Teaching employers about being certified in the Governance of Enterprise IT could be a way forward for companies to embrace security better.