×

Protection of Critical Information Infrastructure

22.09.2025

Image for Protection of Critical Information Infrastructure

Today, Western Balkans Cyber Capacity Centre (WB3C) kicks off a four-day training with International Telecommunication Union on Critical Information Infrastructure Protection (CIIP) and MISP platform for participants across the Western Balkans, joined this round by colleagues from Georgia and Ukraine. 

What we cover and why it matters: we start by CIIP fundamentals - how critical services interconnect, the evolving threat landscape, national-level risk management and incident response - so policies and guidelines rest on shared concepts.

We then turn from theory to practice through an interactive exercise on identifying and designating CII across sectors, comparing approaches and criteria country by country to understand what actually works. 

The rest of the training is hands-on with MISP. Participants will:
-Turn real threats into clear, structured intel.
-Create events, then add context and details to enrich them.
-Link activity to MITRE ATT&CK so teams speak the same language.

Finally, we cover automation: set up feeds, sync across MISP servers, export to detection tools and script routine tasks - so teams leave with repeatable workflows and a MISP setup they can run at home.

The goal: shared methods, practical tooling and an exchange of experience from each country that strengthens regional resilience. 

Valentina Stadnic, Program Officer at the ITU Office for Europe, Orhan Osmani Head of Cybersecurity Division at ITU and Gilles Schwoerer, Head of WB3C welcomed the participants while Tadas Jakstas, PhD, CIIP Expert, led the training on Day 1 and 2, while Ján Skalný, expert from the SK-CERT, led the training on Days 3 and 4 on using the MISP platform.  

 


Combatting Disinformation and FIMI

A very productive meeting this morning with the Atlantic Council of Montenegro, led by Mr. Savo Kentera, President and CEO, together with his team Azra Karastanović and Draško Jabučanin. The Western Balkans Cyber Capacity Centre (WB3C) was represented by its Head Gilles Schwoerer and the team: Vanja Madzgalj MBE, Cyril C. and Yannick Casse. 

Building on our previous engagements, including the national Round Table on Critical Infrastructure and the 2BS Forum, WB3C is further strengthening this collaboration to address pressing regional challenges.

Our discussions highlighted significant common interests in two crucial areas: critical infrastructure resilience and countering disinformation and foreign information manipulation and interference (FIMI).

This prospective partnership reflects a shared commitment to strengthening regional security and societal resilience against interference and information manipulation. We look forward to developing concrete actions and contributing meaningfully to these important efforts.

Developing Future Cyber Talent Through Early Interventions in Schools

WB3C paid a visit to the Ministry of Education, Science and Innovation this week. We met with the State Secretary Calasan Tatjana to introduce WB3C’s work and share an overview of our plans for 2026, with a focus on education, young people and cooperation with universities. We talked about practical ways to support foundational awareness and cyber skills in schools and development of academic learning pathways such as micro-credentials and new degree programmes in cybersecurity and digital forensics in universities. 

The meeting was also a chance to update the Ministry on how WB3C is developing as an international organization and how our role in Montenegro and the region is growing, as well as to explore how we could work more closely in the future.
We appreciated the open and constructive exchange, and the shared understanding that investing early in digital skills and cyber awareness really matters.
Looking forward to continuing the conversation and building on this momentum.
 

Cyber Hygiene Training for Ministry of European Affairs of Montenegro

Today we start a short CyberHygiene training for colleagues at Montenegro’s Ministry of European Affairs. The training is led by WB3C-s in-house trainers Cyril C. and Yannick Casse.
Over the two days, we will work through the threats civil servants face most often — phishing, malware/ransomware and social engineering — and the practical habits that reduce risk without needing to advance technical skills such as: safer daily practices, data confidentiality and clear incident response basics.
A reminder worth repeating: cyber hygiene is organizational hygiene. Firewalls and policies help, but day-to-day resilience is built in small decisions made across the institution. Every civil servant counts.
A simple checklist that pays off:
⚠️ Pause before you click (especially “urgent” emails)
⚠️ Use strong passwords/passphrases + multi-factor authentication where available
⚠️ Keep devices and apps updated
⚠️ Report suspicious activity early—speed matters

Director Gilles Schwoerer greeted the participants by emphasizing that cybersecurity culture doesn’t start in the IT department, but it starts in each inbox. We are very pleased to welcome the behind-the-scenes force driving Montenegro's successful advancement towards the EU accession and to share that WB3C is expecting its first multi-year EU grant in March this year, aimed at supporting the region in meeting the requirements from the cyber agenda and strengthening its overall resilience, especially its critical infrastructure. We look forward to joining forces with ministries around the region in 2026 - a year expected to bring a dynamic plan of activities.


Copyright © WB3C

Disclaimer: Translations of the original content written in English into other languages are AI generated by Weglot.