×

Responsible State Behavior in Cyberspace – International Norms and the Role of the EU in Cyberdiplomacy

12.11.2024

Image for Responsible State Behavior in Cyberspace – International Norms and the Role of the EU in Cyberdiplomacy

The Western Balkans Cyber Capacity Centre (WB3C), in partnership with the Geneva Centre for Security Sector Governance (DCAF), will be hosting a three-day workshop titled "Responsible State Behavior in Cyberspace: International Norms and the Role of the EU in Cyberdiplomacy" from 12 to 14 November. This event brings together experts from across the region and the EU to explore critical aspects of cyberdiplomacy, focusing on international norms, the role of international law in cyberspace, and the European Union's efforts in fostering cyber cooperation.

Workshop Highlights:

  • Day 1: An in-depth exploration of the UN Framework on Responsible State Behavior in Cyberspace, including key components such as UN norms, international law, capacity building, and confidence-building measures.
  • Day 2: A detailed examination of the EU’s cyber ecosystem and its collaborative efforts with the Western Balkans to enhance regional cybersecurity cooperation.
  • Day 3: A hands-on tabletop exercise simulating international cooperation and national coordination in response to a cyber incident.

Why Cyberdiplomacy Matters

As cyber threats continue to evolve, the importance of diplomatic engagement to establish rules of behavior in cyberspace has never been more crucial. Cyberdiplomacy plays a key role in preventing cyber conflicts, promoting trust between nations and ensuring a stable and secure digital environment. The European Union, with its robust cyber ecosystem and diplomatic efforts, is at the forefront of shaping these international norms.

WB3C is actively contributing to these efforts by providing a platform for regional and international cooperation, training and capacity-building. By hosting workshops such as this, WB3C strengthens the ability of Western Balkans countries to engage in global cyberdiplomacy and contribute to the development of a secure and resilient cyberspace.


WB3C in the International Spotlight: Cyber Resilience at the Heart of Regional Security and European Integration

The Western Balkans Cyber Capacity Centre has attracted growing attention from senior European officials, government delegations, defence representatives and international media during a particularly active period of diplomatic engagement in Montenegro. Several visits took place on the margins of the Berlin Process, reflecting the increasing importance of cybersecurity and institutional resilience within the wider European security and integration agenda.

As cyberattacks become more sophisticated and increasingly target essential services, public institutions and critical infrastructure, the ability of Western Balkan countries to prevent, withstand and respond to cyber incidents has become a matter of strategic importance. These challenges extend beyond national borders and require closer regional cooperation, stronger institutions and sustained investment in specialised skills.

For countries pursuing EU membership, cybersecurity is also an important dimension of alignment with European legislation, standards and security frameworks. Building the capacities required to implement the NIS2 Directive, the Critical Entities Resilience Directive and other relevant EU requirements is essential for the region's integration into Europe's common security and digital environment.

High-level visits during the Berlin Process

On 16 September, WB3C welcomed Marie-Pierre Vedrenne, French Minister Delegate, during her visit to Montenegro on the margins of the Berlin Process. The visit provided an opportunity to present the Centre's regional mandate and its contribution to strengthening cybersecurity, combating cybercrime and supporting cyberdiplomacy across the Western Balkans.

On 25 September, the Centre received representatives of EU Member States, providing further opportunities to present its work and discuss the contribution of international cooperation to regional cyber resilience.

A further high-level visit followed on 2 October, when the Foreign Ministers of Austria, Czechia and Slovakia visited WB3C. The engagement placed the Centre's work within the broader context of European security, regional stability and the Western Balkans' EU perspective.

These visits offered opportunities to demonstrate how the Centre translates international cooperation into practical support for Western Balkan institutions, bringing together European expertise, regional priorities and targeted professional training.

European media engagement

On 13 October, WB3C welcomed a delegation of European media representatives in cooperation with the European Commission's Directorate-General for Enlargement and Eastern Neighbourhood (DG ENEST) and the EU Delegation to Montenegro.

The visit focused on the Centre's role in strengthening regional cyber resilience and addressing emerging security challenges, including hybrid threats, foreign information manipulation and interference (FIMI), and disinformation.

Discussions highlighted the links between cybersecurity, institutional resilience and democratic stability, particularly in an environment where information manipulation, cybercrime and cyberattacks can undermine public trust and the functioning of essential services.

Regional defence and security cooperation

The Centre's international engagement also extends to the defence and security community.

On 28 October, WB3C is scheduled to welcome delegations participating in the Framework Nations Concept cooperation initiative led by Italy (FNC-ITA), in cooperation with Montenegro's Ministry of Defence. The visit will bring together representatives of participating NATO member and partner countries from South-East Europe, providing an opportunity to exchange perspectives on cyber resilience and regional security cooperation.

During this period, WB3C representatives were invited to Zagreb to meet with RACVIAC – Centre for Security Cooperation, a regional intergovernmental organisation dedicated to strengthening security dialogue, institutional capacities and cooperation in South-East Europe, including in cybersecurity and countering transnational threats, to explore opportunities for closer cooperation in addressing shared regional security challenges.

This engagement reflects the importance of cybersecurity across civilian and defence sectors, where the protection of critical infrastructure, continuity of essential services and effective institutional coordination are closely interconnected.

Building resilience is a strategic investment in the region's European future. Through its training programmes, institutional partnerships and regional cooperation mechanisms, WB3C will continue to contribute to a more secure and resilient Western Balkans, strengthening both regional stability and Europe's collective cyber resilience.

Infrastructure and Cloud Security

Today, WB3C started a four-day technical training programme on Infrastructure and Cloud Security aimed at cybersecurity professionals from the region.

As public institutions and critical infrastructure operators increasingly rely on interconnected networks and cloud-based services, securing these environments has become essential to maintaining the continuity and reliability of vital services. This requires not only appropriate security policies and technical safeguards, but also professionals capable of identifying vulnerabilities, preventing intrusions and responding effectively when incidents occur.

Today, we have security administrators, SOC analysts, critical infrastructure IT specialists and public sector network engineers in the classroom led by Ljuban Petrovic, Cybersecurity Manager at Siemens, MSc|CISSP|GCIH|GPEN|GRID|CFCE|CCO|CCPA.

 

The training follows an intensive, hands-on approach, allowing participants to work in simulated network and cloud environments. Over four days, they will address secure systems administration, network and infrastructure protection, vulnerability assessment and penetration testing, cloud security and incident response.

Particular emphasis is placed on practical exercises in which participants identify security weaknesses, implement protective measures and respond to simulated cyberattacks. Working both individually and in teams, they will apply techniques and tools directly relevant to their responsibilities within their home institutions.

By combining technical skills development with opportunities for professional exchange, WB3C continues to support stronger operational capabilities and closer cooperation among cybersecurity practitioners across the region.

Strengthening Cybersecurity Leadership and Risk Management in the Western Balkans

Today, WB3C welcomed representatives of national cybersecurity authorities from the region for a four-day programme on NIS2 Strategic Leadership and Cyber Risk Management, organised in partnership with the The World Bank and with the involvement of the European Union Agency for Cybersecurity (ENISA).

The programme addresses a central challenge facing the region: how to translate the requirements of the EU's NIS2 Directive into effective national cybersecurity governance, particularly when it comes to protecting critical infrastructure and essential services.

Welcoming the participants, our Programme Director Gilles Schwoerer highlighted the importance of strengthening institutional capacities and regional cooperation in responding to increasingly complex cyber threats.

Ghislain de  Salins (WB) and Tom Lenters (ENISA) contributed to bringing together the programme, combining expertise in institutional governance, cybersecurity risk management and European regulatory practices.

 

Over the next four days, participants will examine national cybersecurity frameworks, risk-based supervision, incident reporting and crisis management. Practical workshops and a strategic tabletop exercise will provide opportunities to apply these concepts to realistic scenarios, including cyber incidents with cross-border implications.

 

For the Western Balkans, alignment with NIS2 is both an important element of the EU accession process and an opportunity to strengthen national resilience. With essential services and infrastructure increasingly interconnected, effective cybersecurity governance also depends on cooperation across borders. 

The training is led by Konstantinos Moulinos, ENISA expert, Ilmar Toom of the Riigi Infosüsteemi Amet // Estonian Information System Authority (NCSC-EE) and Mladen Bukilic, CISO and SOC Manager of Čikom.

The programme forms part of the ongoing cooperation between WB3C and the World Bank, launched in May 2026, to support cybersecurity leadership and institutional capacity development across the region.


Copyright © WB3C

Disclaimer: Translations of the original content written in English into other languages are AI generated by Weglot.