The people this manager leads will also not be coders. Governments make virtually no software and any of that would be in a group that is still not connected to the group overseeing overall security.

If he has a windows machine he is familiar with what it does on Tuesdays.. From there its learning about CVEs, etc..