionedcybersecurityasacareerchoicefor77percentofyoungwomeninthesurvey.Riccuito,supra.66Maurer,supra.AndRiccuito,supra.67ManyrefertoEllenPao’s2015genderdiscriminationlawsuitagainstSiliconValleyventurecapitalfirm,KleinerPerkinsCaufieldandByersasthepivotaleventthatinspiredfemaletechprofessionalstobemorevocalinreportingsexualharassmentandgenderbiasintheworkplace.DavidStreitfeld,“EllenPaoLosesSiliconValleyBiasCaseAgainstKleinerPerkins,”TheNewYorkTimes(Mar.27,2015),accessedJune15,2017,https://www.nytimes.com/2015/03/28/technology/ellen-pao-kleiner-perkins-case-decision.html?_r=068AnitaHill,“AnitaHill:ClassActionsCouldFightDiscriminationinTech,”TheNewYorkTimes(Aug.8,2017),https://www.nytimes.com/2017/08/08/opinion/anita-hill-women-in-tech-should-take-sexism-to-

Page 15: MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern programmers during her career in the U.S. Naval Reserve. She developed the first computer

Women In International Security (WIIS)

15

• Menandwomenmustsupportgreaterfemaleinvolvementinsectorsthatregulateor

otherwiseinfluencetheSTEMprofessions,especiallyinthedevelopmentandimplementationoflaws,policies,andbestpracticesthatregulatethecybersecurityindustry.(E.g.increasingwomen’srolesinadvocacyforlegislationagainstsextortion,revengepornography,andothercybercrimesthatresultfromproducterrorsordesignflawsthatfacilitatecompromisesinusers’informationsecurity).Ifwomenhaveastrongerinfluenceincreatingtherulesthatgoverncybersecurityproductdevelopmentandconsumeruse,cybersecuritycompanieswilllikelybenefitfromdrawingwomenintoallareasofitsindustry,fromdesignlabsanddevelopmentfirms,tomarketingandlegalcounsel.

“…[T]houghthenumbersofwomenaresmall,wearedoingsomeremarkablethings…thisisanexcitingtimetobeinthefield.”

-AndreaLittleLimbago,ChiefSocialScientist,Endgame.

(2)Laws&PoliciesAsignificantpartoftheeffortmustcomefromthenationallevel.69Legalreformisacriticalsteptobringingmorewomenintoallworkforcesectors,especiallywhen90percentofcountriesaroundtheworldenforcelawsandpoliciesthatunderminewomen’ssocialandeconomicagency.Somepossiblereformsinclude:

• DevelopingnationalsimilartothoseintheNordiccountries,whichpromoteequalrepresentationintheworkforce,providebroaderaccesstohighereducation,andlongerobligatorypaidparentalleaveprograms.70WhiletheNordicModelisnotperfect,itremainstheforerunnerofgenderequalityinthetechnologyindustry.

• Offeringfederaltaxbreakstocompanieswhopromotewomen’shiringandadvancementinleadershippositions.

• Establishinggovernment-regulatedquotas,requiringtechcompaniestohireandretain

asetnumberoffemaleprofessionals.ForKalpanaKochhar,quotasarecritical.In1993,IndiaamendeditsConstitutiontorequirethatone-thirdoflocalself-governmentseatsmustbefilledbywomen.Theresultsweredrastic.Thenumberoffemaleleadersingovernment,business,andothersectorsdramaticallyincreasedbecausewomenweremorelikelytocompeteforelectionsandhigherpositionsofauthority,andparentsdevelopedmuchhigheraspirationsfortheirdaughters,leadingtobettereducationalopportunities.71

court.html?action=click&contentCollection=Business%20Day&module=RelatedCoverage&region=EndOfArticle&pgtype=article69UllaRønberg,SeniorVisitingScholarattheCenterforTransatlanticRelations,WomeninInnovation,ThePerfectMatch,supra.70Id.71Kochhar,supra.

Page 16: MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern programmers during her career in the U.S. Naval Reserve. She developed the first computer

Women In International Security (WIIS)

16

“Inthe4thIndustrialRevolutionthat’suponus,requiringlawsandpoliciesthatadvancewomen’srolesshouldbetheheartofourpreparations…Afterall,jobsofthefuturewillbemuchlessfocused

onbrawn,andmuchmorefocusedonbrain.”–KalpanaKochhar,DirectorofHRattheInternationalMonetaryFund(IMF)

(3)CorporatePracticesTherearemanyinitiativesthatcorporationscanandshouldtakeinordertoattractmorewomenincybersecurity,including:

• Specificallyaskingforfemaleapplicants:AccordingtoRyanRoss,ProgramDirectorfortheHalcyonIncubatorthatsupportsdevelopingstartupventures,“thesecondyouputoutthatspecificask,womenarenotonlymoreinspiredtoapply,butbothmenandwomenaremorelikelytoreferfemalecandidates.”WhenRoss’startedaskingforfemaleprofessionals,women’sapplicationratedoubled.Fromhavingmorewomenonthetaskforce,50percentoftheIncubator’sstartupsnowhaveafemalefounderorco-founder.

• Sponsoringmorefemaleprofessionalstoensurethatbothmenandwomenreceive

equalprofessionaldevelopmentsupportintheirindustry.72Professionalswithseniormembermentors(“sponsors”)are23percentmorelikelythanpeoplewithoutsponsorstoadvanceintheircareers,andmenaremuchmorelikelythanwomentosecuresponsorsinallprofessionalfields.73

• Settingpermanentgenderhiringandretentionquotas,toensurethatmorewomenaregivenequalopportunitiesasjobcandidatesandthattheworkplacebecomesaclimatewherefemaleprofessionalswanttowork.

• Maintainingazero-tolerancepolicyforgenderdiscrimination.Somestrategiesinclude:

sponsoringmandatorytrainingworkshopsonunconsciousbiasandsexualharassmentforeverynewhire(maleorfemale);conductingregularanonymoussurveysonworkplaceclimatetoprovideemployeeswithfrequentno-riskopportunitiestoreportgenderbias/discrimination,increasingfemalestaffinHumanResources;administeringthoroughinvestigationsofeachreportofgenderdiscrimination/biasthroughagender-balancedinvestigationteam;andsendingapublicmessageofzero-tolerancetoothercorporationsbyimmediatelyrespondingtoemployeeconductthatpromotesgenderbiaswithappropriatepenalties,following

72KatyZurkus,“Despitethegenderbarriers,womenmustpersistincyber,”CSOOnline(Mar.21,2017),accessedJune17,2017,http://www.csoonline.com/article/3181765/it-careers/despite-the-gender-barriers-women-must-persist-in-cyber.html73JanePorter,“Yes,GenderEqualityisaMen’sIssue,”(Sept.26,2014),FastCompany,accessedJuly31,2017,https://www.fastcompany.com/3036289/yes-gender-equality-is-a-mens-issue

Page 17: MISSING FIGURES FFFIFFFFIFIGURES€¦ · 11 Grace Hopper became one of the first three modern programmers during her career in the U.S. Naval Reserve. She developed the first computer

Women In International Security (WIIS)

17

Google’srecentexampleinaddressinganemployee’schallengetothecompany’sdiversityefforts.74

“Myvisionforthefutureisforustoembracethetechnologicalchangethat’suponusandtobuilda

workplacetomatchit,wheremenandwomenareequallyhired,paid,andvaluedfortheircontributions.”

–KalpanaKochhar,DirectorofHRattheInternationalMonetaryFund(IMF)ConclusionWhilethelackoffemalecybersecurityprofessionalshasbeenaprominentdiscussionpointforwomen’sempowermentinmoderncultureandmedia,manyofthesediscussionsfocusexclusivelyonthepervasiveobstacleofgenderdiscriminationthatpreventswomenfrombuildingapresenceinthecybersecurityindustry,highlighting,forexample,theworkplacebarrierstofemaleprofessionalsintheSiliconValley.Understandingthatgenderdiscriminationisbynomeansuniquetothisfield,itisimportanttounderscorethatwomen’sunderrepresentationhaslargereffectoncybersecurityasaglobalindustry,evenmoresothanotherprofessions. Focusingsolelyonthepersistentissueofworkplacegenderdynamicsintechlabsdetractsattentionfromotherimportantproblemsthatresultfromadiminishedfemalepresenceincybersecurity,fromthedevelopmentandsecurityofthetechnologythatcontrolshowweliveandkeepussafe,tothehealthoftheglobaleconomy.Thegendergapincybersecurityisnotaninsurmountableproblem,however.Withdedicatedinitiativestodismantlegenderstereotypes,reshapediscriminatorylawsandpolicies,andimplementnewcorporatestrategiestohelpwomenentercybersecurity,wecanallbecomesmarterinthedigitalage.

74GoogleopenlyfiredamaleemployeeonAugust6,2017forwritingadiscriminatorymemoinresponsetoGoogle’sdiversityefforts,arguingthatwomenweren’tbiologicallyfittoworkintechnicalpositions.DaisukeWakabayashi,“GoogleFiresEngineerWhoWroteMemoQuestioningWomeninTech,”TheNewYorkTimes(Aug.7,2017),https://www.nytimes.com/2017/08/07/business/google-women-engineer-fired-memo.html?smprod=nytcore-ipad&smid=nytcore-ipad-share