Having come from a nontechnical background (a degree in hotel management) and made my way into the industry, the fastest way to me is to just start learning. I

Having come from a nontechnical background (a degree in hotel management) and made my way into the industry, the fastest way to me is to just start learning. I assume she has no idea what she really wants to do in the field anyways, so she should start exploring. I recommend web development. It exposes you to many concepts along the way and can help give your friend a feel of what she would enjoy. That's what I did and now I find myself really loving backend work and fraud detection. She can take a focus on security during her learning and at least start to absorb general security practices, get into the right mindset to be good at it, and probably network within the security community easily enough.