PhDs don't necessarily equate to security awareness and computer savvy-ness. I know people who're brilliant in theoretical stuff, but are quite *ahem* nincompoops in the practical terms.
These are things not taught in universities.
These are things not taught in universities.