What inspired you to become an NCPC instructor?
I was drawn to the NCPC because it focuses on practical cybersecurity preparedness, not just theory or compliance checklists. Throughout my career, both in uniform and in various civilian roles, I’ve seen firsthand how often cyber incidents succeed because people weren’t prepared; not because they lacked technology. I bring experience from cyber network defense operations, incident response, information operations (Information warfare), and several years of teaching and course management for military and academic audiences. That combination allows me to translate complex cyber concepts into realistic, usable guidance that people can apply when it matters most.
How do you tailor your instruction to meet the needs of diverse audiences, such as technical or non-technical personnel?
I start by understanding the audience’s mission, not their job titles. Technical audiences usually want to know the “how,” while non-technical audiences need the “why” and the “what do I do next.” I’ve taught courses where I had both network defenders and senior leaders in the same room, and you have to constantly adjust your framing, sometimes mid-sentence. In those situations, I rely heavily on real-world examples, analogies and decision-focused scenarios. If people understand the risk and the consequence, the technical details make more sense, even if they’ve never touched a keyboard.
What feedback have you received from participants that highlights the value or effectiveness of NCPC courses?
One of the most consistent pieces of feedback I have read and heard about is that participants appreciate how practical and relatable the training is. People have often said things like, “This is the first cyber course I’ve taken that I can actually explain to my coworkers or family.” Other things I saw and heard them say are that the training helped them recognize phishing attempts, improve internal processes and change how they approach risk because of what they learned at the NCPC courses they attended. That kind of feedback is especially meaningful, because it shows this training really works and stuck with them.
What do you find most rewarding about teaching cybersecurity preparedness through NCPC?
What I find most rewarding about teaching cybersecurity preparedness is empowering people who don’t see themselves as “cyber people.” When someone realizes that cybersecurity isn’t just an IT problem and that their decisions matter, that’s a win. I also enjoy being able to teach complex concepts to people in such a way that they understand it and are able to retain that information so that when they find themselves in a high-pressure incident, they will react calmly and effectively.
How do you stay current with evolving cyber threats and integrate that knowledge into your instruction?
Staying current is part of the job. I follow open-source threat reporting, government advisories and professional networks, and I stay engaged with both academic and operational communities. I also learn a lot from students and peers. When something new emerges, whether it’s a tactic, trend or technology, I focus on how it changes risk and behavior, not just technical details. Then I integrate that new knowledge into my instruction and the courses, keeping them current and relevant.
How does the NCPC prepare participants for real-world cybersecurity concerns?
The NCPC prepares participants for real-world cybersecurity concerns by focusing on realistic threats, common failure points, and practical responses. The training emphasizes recognizing warning signs, understanding consequences, and knowing what actions to take, or not take, under pressure. That mirrors real-world cyber incidents, which are rarely neat or purely technical. By building awareness, confidence, and sound decision-making, I can see how NCPC helps participants respond more effectively when real cyber issues arise.
Shawn Lane is an instructor and course developer with Norwich University Applied Research Institutes (NUARI).