Re: "no staff with security qualifications ..."
So let's please have more people with expertise, but let's stop selecting them on the basis of bogus qualifications that signify nothing of value.
[Wild applause].
Sadly, in order to make the case for someone to be employed or promoted, HR departments mostly want to go for the safe option and that's to require them to have qualifications of some sort. It's very rare that an IT-person-with-a-clue is allowed to both write the job spec *and* be part of the interview process.
Biting the hand that feeds IT
