Over the last half decade or so, I've met a number of early twenty-somethings where after listening to them talk a while, I think to myself, "as a CISO, I would have killed to hire this person". And yet inevitably the conversation turns to how hard it is to break into this...

...industry, how internships don't materialize, how they go on interview after interview and aren't getting a chance, or are presented with requirements that sound ridiculous to me. I've spent years now running a study looking into thousands of security programs, ...

...I know what folks are actually doing as opposed to the fancy things they present they're doing.

Then I read releases like the one today that the industry has a shortfall of 3.12 million people, and think...this is a nonsense factory.