When to call us

Emails in your suppliers' names are reaching staffConvincing enough that you cannot leave the judgement to each person.
New and transferred staff keep arrivingYou want a standard onboarding session.
A customer or head office requires trainingYou need a record of delivery and the results.
Nobody reports suspicious mailStaff are unsure whether to report, or afraid of being blamed.
Management has not decided who does what in an incidentWho decides, who is called, what is disclosed.
Mixed Japanese and English staffThe same content in both languages on the same day.

What is included

  • Staff training (60 to 90 minutes):Real Japanese cases (Microsoft 365 takeovers, bank-detail fraud, ransomware), how to spot them, how to report, and what happens after a report.
  • Phishing simulation:Emails modelled on your real business, measuring open, click, credential entry and report rates. Results are aggregated by department; individuals are not identified.
  • IT staff session:Reading Microsoft 365 audit logs, first steps after an account takeover, log preservation.
  • Management tabletop (90 minutes):A ransomware or data breach scenario walked through on paper: decisions, contacts, disclosure.
  • Onboarding material:Video or slides for reuse with every new hire.

No blame. A simulation that names and corrects the people who clicked ends reporting. CS2 simulations praise the reporters and track the number and speed of reports.

How an engagement runs

  1. InterviewIndustry, supplier communication patterns and suspicious mail you have already received, used to tailor the content.
  2. TrainingOnline or on site; the recording can be reused internally.
  3. SimulationA few weeks after training. Content agreed with IT before sending.
  4. ResultsOpen, click, entry and report rates by department, with recommendations.
  5. RepeatAt least twice a year; from the second round we report the trend.

Deliverables

  • Training material and recording in English, Japanese or both
  • Simulation report by department, no individuals identified
  • One-page "if you receive a suspicious email" guide for staff
  • Tabletop record and the list of decisions management needs to make
  • Delivery report for customers or head office where needed

Indicative pricing

Starting pointFrom about JPY 350,000Indicative for one training session and one simulation. The price depends on headcount, languages, number of sessions and whether a management tabletop is included. Annual programmes with two or more rounds are quoted separately.

Frequently asked questions

What does it cost?

One training session and one simulation start at about JPY 350,000, depending on headcount, languages, number of sessions and whether a management tabletop is included.

Will staff resent the simulation?

We recommend telling everyone in advance that simulations happen and that nobody is identified. Results are shared by department and reporters are recognised.

Can English-speaking staff get the same training?

Yes. The same content is delivered in English and Japanese, on the same day if you like, with material in both.

Can we book training alone, or a simulation alone?

Yes, although a simulation after training is what shows whether the training stuck.

How often?

Training at least once a year and at onboarding; simulations at least twice a year. Tactics change, so the content is refreshed every time.

What happens in the management tabletop?

A ransomware or data breach scenario: who decides what in the first 24 hours, who is contacted, what is disclosed. You leave with a list of decisions to make before it happens.

Start by showing us the suspicious emails you already receive.

We will propose the training and simulation around what is actually reaching your staff.

Contact