You would be surprised by the number of professionals who would be at peak tech performance if they could pull it off

IT security is a lot more about the processes, risk, and data management that technical performance these days.

The book to study for CISSP CBK is hardly any technical (The Code Book is more technical than that)

The ISO 27000 series defines an Information security management system that doesn't even need to involve "computer", as it discusses more about data in the organization.

Research these days is also based a lot on how to address security risks on top of safety risks, not just how to hack any system (and I do believe that the obsession of the aviation industry about these studies is why everything was ready so that suspects were met with police)