Аннотация
The article focuses on improving cybersecurity in civil aviation by introducing a hybrid model that assesses cybersecurity service employees' competencies through gamification and fuzzy logic. The goal of this study is to develop a hybrid model for assessing personnel competencies in the cyber and information security services of civil aviation enterprises. The tasks to be solved are: to analyze the problem of aging knowledge and competencies of specialists; to develop a hybrid model for assessing competencies; to justify the model's feasibility through experimental testing at an airline; and to propose a taxonomy for assessing and certifying personnel. The following methods were used: fuzzy logic with linguistic variables and membership functions; gamification with interactive scenarios simulating cyber incidents; modeling using defuzzification rules and procedures; and experimental testing at an airline. The following results were obtained: the experiment conducted at airlines in the Republic of Kazakhstan proved the feasibility of this approach. Gamified scenarios simulating real cyber incidents allow you to interactively assess the current level of personnel competency without risk to real systems. Artificial intelligence provides deep data analysis, identifies individual and systemic knowledge gaps, and offers personalized learning paths. This testing technology not only allows accurate measurement of personnel's skills and competencies but also enables timely measures to improve their qualifications. The study substantiated the need to develop a taxonomy for building a portfolio of personnel skills and competencies in aviation enterprises’ cybersecurity services. Such a taxonomy will serve as the basis for establishing standardized norms and criteria for assessing personnel’s skills and competencies, enabling objective assessment and certification of cybersecurity specialists. In addition, its use will allow for the timely identification of the need for advanced personnel training, which is critically important in the context of an intensively changing cyber landscape. Conclusions. The scientific novelty of the results obtained is as follows: 1) a hybrid model for assessing the competencies of cybersecurity specialists in aviation enterprises has been developed, integrated with fuzzy logic and gamification elements, which ensures a realistic assessment of skills in a dynamic cyberspace; 2) a methodology for forming a taxonomy of skills and competencies has been substantiated, which will become the basis for forming standardized norms and criteria for assessment (certification); 3) the model’s effectiveness in identifying knowledge gaps and making it possible to form high-quality training trajectories for specialists has been confirmed by experimental testing of the model at an aviation enterprise.