We have surprisingly little data on how to evaluate infosec job candidates academic qualifications. That needs to change.