Cybersecurity Learning Hub — From Knowledge to Practice
Cyber Hiroshima

SCS Evaluation Guides — Connecting Training with Evidence of Organisational Measures

Separate document publication from scheme operation

Information checked: 2 November 2026. On 28 October, IPA published evaluation guides and related material for the SCS scheme’s three- and four-star levels. Designation and publication of training providers and other bodies are planned for late December 2026. The announcement does not establish that the scheme has begun operating or that particular providers have already been designated.

What training should assess

The following is an interpretation for Cyber Hiroshima. Alongside knowledge, tasks could assess whether learners can explain their organisation’s scope, responsibilities, measures and evidence. Keeping scheme requirements distinct from learning objectives would help avoid confusing course completion with implementation of organisational controls.

What to consider for the business

The proposed combination of a CyBOK knowledge base, SudoRange, AI assistance using Robutler or similar tools, Personalised Learning and a Private AI Appliance could be evaluated for connecting relevant knowledge with exercises. Completing an exercise does not establish an SCS rating. First check formal designation conditions and training scope, and consider how to prevent AI from issuing unsupported conformity judgements. This is a proposal for future evaluation, not a claim of Cyber Hiroshima’s designation, conformity or an implemented certification-support feature.


Next to read

Insights


References

IPA SCS評価制度ガイド等の公開 — 2026-10-28