Knowing what you're doing always mattered, but you don't need to be a qualified engineer to deploy software, unlike say, a building. I maintain that we need the title of 'software engineer' to really mean something, and for someone in a position like Chief Security Officer to be qualified as such. If a bridge collapsed due to the person responsible being a music teacher then you can bet there'd be jail time.