Critical Infrastructure as an Instrument of Soft Power

04.09.2025

Western Balkans Cyber Capacity Centre (WB3C) took part in a round table on “Critical Infrastructure as an Instrument of Soft Power” yesterday, organized by the NATO Council of Montenegro at the Science and Technology Park. The event gathered experts from government, academia, the private sector, and civil society to reflect on the political and strategic importance of critical infrastructure (CI) in national security and stability.

Opening remarks by Dr. Savo Kentera (President, Atlantic Council of Montenegro) and Prof. Dr. Zoran Keković (Director, Centre for Critical Infrastructure Resilience, Atlantic Council of Montenegro) set the tone by underlining that CI is more than a technical matter – it is a cornerstone of sovereignty and a geopolitical issue.

Key themes included:
-New regulatory framework – Montenegro’s new Information Security Law, aligned with NIS2, mandates key and important CI entities to be ISO 27001 certified. Implementation of the new regulatory framework presents a big challenge and it requires a multi-disciplinary approach and involvement of all actors.
-Prof. Keković outlined three major risks for CI: 1) disruption of goods and services, 2) vulnerability due to state dependence on infrastructure, and 3) soft power – those who control CI can project their power in different ways.

Sectoral perspectives: Contributions came from @Dušan Polović (Ministry of Public Administration), Ljuban Tmušić (Directorate for Protection and Rescue, Ministry of Interior), Ivan Stanković (Čikom), Saša Šćekić (Central Bank of Montenegro).

Representing WB3C, Vanja Madzgalj MBE presented the Centre’s progress toward becoming an international organization and announced that our Centre is already working on capacity building for critical infrastructure with two focused courses in September, developed with Urad Vlade Republike Slovenije za informacijsko varnost (URSIV) on 9-11 Sep and International Telecommunication Union (ITU) on 22-26 Sep, both aimed at IT professionals in CI entities. Towards the end of the year, we will also offer a simulation exercises for CI and will extend our current cooperation with Čikom.

The round table also offered an opportunity to expand networks and explore future collaboration. Head of WB3C Gilles Schwoerer spoke with Savo Kentera about strong joint interest in strengthening CI in Montenegro and across the region. He also met with representatives of the health and maritime sectors who also constitute important pillars of CI. The conclusion of this discussion assured us that taking a sectoral approach is key to advancing critical infrastructure protection. By engaging each sector individually - energy, transport, finance, ICT, health and others, WB3C and its partners can address specific challenges, tailor training and exercises to operational realities, and ensure that solutions are both practical and sustainable.

Other news and events

Certified Data Protection Officer training,

This week, 26-28 May 2026, we organized the Certified Data Protection Officer training, a three-day regional programme for public servants involved in the implementation, supervision and monitoring of data protection measures across governmental and public sector institutions.

Data protection is a key part of digital trust. As public services become more digital and interconnected, institutions need the capacity to protect personal data, strengthen compliance, and ensure that citizens’ rights are respected in practice.

For the Western Balkans, this training is especially relevant. Strong data protection frameworks support better public administration, safer digital services, responsible data use and closer alignment with European standards. They also help institutions move beyond formal compliance and towards a more practical, people-centred approach to privacy and accountability.

Over the next three days, participants will work through the key pillars of data protection practice:

• Organisational governance — understanding roles, responsibilities and internal accountability
• Customer-centric compliance — applying data protection principles in services and institutional processes
• People-focused rights and responsibilities — strengthening the protection of individuals and supporting responsible decision-making

The course combines theory with practical exercises, peer exchange, group work and interactive simulations. Participants will work in small groups using a mock organisation aligned with their institutional context, allowing them to apply lessons to realistic public-sector scenarios.

The training is also designed as a certification programme, with short daily quizzes and final certification based on the average score across all three days.

By investing in Data Protection Officer capacities, WB3C is supporting the development of a stronger regional professional network — one that can help institutions protect personal data, build public trust and embed data protection into everyday governance. Big thank you to our trainers Blerta Xhako, Stella Manga Chesnay and Stefano Leucci.

Curtesy Visit by the Norwegian Ministry of Foreign Affairs

WB3C pleased to welcome a delegation of the Kingdom of Norway for a courtesy visit and exchange on possible areas of future cooperation.
The visit was an opportunity to present WB3C’s work as a regional platform for cybersecurity, cybercrime and cyber diplomacy, and to discuss how practical capacity-building can support resilience, institutional cooperation and the European path of the Western Balkans.
We were honoured to receive Mr Eirik Nestås Mathisen, Special Envoy for the Western Balkans at the Norwegian Ministry of Foreign Affairs, together with Ms Anita Krokan, Special Adviser at the Norwegian Ministry of Foreign Affairs, Colonel Dag-Magne Lunde, Defence Attaché of the Kingdom of Norway, Mrs. Ingrid Vik from the Norwegian NGO UTSYN and Mr Rajko Radevic, Adviser at the Norwegian Ministry of Defence, who were welcome by our programme lead Gilles Schwoerer.
Norway has long been a valued partner to the region, with a strong understanding of security, governance and resilience challenges in the Western Balkans. We look forward to continuing the dialogue and exploring concrete ways to work together in the period ahead.

Cyber Vigilance for Children - Session 2

Cyber vigilance starts with very simple questions.
❓ What do we share online?
❓Who can see it?
❓When is screen time too much?
❓What should we do if something online feels strange, scary or unkind?

Yesterday, WB3C held a second session on Cyber Vigilance for Children for the French School in Podgorica, this time with the youngest age group, children aged 7 to 10.
The session, prepared and delivered by Cyril CORRIAS and Yannick CASSE, WB3C cybercrime trainers, introduced children to the basics of safer and healthier digital habits in a way they could understand, discuss and remember.
Together, they explored screen time, passwords, privacy, online behaviour, social media, bullying, and the importance of speaking to a trusted adult when something does not feel right.
The morning ended with a group-game questionnaire and the awarding of an individual Internet License — a small certificate, but with a meaningful message: being online also means learning how to be careful, kind and responsible.
At this age, cyber education is not about fear. It is about giving children confidence, language and instincts that can protect them as their digital world grows.