“Personally, I like the hands-on qualifications like those provided by SANS that show practical skills. They offer classes, such as ethical hacking, which I think would help any security practitioner understand how attacks really work,” says Chris Morales, head of security analytics at Vectra.