Why is there a skills shortage in information security? We discuss toxic workplaces and an immature industry.