Those are good reasons why the National Academy of Science doesn't think that computer security can be responsible to professional standards:

https://nap.nationalacademies.org/catalog/18446/professional...