I think that the problem is twofold:

1) Graduates with Computer Science degrees have little understanding of applying what they have been taught in the real world.

2) Non-Computer Science graduates (both non-graduates and graduates of non-computing degrees) never learn the theory.

For the first issue, I have recently been discussing graduates becoming involved in an open source project to assist in code maintenance activities such as analysing faults, debugging and dealing with other peoples code (or ones own months later). The general consensus was that undergraduates would probably get the best experience on an internal, controlled project as opposed to a live, open one as otherwise we are likely to see another Heartbleed and/or tarnished reputations for either the educational institute and/or the student before their career has even started. That would be additional and unnecessary pressure.

The second issue requires encouragement and incentives for those without the training to do this. In the UK we have Continuous Professional Development (CPD). It may be called the same elsewhere and probably did originate elsewhere. This requires the acknowledgement that this is an area for an individual to develop. There are FREE university modules available now so cost of training is not an excuse. It is up to individuals and their employers to agree a shared commitment towards this.

PS Koen rocks!!!