Effective cybersecurity education and training are important for preparing current and future IT professionals to properly and swiftly deal withreal-life security incidents. In this paper we use the main cybersecurity training programs in Japan as a detailed case study for analyzing the best practices and methodologies in the field of cybersecurity education and training. Based on this analysis and our first-hand experience with some of the said training programs, we then define the requirements that must be met in order to ensure effective cybersecurity education and training.Finally, we discuss our research and development endeavor towards creating a framework that meets these requirements, so as to facilitate effectiveeducation and training in cybersecurity.