A business will have good security if its corporate culture is correct. That depends on one thing: tone at the top. There will be no grassroots effort to overwhelm corporate neglect.
I think the insistence on credentials at companies is such a huge mistake. I believe you should hire people based on who they are and what they've done, not because of something like what college they went to–or even whether they went to college. It turns out, the rigor that college requires often screens out the most creative people anyway.