Cybersecurity Learning Hub — From Knowledge to Practice
Cyber Hiroshima

Connecting technical understanding with management proposals Lessons from the CyberSPEX application announcement

この記事を日本語で読む

Cybersecurity managers need to do more than understand safeguards. They also need to plan responsibilities and budgets, and explain proposals to senior management. IPA has announced applications for its FY2026 CyberSPEX programme. We consider how exercises in planning and decision-making could inform the learning support Cyber Hiroshima is working towards.

Distinguishing application dates from delivery dates

IPA published the announcement on 13 October 2026; applications opened on 14 October. The four-day programme is scheduled for 14, 15, 21 and 22 January 2027 in Tokyo. It is intended for managers and others in organisations involved in social infrastructure and industrial foundations, and includes planning documents and a strategic proposal simulation. The fee is ¥200,000 including tax, with 20 places. Applications close at 17:00 JST on 11 December, or earlier if full. Check IPA’s official information for availability and current conditions.

Explaining a proposal is also a practical skill

The following is this article’s educational interpretation. Turning the results of a technical exercise into operational improvement requires an explanation of which risks take priority, who is responsible and why expenditure is justified. A task involving a fictional organisation and a limited budget can help learners reflect on the relationship between technical knowledge and management decisions. Making assumptions and unknowns explicit matters more than prescribing a single correct answer.

Adding reflection between knowledge and practice

Cyber Hiroshima is considering how to connect a CyBOK knowledge foundation and practice with SudoRange through AI-assisted learning. A possible next step is a reflection task that asks learners to explain the observed facts, risks, safeguards, costs and unresolved issues. This is not an official mapping between CyberSPEX and CyBOK, or an announcement of a partnership with IPA. Planning workshops and operational exercises in a cyber range serve different learning purposes.

Asking AI to examine explanations

When evaluating learning support using Robutler or other tools, one option is to ask AI to identify missing evidence and gaps in reasoning, rather than decide the proposal’s conclusion. For example, it could check whether responsibilities and deadlines are stated, cost assumptions are clear and deferred risks are explained. Assessment should consider whether learners can answer follow-up questions themselves, as well as the fluency of their writing. This is a proposal for future evaluation, rather than an available feature.


Next to read

About Cyber Hiroshima


References

IPA CyberSPEX 2026年度 東京開催 公開2026年10月13日