×

Governing Commercial Cyber Intrusion Capabilities (CCICs)

12.12.2025

Image for Governing Commercial Cyber Intrusion Capabilities (CCICs)

Today, December 12th, the Western Balkans Cyber Capacity Centre (WB3C) had the pleasure to host a training on Governing Commercial Cyber Intrusion Capabilities (CCICs). 
Organized by the Ministère des Affaires étrangères français and implemented by Expertise France in the framework of a European Commission subvention under the Multi-Partner Contribution Agreement (MPCA) on Cyber and Artificial Intelligence, this training gathered diverse actors involved in the cybersecurity landscape of the Western Balkans region such as diplomats, magistrates and law enforcement officers to discuss the growing challenge posed by the proliferation and irresponsible use of CCICs. 

Throughout the day, participants deep dived into the characteristics of the CCICs market and exchanged the need for strong governance frameworks:
1)     Assessing the threat and current trends in the global cyber intrusion market.
2)     Decoding the Pall Mall Process: ensuring government responsible use of commercial cyber intrusion capabilities.
3)     National CCIC governance frameworks: sharing of national experiences and identifying challenges and guidance.

Complementary to the other WB3C trainings, this workshop has contributed to advancing responsible governance of CCICs and strengthening accountability in the cyber domain. We thank the speakers Mahé Dersoir (Ministère des Affaires étrangères français), Robert Pellow (Foreign, Commonwealth and Development Office), James Shires and Lena Riecke for their precious contributions and expertise in the subject. 
Moreover, we thank all participants for their active engagement and constructive exchanges, which are essential to continuously improve our collective understanding and oversight of CCICs. 
We are grateful to our local partners Davide Meinero, PhD of the EU Delegation to Montenegro, Melanie Moffat of the British Embassy, Bertrand Baucher of the French Embassy and Gilles Schwoerer, Head of WB3C for supporting this initiative.


Combatting Disinformation and FIMI

A very productive meeting this morning with the Atlantic Council of Montenegro, led by Mr. Savo Kentera, President and CEO, together with his team Azra Karastanović and Draško Jabučanin. The Western Balkans Cyber Capacity Centre (WB3C) was represented by its Head Gilles Schwoerer and the team: Vanja Madzgalj MBE, Cyril C. and Yannick Casse. 

Building on our previous engagements, including the national Round Table on Critical Infrastructure and the 2BS Forum, WB3C is further strengthening this collaboration to address pressing regional challenges.

Our discussions highlighted significant common interests in two crucial areas: critical infrastructure resilience and countering disinformation and foreign information manipulation and interference (FIMI).

This prospective partnership reflects a shared commitment to strengthening regional security and societal resilience against interference and information manipulation. We look forward to developing concrete actions and contributing meaningfully to these important efforts.

Developing Future Cyber Talent Through Early Interventions in Schools

WB3C paid a visit to the Ministry of Education, Science and Innovation this week. We met with the State Secretary Calasan Tatjana to introduce WB3C’s work and share an overview of our plans for 2026, with a focus on education, young people and cooperation with universities. We talked about practical ways to support foundational awareness and cyber skills in schools and development of academic learning pathways such as micro-credentials and new degree programmes in cybersecurity and digital forensics in universities. 

The meeting was also a chance to update the Ministry on how WB3C is developing as an international organization and how our role in Montenegro and the region is growing, as well as to explore how we could work more closely in the future.
We appreciated the open and constructive exchange, and the shared understanding that investing early in digital skills and cyber awareness really matters.
Looking forward to continuing the conversation and building on this momentum.
 

Cyber Hygiene Training for Ministry of European Affairs of Montenegro

Today we start a short CyberHygiene training for colleagues at Montenegro’s Ministry of European Affairs. The training is led by WB3C-s in-house trainers Cyril C. and Yannick Casse.
Over the two days, we will work through the threats civil servants face most often — phishing, malware/ransomware and social engineering — and the practical habits that reduce risk without needing to advance technical skills such as: safer daily practices, data confidentiality and clear incident response basics.
A reminder worth repeating: cyber hygiene is organizational hygiene. Firewalls and policies help, but day-to-day resilience is built in small decisions made across the institution. Every civil servant counts.
A simple checklist that pays off:
⚠️ Pause before you click (especially “urgent” emails)
⚠️ Use strong passwords/passphrases + multi-factor authentication where available
⚠️ Keep devices and apps updated
⚠️ Report suspicious activity early—speed matters

Director Gilles Schwoerer greeted the participants by emphasizing that cybersecurity culture doesn’t start in the IT department, but it starts in each inbox. We are very pleased to welcome the behind-the-scenes force driving Montenegro's successful advancement towards the EU accession and to share that WB3C is expecting its first multi-year EU grant in March this year, aimed at supporting the region in meeting the requirements from the cyber agenda and strengthening its overall resilience, especially its critical infrastructure. We look forward to joining forces with ministries around the region in 2026 - a year expected to bring a dynamic plan of activities.


Copyright © WB3C

Disclaimer: Translations of the original content written in English into other languages are AI generated by Weglot.