Responsible State Behavior in Cyberspace – International Norms and the Role of the EU in Cyberdiplomacy

12.11.2024

The Western Balkans Cyber Capacity Centre (WB3C), in partnership with the Geneva Centre for Security Sector Governance (DCAF), will be hosting a three-day workshop titled "Responsible State Behavior in Cyberspace: International Norms and the Role of the EU in Cyberdiplomacy" from 12 to 14 November. This event brings together experts from across the region and the EU to explore critical aspects of cyberdiplomacy, focusing on international norms, the role of international law in cyberspace, and the European Union's efforts in fostering cyber cooperation.

Workshop Highlights:

Day 1: An in-depth exploration of the UN Framework on Responsible State Behavior in Cyberspace, including key components such as UN norms, international law, capacity building, and confidence-building measures.
Day 2: A detailed examination of the EU’s cyber ecosystem and its collaborative efforts with the Western Balkans to enhance regional cybersecurity cooperation.
Day 3: A hands-on tabletop exercise simulating international cooperation and national coordination in response to a cyber incident.

Why Cyberdiplomacy Matters

As cyber threats continue to evolve, the importance of diplomatic engagement to establish rules of behavior in cyberspace has never been more crucial. Cyberdiplomacy plays a key role in preventing cyber conflicts, promoting trust between nations and ensuring a stable and secure digital environment. The European Union, with its robust cyber ecosystem and diplomatic efforts, is at the forefront of shaping these international norms.

WB3C is actively contributing to these efforts by providing a platform for regional and international cooperation, training and capacity-building. By hosting workshops such as this, WB3C strengthens the ability of Western Balkans countries to engage in global cyberdiplomacy and contribute to the development of a secure and resilient cyberspace.

Other news and events

Upcoming

Regional Conference on Foreign Information Manipulation and Interference and Disinformation

This regional conference intended for governments, media and civil society brings diverse perspectives on the growing hybrid threats of fake news, disinformation, manipulative and malign narratives that have the power to undermine democratic processes, trust in media and institutions and overal societal resilience and cohesion. Understanding, detecting, preventing, responding, debunking, investigating and prosecuting such manipulations will be the task of our panels, case studies and interactive exercises aimed at supporting governemnts and societies to tackle this challenge. The conference will feature 30 prominent speakers from the EU and the WB region from various departments, sectors and industries.

CTI for Critical Infrastructure Training Completed

Last week at WB3C, we wrapped up a four-day training on Cyber Threat Intelligence (CTI) focused on the energy sector and government infrastructure, led by Ljuban Petrovic.

Working with SOC, CSIRT and CERT teams from across the region, the training reinforced a simple point: CTI only matters when it informs decisions. When it helps prioritise. When it changes how teams prepare and respond.
The sectoral focus proved its value. Energy infrastructure comes with its own risk landscape, and the discussions reflected that reality—specific, operational, and directly relevant.

We are continuing this work in September, building on what started here.
Because strengthening resilience is not a one-off effort. It is something that develops over time, through practice, exchange, and trust.

What is Cyber Threat Intelligence (CTI) — and why does it matter?

Simply put, CTI is about turning information into insight, before a threat happens.

Not just collecting data on threats, but understanding who is behind them, how they operate, and what that means for your own systems.
Without that understanding, cybersecurity remains reactive. With it, organisations can anticipate, prioritise and respond with purpose.

Next week at WB3C, we will be running a four-day regional training on Cyber Threat Intelligence (CTI).
The training is designed for SOC, CSIRT and CERT teams, as well as IT professionals working within critical entities—specifically the energy sector. The choice is deliberate.

We are taking a sectoral approach to cybersecurity capacity building. Because threats are not abstract—they target specific systems, infrastructures and vulnerabilities. And the energy sector, as a backbone of economic and societal stability, requires tailored, operationally relevant skills that reflect its real risk landscape.
Over four days, participants will cover:
💡 understanding CTI in the context of critical infrastructure
💡 analysing threats and assessing their impact
💡 translating intelligence into actionable outputs

All week, we will be working closely with cybersecurity professionals from across the region’s energy sector—moving from concepts to application, and building capabilities that can directly support operational decision-making.
This is where CTI becomes operational. Protecting our energy infrastructure means protecting our economy, our security and our livelihood.

Image: Patrick https://lnkd.in/diYnZEgB