According to the 2018 Hacker Report less than 5% of today’s ethical hackers learned their skills in a classroom. While the majority of ethical hackers do have some form of computer qualification, few have formal certification in the discipline itself. So why would an ethical hacker need anything as ‘establishment’ as formal ethical hacking certification?