You are right: checklist is not for education. If you don't know how to implement one of those items, you need to go learn. The checklist itself is still valuab

You are right: checklist is not for education. If you don't know how to implement one of those items, you need to go learn. The checklist itself is still valuable, even to a seasoned security developer. A checklist will not teach a pilot how to fly and land a plane, but it's value is not zero..