The infosec industry frequently claims it has an enormous skills gap. It’s therefore time to inspect recruitment practices and ask ‘who decides what good looks like?’ Is anyone gatekeeping the gatekeepers?