We are grateful to the IDLO - International Development Law Organization for the invitation to contribute to a specialized session for prosecutors and judges in Montenegro.
Our Head, Mr. Gilles Schwoerer, presented on the groundbreaking international cooperation mechanisms that led to the successful takedowns of encrypted criminal platforms like Encrochat, SkyECC and AnOM. These cases demonstrate how global law enforcement collaboration is essential to dismantle organized crime networks operating in the digital space.
An important connection was made with Ms. Masa Adzic, Director of the Secretariat of the Centre for Training in Judiciary and State Prosecution (Centar za obuku u sudstvu i državnom tužilaštvu). This meeting opened concrete avenues for future collaboration between our organizations, aligning perfectly with WB3C's mission to strengthen the region's capacity to investigate and prosecute cybercrime and organized crime.
Today, Western Balkans Cyber Capacity Centre (WB3C) kicks off a four-day training with International Telecommunication Union on Critical Information Infrastructure Protection (CIIP) and MISP platform for participants across the Western Balkans, joined this round by colleagues from Georgia and Ukraine.
What we cover and why it matters: we start by CIIP fundamentals - how critical services interconnect, the evolving threat landscape, national-level risk management and incident response - so policies and guidelines rest on shared concepts.
We then turn from theory to practice through an interactive exercise on identifying and designating CII across sectors, comparing approaches and criteria country by country to understand what actually works.
The rest of the training is hands-on with MISP. Participants will:
-Turn real threats into clear, structured intel.
-Create events, then add context and details to enrich them.
-Link activity to MITRE ATT&CK so teams speak the same language.
Finally, we cover automation: set up feeds, sync across MISP servers, export to detection tools and script routine tasks - so teams leave with repeatable workflows and a MISP setup they can run at home.
The goal: shared methods, practical tooling and an exchange of experience from each country that strengthens regional resilience.
Valentina Stadnic, Program Officer at the ITU Office for Europe, Orhan Osmani Head of Cybersecurity Division at ITU and Gilles Schwoerer, Head of WB3C welcomed the participants while Tadas Jakstas, PhD, CIIP Expert, led the training on Day 1 and 2, while Ján Skalný, expert from the SK-CERT, led the training on Days 3 and 4 on using the MISP platform.
Our 1-year Digital Forensics course for police investigators, prepared and delivered in conjunction with the Université de Technologie de Troyes, which started in February this year, is well underway. Session 4, which ran over the past two weeks (8-19 September) focused on hands-on acquisition, decoding and analysis of digital evidence in the forensic way: preserving originals and working on verifiable copies.
This time, we hosted Mickaël BUREAU, police officer with 25 years of experience, trained in forensics since 2013, and member of Office anti-cybercriminalité (OFAC) (Nanterre, near Paris). At OFAC, Mickaël supports judicial services with sealing, acquiring and analyzing data from computers, external drives, USBs, smartphones, tablets and more. He guided our group through professional tools that show not only how to extract and decode data, but why the decoded items appear as they do, supporting evidential integrity and use in court.
We have 16 participants on this course from across the Western Balkans’ law-enforcement communities. Head of WB3C Gilles Schwoerer explained the next steps in the journey towards obtaining internationally recognized professional license in digital forensics after the participants have successfully completed their final exam.
The end of the session today was an opportunity to celebrate the birth of a son of one of our participants. Congratulations to the family!
Gilles Schwoerer, Head of WB3C, was invited by the Permanent Mission of Montenegro to the UN, OSCE and other International Organizations in Vienna to join virtually the September NATO Caucus sessions chaired by Montenegro, where he was able to contribute to the discussion with a presentation about our mission, activities and impact. We trust that this in-depth information was valuable for ambassadors and members of the Caucus and created an opportunity to discuss the role of the Centre in regional security.
Three days of intensive training (9-11 Sep 2025) on the protection of critical infrastructure wrapped up in Podgorica this week at the Western Balkans Cyber Capacity Centre (WB3C) premises. The training explored vulnerabilities of critical systems such as energy, transport, healthcare and water supply, and delivered practical sessions on risk management, ICS/OT security and incident response. This program brought together IT officers from across the Western Balkans public sector.
The highlight of the final day was a Capture the Flag (CTF) challenge, where participants applied the response skills in a competitive but collaborative setting. A special moment worth noting: first and third place went to women participants (from Albania and Kosovo*). This shows the strength of diverse teams and why we remain committed to encouraging more women in cybersecurity.
We thank our excellent partners Urad Vlade Republike Slovenije za informacijsko varnost (URSIV, Slovenia), Igor Kovač and Gregor Spagnolo for delivering such high-level expertise and engaging sessions.
The training closed with a certificate ceremony and closing remarks by Gilles Schwoerer, with lots of smiles, great vibes and a strong sense of community.
This week in Bar, Montenegro, DCAF - Geneva Centre for Security Sector Governance and Regional School of Public Administration (ReSPA) and Western Balkans Cyber Capacity Centre (WB3C) jointly delivered a three-day regional training on cybersecurity legislation and public-sector standards.
The event gathered representatives from across the Western Balkans’ public administrations — an opportunity to connect networks, exchange practices, and strengthen a common regional approach to cybersecurity capacity. The programme was funded by the UK's Foreign, Commonwealth and Development Office, with Melanie Moffat from the British Embassy Podgorica attending the training.
Day 1 opened with remarks from Franziska Klopfer (DCAF) and Gilles Schwoerer (Head of WB3C). In his opening address, Gilles underlined that WB3C is not just a centre in Podgorica, but a regional platform designed as a resource for the entire Western Balkans — built for the region, to be used by the region. The day continued with sessions on EU legislation and certification frameworks, including insights into Italy’s cybersecurity architecture and the functions of the Italian National Cybersecurity Agency (Agenzia per la Cybersicurezza Nazionale).
🔹 Day 2 brought a broader audience, as more participants from the ReSPA network joined. Bojana Bajić (ReSPA) joined Franziska and Gilles in addressing the group, stressing the importance of cooperation across institutions in the process of advancing cybersecurity capabilities and aligning normative frameworks with EU standards. Participants then heard from the National Cybersecurity Authority of Greece, explored digital competencies for public administration, and worked on designing cybersecurity training curricula for civil servants, IT staff, and managers.
🔹 On Day 3, the sessions will turn to national practices, with contributions from Serbia’s National Academy for Public Administration and the Civil Service Agency of Bosnia and Herzegovina, offering concrete models for embedding cybersecurity into public administration training systems.
Together with DCAF and ReSPA, and with the support of FCDO, this training strengthened the foundations for a more resilient public sector across the Western Balkans, aligned with the region’s needs and EU accession priorities.
Strengthening regional cybersecurity capacity starts with strong relationships. At Western Balkans Cyber Capacity Centre (WB3C), we prioritise working closely with our beneficiaries and stakeholders across the Western Balkans.
To that end, we continue our regional outreach, meeting our partners in person to better understand their priorities and explore opportunities for cooperation.
This time, our trainers Yannick Casse and Cyril C. visited Prishtina and Skopje, where they met with key counterparts from the Ministries of Interior and Justice. The visit highlighted concrete prospects for future collaboration.
Synergies were also identified with UNDP Kosovo* (OSINT, Dark Web training) and Home Affairs Programme of European Union (HAPE) in Kosovo*, further expanding the scope for joint work.
While the majority of WB3C training activities are delivered from our Podgorica Centre, we remain open to relocating select trainings across the region upon request.
Through this outreach, WB3C ensures its training offer remains flexible and tailored to the evolving needs of our beneficiaries across the region.
Western Balkans Cyber Capacity Centre (WB3C) took part in a round table on “Critical Infrastructure as an Instrument of Soft Power” yesterday, organized by the NATO Council of Montenegro at the Science and Technology Park. The event gathered experts from government, academia, the private sector, and civil society to reflect on the political and strategic importance of critical infrastructure (CI) in national security and stability.
Opening remarks by Dr. Savo Kentera (President, Atlantic Council of Montenegro) and Prof. Dr. Zoran Keković (Director, Centre for Critical Infrastructure Resilience, Atlantic Council of Montenegro) set the tone by underlining that CI is more than a technical matter – it is a cornerstone of sovereignty and a geopolitical issue.
Key themes included:
-New regulatory framework – Montenegro’s new Information Security Law, aligned with NIS2, mandates key and important CI entities to be ISO 27001 certified. Implementation of the new regulatory framework presents a big challenge and it requires a multi-disciplinary approach and involvement of all actors.
-Prof. Keković outlined three major risks for CI: 1) disruption of goods and services, 2) vulnerability due to state dependence on infrastructure, and 3) soft power – those who control CI can project their power in different ways.
Sectoral perspectives: Contributions came from @Dušan Polović (Ministry of Public Administration), Ljuban Tmušić (Directorate for Protection and Rescue, Ministry of Interior), Ivan Stanković (Čikom), Saša Šćekić (Central Bank of Montenegro).
Representing WB3C, Vanja Madzgalj MBE presented the Centre’s progress toward becoming an international organization and announced that our Centre is already working on capacity building for critical infrastructure with two focused courses in September, developed with Urad Vlade Republike Slovenije za informacijsko varnost (URSIV) on 9-11 Sep and International Telecommunication Union (ITU) on 22-26 Sep, both aimed at IT professionals in CI entities. Towards the end of the year, we will also offer a simulation exercises for CI and will extend our current cooperation with Čikom.
The round table also offered an opportunity to expand networks and explore future collaboration. Head of WB3C Gilles Schwoerer spoke with Savo Kentera about strong joint interest in strengthening CI in Montenegro and across the region. He also met with representatives of the health and maritime sectors who also constitute important pillars of CI. The conclusion of this discussion assured us that taking a sectoral approach is key to advancing critical infrastructure protection. By engaging each sector individually - energy, transport, finance, ICT, health and others, WB3C and its partners can address specific challenges, tailor training and exercises to operational realities, and ensure that solutions are both practical and sustainable.
WB3C participated in a roundtable on approaches to building sustainable cyber resilience in Montenegro, held as part of the GAME CHANGER Festival 2025 in Porto Montenegro, organized by Women4Cyber Montenegro.
The roundtable, titled “Cyber Capacity Building: Towards a Sustainable Digital Security in Montenegro”, brought together representatives from the public sector, academia and industry to explore long-term strategies for strengthening Montenegro’s cybersecurity ecosystem.
Representing the Centre, Senior Project Manager Vanja Madzgalj MBE contributed on behalf of WB3C, which works to advance cyber capacity across the Western Balkans through structured training, regional cooperation and strategic alignment with EU standards.
She emphasized that, beyond technical training and skills development, institutions must adopt a systemic approach to building cyber resilience. Cyber capacity building should be treated as a ChangeManagement process, especially within the public sector, with strong leadership support at every level and streamlined internal communication that promotes adoption of new technologies and new practices. Besides a robust and structured training plan, leadership and communication are essential for achieving sustainable capacity and resilience.
The roundtable gathered voices from the public sector, academia and industry, reflecting the need for cross-sector collaboration in strengthening Montenegro’s cyber ecosystem.
We thank Women4Cyber Montenegro and all participants for creating a space for meaningful dialogue and cooperation. The panel agreed that such cross-sector discussions should continue as they bring valuable insights into ways forward for securing lasting institutional capacity and resilience.