📖 Note: this article provides detailed information on how to read information on the Squad Skills tab within a squad profile. For more details on creating, managing, and editing squads, read this article.
Navigating the Squad Skills Tab
By default, when you click on a squad's profile, you will be directed to the Squad Skills tab. All skills and performance data demonstrated by current contributing members of the squad (i.e. Squad Managers and Squad Members) will display in the Squad Skills tab. Squad Viewers, as well as anyone with the 'Manage Users' permission in your organisation, will be able to view Squad Skills, but their own skills will not populate.
Understanding Sections in a Squad Skills Tab
The Squad Skills tab of a squad profile consists of two main sections - the Squad Cyber Skills Cortex [1], and the Squad Performance Triangle [2].
Reading a Squad Cyber Skills Cortex
A squad Cyber Skills Cortex is a diagram which maps out the cyber skills that contributing members of a squad have demonstrated in assigned competitions and assessments, against FifthDomain's Cynaptic Skills Adaptor Framework.
💡Remember: Only current Squad Managers and Squad Members' skill and performance data will appear in Squad Skills. The skill and performance data of previous squad members who have been removed will not show up.
What is the Cynaptic Skills Adaptor Framework?
The Cynaptic Skills Adaptor Framework maps all of the challenges on the FifthDomain platform to the following three components - Professional Specialties, Skills, and Proficiency levels. When a challenge mapped to a certain Professional Specialty and Skill is solved, the Cyber Skills Cortex will reflect demonstration of that Professional Specialty and Skill (at the set Proficiency level of the challenge).
What are Professional Specialties?
Professional Specialties are grouping units within the Cynaptic Skills Adaptor Framework which group all cyber skills demonstrable on the platform to overarching high-level cyber work specialisations. Each challenge on the platform is mapped to one of six Professional Specialties. A single challenge cannot be mapped to multiple Professional Specialties.
📖 A quick overview of each of the six Professional Specialties is below:
Intelligence: Cyber work which relates to the collection of information on the open or dark web outside of one's own network. This can include removing friendly information as an Operational Security (OPSEC) measure.
Penetration: Cyber work which relates to gaining unauthorised access and ability to make modification to a system.
Protection: Cyber work which relates to hardening one's own systems, identifying system configurations that protect from threats, and finding vulnerabilities.
Detection: Cyber work which relates to searching systems, sources, and information points to detect events, and identifying and moderating a comprehensive list of relevant observables.
Engineering: Cyber work which relates to building Security Operation Centre (SOC) technologies in order to make technologies better and faster.
Investigation: Cyber work which relates to the analysis of artefacts to derive Indicators of Compromise (IOCs), and reveal a full behaviours and capabilities.
What are Skills?
Each Professional Specialty is made up of Skills. Skills, as per the Cynaptic Skills Adaptor Framework, are a more granular set of abilities and knowledge related to a more specific area within cybersecurity. For example, the Log Analysis (LA) Skill is mapped to the Detection Professional Specialty.
There are currently approximately 30 Skills demonstrable on the platform, each mapped to one of the six Professional Specialties in the Cynaptic Skills Adaptor Framework.
Each challenge on the platform can be mapped to multiple Skills within the single Professional Specialty that it is mapped to. As an example, a Detection challenge may be mapped to the Log Analysis (LA) and Traffic Analysis (TA) Skills. However, it cannot be mapped to Skills outside of the Detection Professional Specialty.
What are Proficiency Levels?
Proficiency levels, per the Cynaptic Skills Adaptor Framework, determine level of ability in a particular Skill on the platform. There are five proficiency levels that can be demonstrated on the platform. These are modelled from the Dreyfus Model of Skills Acquisition, and are described below:
📖 A quick overview of the Cynaptic Skills Adaptor Framework Proficiency Levels (drawn from the Dreyfus Model of Skills Acquisition):
Level 1 (Novice): Demonstration of a basic but incomplete understanding of a concept, and a mechanistic approach requiring supervision for relevant work completion.
Level 2 (Advanced Beginner): Demonstration of a working understanding of a concept, and a perception of required actions as steps. Those at this level can an complete simpler tasks independently.
Level 3 (Competent): Demonstration of a good working and background understanding of a concept, with contextual awareness. Those at this level are capable of independent work to an acceptable standard.
Level 4 (Proficient): Demonstration of deep understanding of a concept, complete with a holistic view of required actions. Those at this level consistently achieve high standards when performing relevant work.
Level 5 (Expert): Demonstration of authoritative and/or deep holistic understanding of a concept, complete with intuitive handling of routine relevant matters. Those at this level excel effortlessly when performing relevant work.
Each challenge on the platform is assigned one of the five proficiency levels within the Cynaptic Skills Adaptor Framework. Solving a challenge which tests a particular Skill at a particular proficiency level indicates that the solver is able to demonstrate that Skill at that proficiency level.
What is the Cyber Skills Cortex?
The Cyber Skills Cortex is a cyber skills map that conceptually mimics the structure and shape of the human brain. The diagram shows which Skills a user has demonstrated, which Professional Specialties they align to, as well as which proficiency levels they have demonstrated Skills in.
The Cyber Skills Cortex is made up of six sections, with one section for each of the six Professional Specialties within the Cynaptic Adaptor Skills Framework.
Within the Cortex, each Professional Specialty has been subtly grouped in pairs according to similar functions.
The two Professional Specialties on the upper section [1] of the Cortex (Intelligence and Penetration) are grouped together on the Cortex as they both relate to interacting with external devices, systems, information sources to achieve an outcome.
The two Professional Specialties on the middle section [2] of the Cortex (Protection and Detection) are grouped together on the Cortex as they both relate to systems administration and operational work.
Finally, the two Professional Specialties on the lower section [3] of the Cortex (Engineering and Investigation) are grouped together on the Cortex as they both relate to assembling and disassembling systems, artefacts, and their accompanying information.
Each Professional Specialty section on the Cortex is made up of its relevant Skills. Each Skill is allocated a dedicated row on the Cortex (each row contains five squares), with one square for each of the five proficiency levels demonstrable for each Skill (these squares are called Skill-Proficiency squares). The row of numbers at the top of the Cortex diagram represent the five proficiency levels.
There are two sets of proficiency levels on the Cortex, each increasing in level from the central spine of the Cortex, and dividing the Cortex into a left and right section. The set of proficiency level numbers on the left of the Cortex span from the centre to the left, and the set on the right span from the centre to the right.
How do I read a squad's Cyber Skills Cortex?
A squad's Cyber Skills Cortex shows all the cyber skills members have demonstrated on the FifthDomain platform across all the assessments and competitions they have participated in.
Understanding Blank vs Filled Skill-Proficiency Squares
All Skill-Proficiency squares that a squad has not demonstrated a relevant challenge solve in will be blank on its Cortex diagram.
Once a challenge has been solved in an assessment or competition, the Skill-Proficiency square relevant to that challenge should be filled in with a number and colour.
The number in a Skill-Proficiency square shows how many unique challenges (mapped to that specific Skill-Proficiency square) squad members have solved. For instance, if squad members have solved 6 unique challenges mapped to the Log Analysis (LA) Skill at the Level 1 (Novice) proficiency level, the squad Skill-Proficiency square for Level 1 (Novice) Log Analysis (LA) will contain the number 6 inside it.
Note that solving the same challenge across different events will only count as one solve in the challenge's relevant Skill-Proficiency square (each unique challenge will only show up in the count once).
The intensity of the colour in a Skill-Proficiency square is also determined by the number of relevant challenge solves demonstrated. The darker the colour of a square, the more unique challenge solves relevant to that square a squad has solved. Each time a challenge is solved, its relevant Skill-Proficiency square will darken by one shade.
Activating Tooltips over Skill-Proficiency Squares
To view more details about a specific Skill-Proficiency square, simply hover your mouse over it. Upon hover over a square you will be able to see the following details:
Full Skill Name
Proficiency Level
Solve Contributions
Last Solve
In the example below, hovering over the square [1] for Geo-Intelligence (GI) at the Level 1 (Novice) level activates a tooltip [2] which spells out the full name of the Skill (i.e. expanding from the acronym "GI"), the proficiency level of the square being viewed, the solve contributions for Level 1 Geo-Intelligence challenges, and the date, month, and year of the most recent relevant solve.
Understanding Links between Proficiency Levels for a Skill
It is important to note that demonstrating a Skill at a higher proficiency level is considered in the logic of the Cortex diagram to also contribute to ability to demonstrate the same Skill at lower proficiency levels.
Therefore, solving a challenge at a proficiency level higher than Level 1 (Novice) will also contribute to increased colour shade intensity of relevant mapped Skills at lower proficiency levels.
For instance, solving a Level 3 (Competent) Intrusion Detection (ID) challenge will lead to the Level 3 (Competent) Intrusion Detection (ID) Skill-Proficiency square deepening by a shade. Simultaneously, solving this challenge will also cause the Level 1 (Novice) and Level 2 (Advanced Beginner) Intrusion Detection (ID) Skill-Proficiency squares to also deepen.
Due to this logic, Skill-Proficiency squares will always be visually displayed as darker from the central spine of the Cortex, to lighter towards the left and right sides.
Understanding Skills Degradation over Time
Skills naturally degrade over time without consistent application and/or practice - the logic of the Cyber Skills Cortex takes this into account. Skill-Proficiency squares will lose their number value and colour intensity after a certain period of time. The number of months until degradation of a Skill-Proficiency square occurs depends on proficiency.
📖 Note: The list below outlines how Skill-Proficiency square number value and colour shades will lose their intensity according to their proficiency levels:
Level 1 (Novice) squares will lose their number value by 1, and colour intensity by 1 shade every 2 months.
Level 2 (Advanced Beginner) squares will lose their number value by 1, and colour intensity by 1 shade every 3 months.
Level 3 (Competent) squares will lose their number value by 1, and colour intensity by 1 shade every 5 months.
Level 4 (Proficient) squares will lose their number value by 1, and colour intensity by 1 shade every 8 months.
Level 5 (Expert) squares will lose their number value by 1, and colour intensity by 1 shade every 13 months.
As an example, if a user has solved 5 x Log Analysis (LA) challenges at Level 5 (Expert), their Level 5 LA Skill-Proficiency square would have the number 5 inside it, and the square would be five shades deep. If the user had solved 2 of these challenges 13 months ago, and 3 of them less than 13 months ago, then, when the user next logs in (assuming they have not solved any further Level 5 LA challenges), their Level 5 LA Skill-Proficiency square would have the number 3 inside of it, and the square would be 3 shades deep.
This is because 13 months have passed since the user last solved the first 2 Level 5 LA challenges, so skills degradation will have taken place. After this degradation occurs, the only way for the user to go back to having the number 5 in their Level 5 LA square (as well as having the square be 5 shades deep) is for them to solve an additional 2 x LA Level 5 challenges, keeping skills degradation at bay.
Using the Cyber Skills Cortex Time Period Filter
The Time Period Filter section contains a slider that enables you to filter your view the Cyber Skills Cortex to a specific time period in the past.
The leftmost side [1] of the slider represents Week 1 of October 2023. This is when the FifthDomain Cynaptic Skills Adaptor Framework was released to the platform, and is the earliest week available for you to view skills demonstrated/attempted.
The rightmost side [2] of the slider represents the current week and year.
Interacting with a Squad Performance Triangle
The squad Performance Triangle visually maps out Success, Efficiency, and Speed scores of contributing members of a squad. The blue triangle on a squad Performance Triangle represents the average scores of current contributing members of the squad, whilst the grey triangle shows the average scores of affiliated users within your organisation.
You can also use the checkboxes to display individual triangles for specific members of the squad. Note that selecting and deselecting from the checkbox will not affect the blue triangle or the grey triangle.
Using the Performance Triangle Time Period Filter
You can use the time period slider above the Performance Triangle to filter your view of a squad Performance Triangle to a specific time period in the past. Simply drag the slider nodes to the period you wish to view.
