Cybersecurity managers need to do more than understand safeguards. They also need to plan responsibilities and budgets, and explain proposals to senior management. IPA has announced applications for its FY2026 CyberSPEX programme. We consider how exercises in planning and decision-making could inform the learning support Cyber Hiroshima is working towards.
IPA published the announcement on 13 October 2026; applications opened on 14 October. The four-day programme is scheduled for 14, 15, 21 and 22 January 2027 in Tokyo. It is intended for managers and others in organisations involved in social infrastructure and industrial foundations, and includes planning documents and a strategic proposal simulation. The fee is ¥200,000 including tax, with 20 places. Applications close at 17:00 JST on 11 December, or earlier if full. Check IPA’s official information for availability and current conditions.
The following is this article’s educational interpretation. Turning the results of a technical exercise into operational improvement requires an explanation of which risks take priority, who is responsible and why expenditure is justified. A task involving a fictional organisation and a limited budget can help learners reflect on the relationship between technical knowledge and management decisions. Making assumptions and unknowns explicit matters more than prescribing a single correct answer.
Cyber Hiroshima is considering how to connect a CyBOK knowledge foundation and practice with SudoRange through AI-assisted learning. A possible next step is a reflection task that asks learners to explain the observed facts, risks, safeguards, costs and unresolved issues. This is not an official mapping between CyberSPEX and CyBOK, or an announcement of a partnership with IPA. Planning workshops and operational exercises in a cyber range serve different learning purposes.
When evaluating learning support using Robutler or other tools, one option is to ask AI to identify missing evidence and gaps in reasoning, rather than decide the proposal’s conclusion. For example, it could check whether responsibilities and deadlines are stated, cost assumptions are clear and deferred risks are explained. Assessment should consider whether learners can answer follow-up questions themselves, as well as the fluency of their writing. This is a proposal for future evaluation, rather than an available feature.