When it comes to security, many people do not know what they do not know. Consider for example, an administrator who leaves her password taped under her keyboard, or a teacher who doesn't change his password (ever!) or can't be bothered to log out or lock the computer, all the firewalls and antivirus programs in the world will not protect a school's network. That's why it's critical to have someone in a district or school who can not only design a comprehensive security plan, but educate the staff as to why security is necessary. Achieving this requires formal training. One path to better understanding security is through local universities that offer technical degrees. In San Francisco, for instance, Golden Gate University's School of Technology has created a new master's program in systems and network management. Three of the 10 classes in this program specifically address enterprise and network security. The author has also broken out a list of selected security certifications to investigate. Each site includes recommended readings and classes designed to help achieve certification.