There's no way that a person with zero IT experience should be into IT management. Just no way. He should get at least some certifications from Microsoft in Az

There's no way that a person with zero IT experience should be into IT management. Just no way. He should get at least some certifications from Microsoft in Azure and SQL. At least learn Python. Networking basics. But zero experience? No. For example, Equifax chief security officer Susan Mauldin was a college music major, and zero security certifications or training. The largest breach of credit financial records of half of Americans happened for very simple reasons under her watch. Equifax’s breach was caused by a known and critical vulnerability that went unpatched for months. Addressing critical vulnerabilities is basic security hygiene. Why did they hire someone with a music degree and no security training? What would be their motivation to hire someone like this? I have a degree in computer science and a lot of programming and systems experience, but zero specialty in security and would never even think of becoming a security manager. Because I have no detailed knowledge of it on a super granular level. In the same way, your buddy should not be any type of IT manager. Well, anyways, she was an IT manager with zero background and that is what happened, so no, your buddy needs to get some training and certifications and work experience in IT first.