×

RCC CyberPulse 2025: Regional Stakeholder Join Forces in Cybersecurity

02.07.2025

Image for RCC CyberPulse 2025: Regional Stakeholder Join Forces in Cybersecurity

The High-Level Western Balkans Cybersecurity Conference – CyberPulse 2025: Tracking Progress, Building Resilience, Driving Change – gathered government representatives, EU institutions, regional organizations, cybersecurity experts and private sector leaders to address the growing cyber threat landscape in the Western Balkans.

CyberPulse 2025 focused on three priorities:

  • addressing current gaps in regional cyber capacities,
  • exploring the role of emerging technologies, and
  • operationalising joint initiatives and partnerships.

Opening Remarks

The conference opened with high-level messages of commitment to regional cyber resilience:

  • Amer Kapetanović, Secretary General of the RCC, highlighted the sharp rise in cyber incidents and stressed that trust, political will and coordinated regional action are the strongest “firewall” against threats. He also announced the development of the new regional cybersecurity needs database.
  • Filip Ivanović, Deputy Prime Minister of Montenegro for Foreign and European Affairs, emphasized Montenegro’s adoption of European cybersecurity standards and its vision of a secure, resilient digital future as part of EU integration.
  • Michael Docherty, speaking on behalf of the European Commission Delegation, reaffirmed EU support for the region through initiatives with ENISA and the Council of Europe, underlining that cybersecurity is now a central element of the EU Growth Plan for the Western Balkans.
  • Gilles Schwoerer, Head of WB3C, noted that while digital transformation offers many opportunities, it also expands the attack surface, underscoring the urgent need for secure digital pathways and collective resilience.

Conference Panels

  • High-Level Panel: Stronger Connectivity, Smarter Security, Resilient Future (moderated by Danijela Gačević, Head of the Programme Department, RCC)
    Senior government representatives from the region exchanged views on national priorities, institutional capacities, and EU integration in the field of cybersecurity.
    • Governments stressed the shortage of cybersecurity professionals as a critical challenge.
    • Kosovo*’s representative emphasized dependence on external consultants and the need to train public servants internally.
    • Montenegro focused on intersectoral cooperation and the role of NATO and EU support.
    • North Macedonia presented its new Ministry for Digital Transformation and its national cybersecurity strategy.

      Panelists:

    • Bardhyl Dobra – Deputy Minister of Internal Affairs, Pristina
    • Naim Gjokaj – State Secretary, Ministry of Public Administration, Podgorica
    • Radoslav Nastasijevikj Vardjiski – Deputy Minister for Digital Transformation, Skopje

       

  • Navigating Cyber Threats in the Western Balkans: The Evolving Role of AI and Emerging Technologies (moderated by Mirza Jamaković, Prosecutor's Office Sarajevo)
    Experts from Europol, law enforcement, and the private sector discussed the opportunities and risks of AI, from forensic tools to the misuse of generative AI by organized crime groups.
    • Europol described using machine learning to analyze millions of data points in criminal investigations.
    • Concerns raised about organized crime groups developing their own AI tools, including large language models, for cybercrime.
    • Calls for explainable and transparent AI outcomes in cybersecurity decision-making.
    • Oracle warned against uploading confidential data into public AI tools, stressing regulatory gaps.

      Panelists:

    • Emmanuel Kessler – Europol
    • Jelena Zelenović Matone – WomenCyberForce / Women4Cyber
    • Nenad Bogunović – Cybercrime Unit, Belgrade
    • Amar Dedović – Oracle

       

  • Empowering Talent: Skill-Building for the Future in the Western Balkans (moderated by Andreja Mihailović, Women4Cyber Montenegro)
    The session focused on education, workforce shortages, women’s participation in cybersecurity, and ways to redirect youth talent from informal digital activities to formal opportunities.
    • Highlighted that women’s participation in cybersecurity remains below 20% in the Western Balkans.
    • Croatia shared progress from 30% to 52% female participation in the UN Cybersecurity Working Group between 2019 and 2024.
    • Albania’s Cybersecurity Agency argued for education reform starting at primary school.
    • Open Society Foundation raised concerns about youth involvement in grey/illegal digital activities, calling for redirection into formal sectors.

      Panelists:

    • Tamara Tafra – Deputy Minister of Foreign and European Affairs, Zagreb
    • Igli Tafa – Director, National Cybersecurity Agency, Tirana
    • Andi Dobrushi – Open Society Foundation
    • Fabio di Franco – ENISA

       

  • Integrating Experience and Strategy: A Multisector Dialogue on SOC Advancement (moderated by Vanja Madžgalj, WB3C)
    Panelists shared good practices for building and operating Security Operations Centres, stressing the importance of policy alignment, inter-sectoral cooperation and trust-building between public and private actors.
  • Albania’s national experience showed that the 2022 cyberattack became a catalyst for building SOC capacity and adopting “zero trust” and defense-in-depth strategies.
  • Differences between public and private sector approaches to threat intelligence were emphasized, with trust and data-sharing seen as barriers for public institutions.
  • North Macedonia introduced a new law placing the Ministry for Digital Transformation as the central cybersecurity authority.

    Panelists:

    • Franc Zyliftari – Head of Incident Response Team, Tirana
    • Philippe Gillet – Gatewatcher, Paris
    • Aleksandar Acev – Cyber Balkans, Skopje

       

  • Sectors United Against Cyber Threats: Building Bridges Across Sectors (Milan Sekuloski, e-Governance Academy, Tallinn)
    This discussion brought together public institutions, civil society, academia, and the private sector, highlighting how multi-stakeholder collaboration is essential to strengthening regional resilience.
    • Pristina shared good practices in bringing all relevant actors together regularly on critical infrastructure protection.
    • Civil society organizations were recognized as important but vulnerable actors requiring targeted cyber hygiene tools and support.
    • SMEs were highlighted as particularly exposed, requiring systemic support from the public sector.
    • The EBRD linked its investment strategy to cybersecurity, showing that infrastructure projects cannot be sustainable without integrated cyber risk management.

      Panelists:

    • Lulezon Jagxhiu – Prime Minister’s Cabinet, Pristina
    • Predrag Puharić – Cybersecurity Centre of Excellence, Sarajevo
    • Ivona Dabetić – NGO Secure, Podgorica
    • Roy Yarom – European Bank for Reconstruction and Development (EBRD)

The conference concluded that cybersecurity in the Western Balkans can no longer be treated as a purely technical issue but must be recognized as a strategic priority, requiring long-term cooperation, sustained investment and coordinated regional action.


WB3C in the International Spotlight: Cyber Resilience at the Heart of Regional Security and European Integration

The Western Balkans Cyber Capacity Centre has attracted growing attention from senior European officials, government delegations, defence representatives and international media during a particularly active period of diplomatic engagement in Montenegro. Several visits took place on the margins of the Berlin Process, reflecting the increasing importance of cybersecurity and institutional resilience within the wider European security and integration agenda.

As cyberattacks become more sophisticated and increasingly target essential services, public institutions and critical infrastructure, the ability of Western Balkan countries to prevent, withstand and respond to cyber incidents has become a matter of strategic importance. These challenges extend beyond national borders and require closer regional cooperation, stronger institutions and sustained investment in specialised skills.

For countries pursuing EU membership, cybersecurity is also an important dimension of alignment with European legislation, standards and security frameworks. Building the capacities required to implement the NIS2 Directive, the Critical Entities Resilience Directive and other relevant EU requirements is essential for the region's integration into Europe's common security and digital environment.

High-level visits during the Berlin Process

On 16 September, WB3C welcomed Marie-Pierre Vedrenne, French Minister Delegate, during her visit to Montenegro on the margins of the Berlin Process. The visit provided an opportunity to present the Centre's regional mandate and its contribution to strengthening cybersecurity, combating cybercrime and supporting cyberdiplomacy across the Western Balkans.

On 25 September, the Centre received representatives of EU Member States, providing further opportunities to present its work and discuss the contribution of international cooperation to regional cyber resilience.

A further high-level visit followed on 2 October, when the Foreign Ministers of Austria, Czechia and Slovakia visited WB3C. The engagement placed the Centre's work within the broader context of European security, regional stability and the Western Balkans' EU perspective.

These visits offered opportunities to demonstrate how the Centre translates international cooperation into practical support for Western Balkan institutions, bringing together European expertise, regional priorities and targeted professional training.

European media engagement

On 13 October, WB3C welcomed a delegation of European media representatives in cooperation with the European Commission's Directorate-General for Enlargement and Eastern Neighbourhood (DG ENEST) and the EU Delegation to Montenegro.

The visit focused on the Centre's role in strengthening regional cyber resilience and addressing emerging security challenges, including hybrid threats, foreign information manipulation and interference (FIMI), and disinformation.

Discussions highlighted the links between cybersecurity, institutional resilience and democratic stability, particularly in an environment where information manipulation, cybercrime and cyberattacks can undermine public trust and the functioning of essential services.

Regional defence and security cooperation

The Centre's international engagement also extends to the defence and security community.

On 28 October, WB3C is scheduled to welcome delegations participating in the Framework Nations Concept cooperation initiative led by Italy (FNC-ITA), in cooperation with Montenegro's Ministry of Defence. The visit will bring together representatives of participating NATO member and partner countries from South-East Europe, providing an opportunity to exchange perspectives on cyber resilience and regional security cooperation.

During this period, WB3C representatives were invited to Zagreb to meet with RACVIAC – Centre for Security Cooperation, a regional intergovernmental organisation dedicated to strengthening security dialogue, institutional capacities and cooperation in South-East Europe, including in cybersecurity and countering transnational threats, to explore opportunities for closer cooperation in addressing shared regional security challenges.

This engagement reflects the importance of cybersecurity across civilian and defence sectors, where the protection of critical infrastructure, continuity of essential services and effective institutional coordination are closely interconnected.

Building resilience is a strategic investment in the region's European future. Through its training programmes, institutional partnerships and regional cooperation mechanisms, WB3C will continue to contribute to a more secure and resilient Western Balkans, strengthening both regional stability and Europe's collective cyber resilience.

Infrastructure and Cloud Security

Today, WB3C started a four-day technical training programme on Infrastructure and Cloud Security aimed at cybersecurity professionals from the region.

As public institutions and critical infrastructure operators increasingly rely on interconnected networks and cloud-based services, securing these environments has become essential to maintaining the continuity and reliability of vital services. This requires not only appropriate security policies and technical safeguards, but also professionals capable of identifying vulnerabilities, preventing intrusions and responding effectively when incidents occur.

Today, we have security administrators, SOC analysts, critical infrastructure IT specialists and public sector network engineers in the classroom led by Ljuban Petrovic, Cybersecurity Manager at Siemens, MSc|CISSP|GCIH|GPEN|GRID|CFCE|CCO|CCPA.

 

The training follows an intensive, hands-on approach, allowing participants to work in simulated network and cloud environments. Over four days, they will address secure systems administration, network and infrastructure protection, vulnerability assessment and penetration testing, cloud security and incident response.

Particular emphasis is placed on practical exercises in which participants identify security weaknesses, implement protective measures and respond to simulated cyberattacks. Working both individually and in teams, they will apply techniques and tools directly relevant to their responsibilities within their home institutions.

By combining technical skills development with opportunities for professional exchange, WB3C continues to support stronger operational capabilities and closer cooperation among cybersecurity practitioners across the region.

NIS2 Strategic Leadership and Cyber Risk Management in the Western Balkans

Today, WB3C welcomed representatives of national cybersecurity authorities from the region for a four-day programme on NIS2 Strategic Leadership and Cyber Risk Management, organised in partnership with the The World Bank and with the involvement of the European Union Agency for Cybersecurity (ENISA).

The programme addresses a central challenge facing the region: how to translate the requirements of the EU's NIS2 Directive into effective national cybersecurity governance, particularly when it comes to protecting critical infrastructure and essential services.

Welcoming the participants, our Programme Director Gilles Schwoerer highlighted the importance of strengthening institutional capacities and regional cooperation in responding to increasingly complex cyber threats.

Ghislain de  Salins (WB) and Tom Lenters (ENISA) contributed to bringing together the programme, combining expertise in institutional governance, cybersecurity risk management and European regulatory practices.

 

Over the next four days, participants will examine national cybersecurity frameworks, risk-based supervision, incident reporting and crisis management. Practical workshops and a strategic tabletop exercise will provide opportunities to apply these concepts to realistic scenarios, including cyber incidents with cross-border implications.

 

For the Western Balkans, alignment with NIS2 is both an important element of the EU accession process and an opportunity to strengthen national resilience. With essential services and infrastructure increasingly interconnected, effective cybersecurity governance also depends on cooperation across borders. 

The training is led by Konstantinos Moulinos, ENISA expert, Ilmar Toom of the Riigi Infosüsteemi Amet // Estonian Information System Authority (NCSC-EE) and Mladen Bukilic, CISO and SOC Manager of Čikom.

The programme forms part of the ongoing cooperation between WB3C and the World Bank, launched in May 2026, to support cybersecurity leadership and institutional capacity development across the region.


Copyright © WB3C

Disclaimer: Translations of the original content written in English into other languages are AI generated by Weglot.