Except one thing... If you don’t have a degree and specific experience in the field, how do you know what that security team needs to be doing?
You can’t just take their word for it.
She failed. There is a reason for it. You can’t simply say, “Oh, I hired a great team, but they failed me.”
Education in a particular field of science is a good and often necessary thing, but that won’t provide the management skills required to run a security operation — that only comes with many years of experience in the field.
I’m not at all saying she’s not accountable. My point concerns the focus of failure which to me is a failure.