×

Protection of Critical Information Infrastructure

22.09.2025

Image for Protection of Critical Information Infrastructure

Today, Western Balkans Cyber Capacity Centre (WB3C) kicks off a four-day training with International Telecommunication Union on Critical Information Infrastructure Protection (CIIP) and MISP platform for participants across the Western Balkans, joined this round by colleagues from Georgia and Ukraine. 

What we cover and why it matters: we start by CIIP fundamentals - how critical services interconnect, the evolving threat landscape, national-level risk management and incident response - so policies and guidelines rest on shared concepts.

We then turn from theory to practice through an interactive exercise on identifying and designating CII across sectors, comparing approaches and criteria country by country to understand what actually works. 

The rest of the training is hands-on with MISP. Participants will:
-Turn real threats into clear, structured intel.
-Create events, then add context and details to enrich them.
-Link activity to MITRE ATT&CK so teams speak the same language.

Finally, we cover automation: set up feeds, sync across MISP servers, export to detection tools and script routine tasks - so teams leave with repeatable workflows and a MISP setup they can run at home.

The goal: shared methods, practical tooling and an exchange of experience from each country that strengthens regional resilience. 

Valentina Stadnic, Program Officer at the ITU Office for Europe, Orhan Osmani Head of Cybersecurity Division at ITU and Gilles Schwoerer, Head of WB3C welcomed the participants while Tadas Jakstas, PhD, CIIP Expert, led the training on Day 1 and 2, while Ján Skalný, expert from the SK-CERT, led the training on Days 3 and 4 on using the MISP platform.  

 


Cybersecurity Training for Medium and Large Networks

Resilient critical infrastructure depends on secure networks, prepared teams and the ability to keep essential services running when cyber incidents occur.
This was the focus of WB3C’s regional training on Network Security for medium and large networks, hosted on 18–19 May in partnership with Slovenia Government Agency for Cybersecurity - URSIV (Urad Vlade Republike Slovenije za informacijsko varnost) and led by Slovenian expert Primoz Bratanic.
The training brought together institutions whose work is closely connected to the stability of public services, government systems and essential infrastructure across the Western Balkans. Participants came from the Secretariat for Legislation - Government of R.Macedonia and the Ministry of Digital Transformation (Министерство за дигитална трансформација) of North Macedonia, Serbia’s Jaroslav Černi Water Institute, the Autoriteti Kombëtar për Sigurinë Kibernetike / National Cyber Security Authority of Albania, GOV-CIRT within Montenegro’s Crnogorski elektrodistributivni sistem, the Agencija za sajber bezbjednost Crne Gore / Cybersecurity Agency of Montenegro, and Ministry of Digitalization and Public Administration - Kosovo.
Over the two days, participants worked through practical approaches to making complex networks safer, reducing unnecessary exposure, recognising early warning signs and responding before a cyber incident disrupts services, operations or public trust.
A ransomware scenario was also part of the training, with a focus on the decisions institutions need to make under pressure: how to contain the incident, preserve evidence, coordinate internally and plan recovery.
For Western Balkans Cyber Capacity Centre (WB3C), this type of regional training is directly linked to the wider goal of strengthening cyber resilience of critical infrastructure - the systems, services and institutions that citizens rely on every day.
Thank you to Igor Kovač of Urad Vlade Republike Slovenije za informacijsko varnost, Primoz Bratanic and all participating institutions for two productive days and great engagement as a group.

Cyber Vigilance for Schoolchildren

Children grow up online long before they fully understand what the online world can expose them to. This is why early cyber vigilance is important, whether as part of the school curriculum or informal education for children and teens. 
This week, Western Balkans Cyber Capacity Centre (WB3C) delivered a three-hour course titled "Our Digital Space: Screen Time Balance & Online Safety", for children of the French School in Montenegro. The session was prepared and delivered by our in-house trainers for cybercrime Cyril CORRIAS and Yannick CASSE, with a simple but important goal: to help children build safer, healthier and more responsible digital habits.
The session covered screen time balance, with age-appropriate recommendations from early childhood to teenage years, as well as the basics of online safety: strong passwords, privacy, social media, and how to recognise situations that should not be ignored.
The session also opened the discussion on child protection online — from risky content and behaviour to reporting mechanisms, parental controls and the role of schools in preventing online bullying and harassment.
To make the learning practical and engaging, the children took part in a group-game questionnaire and received their individual Internet License at the end of the morning.
Cybersecurity education does not begin with technology, it begins with awareness, good habits and the confidence to ask for help when something feels wrong online.

OSINT Training for Trafficking in Human Being and Migrant Smuggling

Four days in the training room, focused on a topic where online traces can make a very real difference: OSINT for Trafficking in Human Beings (THB) and Migrant Smuggling.
WB3C has just concluded this regional training for law enforcement units, organised together with Marie Pierre MOSIN, EU4FAST and CIVIPOL and delivered by our in-house trainer Cyril CORRIAS.
For investigators working on THB and migrant smuggling, the digital aspect is essential. Recruitment, communication, movement, facilitation networks and financial signals often leave online traces. Knowing how to find, assess, preserve and use that information responsibly can strengthen investigations and support better cross-border cooperation.
This is why OSINT remains part of WB3C’s core programme. It connects cyber skills with real operational needs in the Western Balkans and helps law enforcement units build practical capacity against serious and organised crime.
A strong three days, with committed participants and a clear regional purpose.


Copyright © WB3C

Disclaimer: Translations of the original content written in English into other languages are AI generated by Weglot.