Security and AV is a rapidly moving and volatile environment. You have to research it yourself, by subscribing to the various AV and security providers alerts. Also various bodies such as CERT, CIAC etc.

Peer to Peer communication is also an essential facet of practical security and AV work. You need to subscribe to the appropriate newsgroups, and "network" with people.

I am not "knocking" formal qualifications, I have a degree myself...it shows you can "get your head down and learn"...........but whatever you learn is going to be out of date...just check the publication dates of the textbooks?

Formal education can teach you basic principles (VERY IMPORTANT) and the workings of your IT environment, but practical AV and security is a hands on day to day activity that is down to you.

cheers!