TechGromit wrote: » In my professional opinion, a Security+ should be a minimum certification requirement for everyone involved in IT. IT Security isn't just the responsibility of the Security Team, security is everyone responsibility. It's pretty difficult if not impossible to properly secure a network when other members of IT use passwords like 12345, and clicks OK on every popup box that displayed on the screen without asking Why is it asking me this. Clueless users are bad enough, we try to educate them to a minimum level of competency, IT staff should be several steps above minimum.