T he information security (InfoSec) profession got its start decades ago, but it consisted of few people, mostly in military and other secret orga- nizations. With the appearance of the Internet in the 1990s, organizations started to put information online, and the InfoSec profession became a little more popular. Fast‐forward to the mid 2010s, with its big security breaches as well as new law…