Experts' Validation of the Fundamental Cybersecurity Competency Index (FCCI) Using a Commercial Cyber Range through Human-Generative Artificial Intelligence (GenAI) Teaming

Saved in:
Bibliographic Details
Title: Experts' Validation of the Fundamental Cybersecurity Competency Index (FCCI) Using a Commercial Cyber Range through Human-Generative Artificial Intelligence (GenAI) Teaming
Language: English
Authors: Dariusz Witko (ORCID 0009-0000-6303-3991), Yair Levy (ORCID 0000-0002-8994-6497), Catherine Neubauer (ORCID 0000-0002-6686-3576), Gregory Simco (ORCID 0000-0001-5760-6933), Laurie P. Dringus (ORCID 0000-0002-9834-6098), Melissa Carlton (ORCID 0000-0001-9600-9285)
Source: Journal of Cybersecurity Education, Research and Practice. 2025 2025(1).
Availability: Kennesaw State University. 1000 Chastain Road, Kennesaw, Georgia 30144. Tel: 470-578-3568; e-mail: cybersec@kennesaw.edu; Web site: https://digitalcommons.kennesaw.edu/jcerp/
Peer Reviewed: Y
Page Count: 11
Publication Date: 2025
Sponsoring Agency: US Army Research Laboratory (ARL)
Contract Number: W911NF2420009
Document Type: Journal Articles
Reports - Research
Tests/Questionnaires
Descriptors: Computer Security, Competence, Artificial Intelligence, Expertise, Validity, Job Skills, Man Machine Systems
ISSN: 2472-2707
Abstract: The increasing volume of cyber threats, combined with a critical shortage of skilled professionals and rising burnout among practitioners, highlights the urgent need for innovative solutions in cybersecurity operations. Generative Artificial Intelligence (GenAI) offers promising potential to augment human analysts in cybersecurity, but its integration requires rigorous validation of the fundamental competencies that enable effective collaboration of human-GenAI teams. This research study employed a mixed-methods research project designed to evaluate human-GenAI teams, emphasizing the role of expert consensus in shaping the experimental assessment of the Fundamental Cybersecurity Competency Index (FCCI) in a commercial cyber range. We engaged 20 Subject Matter Experts (SMEs) in a panel to validate the fundamental cybersecurity Knowledge, Skills, and Tasks (KSTs), which are the measures of competencies. The expert panel refined the cybersecurity scenarios and experimental procedures used in hands-on simulations, ensuring they align with current standards outlined in the United States (U.S.) Department of Defense (DoD) Cyber Workforce Framework (DCWF). Our findings indicated that 46 of 47 fundamental cybersecurity Knowledge, Skills, and Tasks (KSTs) were validated by the SMEs as essential components of the FCCI. The validated scenarios and experiments pave the way for future research on assessing cybersecurity competencies in a commercial cyber range with and without GenAI support (e.g., large language models such as ChatGPT). By establishing the baseline for competency assessment in this research, the SMEs' feedback contributed to advancing cybersecurity workforce development and provided critical insights for integrating GenAI into collaborative cybersecurity human-GenAI teaming operations.
Abstractor: As Provided
Entry Date: 2025
Accession Number: EJ1489647
Database: ERIC
Description
Abstract:The increasing volume of cyber threats, combined with a critical shortage of skilled professionals and rising burnout among practitioners, highlights the urgent need for innovative solutions in cybersecurity operations. Generative Artificial Intelligence (GenAI) offers promising potential to augment human analysts in cybersecurity, but its integration requires rigorous validation of the fundamental competencies that enable effective collaboration of human-GenAI teams. This research study employed a mixed-methods research project designed to evaluate human-GenAI teams, emphasizing the role of expert consensus in shaping the experimental assessment of the Fundamental Cybersecurity Competency Index (FCCI) in a commercial cyber range. We engaged 20 Subject Matter Experts (SMEs) in a panel to validate the fundamental cybersecurity Knowledge, Skills, and Tasks (KSTs), which are the measures of competencies. The expert panel refined the cybersecurity scenarios and experimental procedures used in hands-on simulations, ensuring they align with current standards outlined in the United States (U.S.) Department of Defense (DoD) Cyber Workforce Framework (DCWF). Our findings indicated that 46 of 47 fundamental cybersecurity Knowledge, Skills, and Tasks (KSTs) were validated by the SMEs as essential components of the FCCI. The validated scenarios and experiments pave the way for future research on assessing cybersecurity competencies in a commercial cyber range with and without GenAI support (e.g., large language models such as ChatGPT). By establishing the baseline for competency assessment in this research, the SMEs' feedback contributed to advancing cybersecurity workforce development and provided critical insights for integrating GenAI into collaborative cybersecurity human-GenAI teaming operations.
ISSN:2472-2707