[floatingatoll]

Does it change your views if I restate this as (using just her public LinkedIn profile):

"A chief security officer with 15 years of experience and peer accolades in the fields of banking-grade security and human data management"

Typically, this is where most people don't even ask what a degree is. However, as you indicate "no degree" is unacceptable: Which domain-relevant degree programs, initiated 20+ years ago and completed 15 years ago, would satisfy your terms?

[phailhaus]

Anything remotely technical. Remember, we wouldn't be having this conversation if Equifax wasn't making embarrassing amateur mistakes with everyone's personal data. Their CSO appears incompetent.

[floatingatoll]

Which qualifications does a "remotely technical" degree meet to operate security at Equifax that a "non-technical" degree does not?

You imply that Music is a non-technical degree, which is arguable, but it's certainly an Arts degree rather than a Science degree. If that's the distinction by which you draw the line, you're wrong to do so. If you reject job applicants to a technical role on that basis someday, that's more overlooked high-value opportunities for others to hire instead :)