In the beginning there were certifications, and they were enough. Put some word salad after your name — CISSP, CEH, GIAC, GPEN, CISM, ABC, 123, WTF, etc — and you were considered a security wizard, ...