That first question, "Have you fulfilled a CPE offered by (ISC)²?" probably would be better written, "Was your CPE submitted by somebody else on your behalf?"
Over the past few years, it does seem that the IT industry has forgotten many of the user-experience lessons that we have learned. For example, labeling buttons with descriptive words, such as "Next", "Submit CPE", and "Save as draft" generally makes more sense than "Save", "Yes" and "OK".
Also forgotten is the art of user-testing. One can learn much about how well their design works observing a few users interacting with it to see where they struggle. Without this, things tend to drift towards form over function, as we have seen in the minimalistic vs skeuomorphic design trends.
I.T. has realized that Security is a speciality that requires training, dedication and staffing, but UX is often still in the infancy phase -- "the developers can do it themselves".
