Critical Infrastructure as an Instrument of Soft Power

04.09.2025

Western Balkans Cyber Capacity Centre (WB3C) took part in a round table on “Critical Infrastructure as an Instrument of Soft Power” yesterday, organized by the NATO Council of Montenegro at the Science and Technology Park. The event gathered experts from government, academia, the private sector, and civil society to reflect on the political and strategic importance of critical infrastructure (CI) in national security and stability.

Opening remarks by Dr. Savo Kentera (President, Atlantic Council of Montenegro) and Prof. Dr. Zoran Keković (Director, Centre for Critical Infrastructure Resilience, Atlantic Council of Montenegro) set the tone by underlining that CI is more than a technical matter – it is a cornerstone of sovereignty and a geopolitical issue.

Key themes included:
-New regulatory framework – Montenegro’s new Information Security Law, aligned with NIS2, mandates key and important CI entities to be ISO 27001 certified. Implementation of the new regulatory framework presents a big challenge and it requires a multi-disciplinary approach and involvement of all actors.
-Prof. Keković outlined three major risks for CI: 1) disruption of goods and services, 2) vulnerability due to state dependence on infrastructure, and 3) soft power – those who control CI can project their power in different ways.

Sectoral perspectives: Contributions came from @Dušan Polović (Ministry of Public Administration), Ljuban Tmušić (Directorate for Protection and Rescue, Ministry of Interior), Ivan Stanković (Čikom), Saša Šćekić (Central Bank of Montenegro).

Representing WB3C, Vanja Madzgalj MBE presented the Centre’s progress toward becoming an international organization and announced that our Centre is already working on capacity building for critical infrastructure with two focused courses in September, developed with Urad Vlade Republike Slovenije za informacijsko varnost (URSIV) on 9-11 Sep and International Telecommunication Union (ITU) on 22-26 Sep, both aimed at IT professionals in CI entities. Towards the end of the year, we will also offer a simulation exercises for CI and will extend our current cooperation with Čikom.

The round table also offered an opportunity to expand networks and explore future collaboration. Head of WB3C Gilles Schwoerer spoke with Savo Kentera about strong joint interest in strengthening CI in Montenegro and across the region. He also met with representatives of the health and maritime sectors who also constitute important pillars of CI. The conclusion of this discussion assured us that taking a sectoral approach is key to advancing critical infrastructure protection. By engaging each sector individually - energy, transport, finance, ICT, health and others, WB3C and its partners can address specific challenges, tailor training and exercises to operational realities, and ensure that solutions are both practical and sustainable.

Other news and events

Second Cybersecurity Diploma Prep Course Completed

Our second Prep Course cohort (December) led by Ljuban Petrovic just finished two intense weeks of learning, practice and assessment. These ICT students showed up with curiosity and ambition to build their future career in cybersecurity field.

Now, the bigger picture:

We’ve completed two Prep Course cohorts (November + December), with 18 students in total from the Western Balkans. They have already taken the final test, and the final selection will be made in January for the free Cybersecurity University Diploma starting in February 2026, delivered by WB3C in cooperation with the Université de Technologie de Troyes (UTT).

What makes this course unique is that it’s not “just another training.” It’s a real academic pathway that helps students build lasting qualifications and it sits alongside our year round short courses as part of a wider talent strategy.

What this diploma prepares students for (entry roles):
🛡️ Security Administrator
🧠 SOC Analyst (Junior)
🧪 Junior Penetration Tester
🔍 Digital Forensics Technician
✅ Cybersecurity Auditor (Junior)

What happens next:

📝 January: final selection
🎓 February 2026: one-year long diploma course starts

Our cooperation with universities is an investment in long-term cybersecurity workforce development and we have more plans for the future how to make these courses available to more people in the region.

Governing Commercial Cyber Intrusion Capabilities (CCICs)

Today, December 12th, the Western Balkans Cyber Capacity Centre (WB3C) had the pleasure to host a training on Governing Commercial Cyber Intrusion Capabilities (CCICs).
Organized by the Ministère des Affaires étrangères français and implemented by Expertise France in the framework of a European Commission subvention under the Multi-Partner Contribution Agreement (MPCA) on Cyber and Artificial Intelligence, this training gathered diverse actors involved in the cybersecurity landscape of the Western Balkans region such as diplomats, magistrates and law enforcement officers to discuss the growing challenge posed by the proliferation and irresponsible use of CCICs.

Throughout the day, participants deep dived into the characteristics of the CCICs market and exchanged the need for strong governance frameworks:
1)     Assessing the threat and current trends in the global cyber intrusion market.
2)     Decoding the Pall Mall Process: ensuring government responsible use of commercial cyber intrusion capabilities.
3)     National CCIC governance frameworks: sharing of national experiences and identifying challenges and guidance.

Complementary to the other WB3C trainings, this workshop has contributed to advancing responsible governance of CCICs and strengthening accountability in the cyber domain. We thank the speakers Mahé Dersoir (Ministère des Affaires étrangères français), Robert Pellow (Foreign, Commonwealth and Development Office), James Shires and Lena Riecke for their precious contributions and expertise in the subject.
Moreover, we thank all participants for their active engagement and constructive exchanges, which are essential to continuously improve our collective understanding and oversight of CCICs.
We are grateful to our local partners Davide Meinero, PhD of the EU Delegation to Montenegro, Melanie Moffat of the British Embassy, Bertrand Baucher of the French Embassy and Gilles Schwoerer, Head of WB3C for supporting this initiative.

Darkweb, Crypto and OSINT Training for Police Academy Montenegro

Today, we are starting the third cycle of our specialized cybercrime training for 11 new cadets from the Police Academy of Montenegro. This ongoing initiative is building essential skills in digital investigations from the ground up.

The instruction comes directly from the field: our trainers, Yannick Casse and Cyril C. C, are serving officers from the French Gendarmerie and National Police, bringing real-world expertise to every session.
For today's police, digital literacy is as essential as field training. Building skills in OSINT, dark web monitoring and investigation and crypto-tracing isn't about specialization, it's about core competency because effective investigation requires understanding that in today's world evidence is digital, money is crypto and crimes leave traces on servers instead of streets.

The cadets will immerse themselves in digital investigation techniques over the next three days, and to solidify their learning, will conclude with a practical test, assessing their newfound skills in these critical areas.