Actually you are wrong! We can't find enough security specialists now. We just had a long conversation with Cyber Security Malaysia and some of the biggest security consultants in the country and the problem is getting talents. We get a lot of graduates but not talents. That's the key issue now.

In fact, the big Four consultancies (KPMG, PWC, Deloitte) are now setting up a security/risk-management arm that would deal with this emerging threat area but they can't find enough consultants in this field. Similar to banks.

Maybe you should get more information from the relevant industries and agencies before making such a sweeping statement.

No. The actual fact is your university degree doesn't grant that you are proficient. So many graduates go out with no strong fundamentals. Yes - they take a degree in Computer Forensics but lack the basic building blocks of computer science.

Want to be a good cyber security person? Do computer science and learn the foundation of CS. you can't run if you can't even walk. You can't solve security problems if you are not a good problem solver. Period.