×

Training Programmes

Responsible State Behavior in Cyberspace

Instructors: DCAF, WB3C

Responsible State Behavior in Cyberspace: International Norms and the Role of the EU in Cyberdiplomacy

This three-day workshop, hosted by the Western Balkans Cyber Capacity Centre (WB3C) in partnership with the Geneva Centre for Security Sector Governance (DCAF) on 12-14 November 2024, focuses on fostering a deeper understanding of international frameworks and best practices in cyberdiplomacy, with a special emphasis on the European Union's role.

Day 1: Understanding the UN Framework on Responsible State Behavior in Cyberspace

The first day is dedicated to exploring the UN Framework on Responsible State Behavior in Cyberspace. Participants will engage in sessions that cover the four key components of the framework:

  • UN Norms
  • International Law
  • Capacity Building
  • Confidence Building Measures

The day will also feature discussions on the operationalization of these principles within the UN’s First Committee and the Open-ended Working Group (OEWG) on ICT security, along with an in-depth look at the draft UN convention on cybercrime. Additionally, the role of international law in cyberspace will be analyzed, focusing on the challenges of attribution and the application of a rules-based framework. The day concludes with a case study on Slovenia's practices in cyberdiplomacy.

Day 2: The EU Cyber Ecosystem and Cooperation with the Western Balkans

Day two offers insights into the structure of the EU’s cyber ecosystem and its collaborative efforts with the Western Balkans. Participants will gain a detailed understanding of:

  • The EU's cyber diplomacy ecosystem and efforts, led by the European External Action Service (EEAS)
  • EU support mechanisms for the Western Balkans through the Directorate-General for Neighbourhood and Enlargement Negotiations (DG NEAR)
  • The introduction of the EU Cyber Solidarity Act and Cyber Reserve
  • The role of the European Union Agency for Cybersecurity (ENISA) and Europol in strengthening regional cybersecurity

The day will also highlight international cooperation in cybersecurity with a special focus on the Western Balkans.

Day 3: Practical Exercises and International Cooperation

The final day features a hands-on tabletop exercise facilitated by experts from the Cyber Policy Institute. This exercise simulates international cooperation and national coordination during a cyber incident, reinforcing the lessons from the previous sessions. Participants will:

  • Explore the legal frameworks and best practices applicable to cyber incident response
  • Work in groups to manage a simulated incident
  • Debrief and present their solutions, emphasizing the importance of coordinated multinational responses

The workshop concludes with a comprehensive review of key takeaways and closing remarks.


Operational Technology, Resilient Ecosystems and Infrastructure Protection

Enhancing cybersecurity proficiancy of Western Balkans administrations

The training series developed in cooperation with the Netherlands' Ministry of Foreign Affairs and the National Cyber Security Centre consists of three integral parts, each designed to enhance different aspects of cybersecurity proficiency among participants from the Western Balkans within the context of Critical Infrastructures (CI) and Critical Information Infrastructures (CII). Participants will gain critical theoretical knowledge, practical skills, and awareness necessary to address the evolving challenges in cybersecurity.

1. Operational Technology

Duration: 1,5 days

This segment focuses on the specific security needs related to operational technology (OT), which is increasingly targeted in cyberattacks due to its critical role in controlling physical processes in industries like manufacturing, energy and utilities. The training aims to strengthen skills in protecting and securing OT environments from potential cyber threats.

*Focus on the integration and protection of operational technology within cybersecurity framework.

*Explore dependencies and the impact of cascading risks in operational settings.

*Practical sessions on developing resilient strategies and responses to cyber threats in operational technologies.

2. Cyber Resilient Ecosystems

Duration: 1,5 days

Participants will learn how to build and maintain cyber-resilient ecosystems that can withstand and quickly recover from cyber incidents. This part of the training emphasizes the importance of resilience planning and strategies to ensure continuity and reliability in the face of cyber disruptions.

  •  Innovative approaches to ecosystemic-thinking in cybersecurity.
  • Lessons from natural ecosystems applied to cyber challenges to foster robust public-private partnerships and strengthen regional cyber resilience.
  • Hands-on exercises for mapping and establishing cyber resilient ecosystems for organisations, specific regions like industrial areas, harbors, airports, or targeted sectors.

3. Critical Information Infrastructure Protection

Duration: 1 day

This training focuses on protecting critical information infrastructure, which is essential for the functioning of a society and economy. Topics include risk assessment, protection strategies and the implementation of security measures designed to protect vital digital assets and services from cyber threats.

  •  Essential insights into the relationship between CI and CII under cybersecurity perspectives.
  • Detailed discussion on the needs for protection amid a continuously changing cyber environment.
  • Focus on four key areas: Understanding CI and CII, Asset management, and building secure communities.
  • Practical exercises aimed at developing comprehensive strategies for protecting critical information infrastructure.
Upcoming
Cybersecurity Diploma Course with the University of Technology in Troyes, France

In partnership with the University of Technology of Troyes (UTT), WB3C launches a one‑year academic diploma course focused on practical cybersecurity skills for the Western Balkans. This course, worth 60 ECTS, may lead to a Bachelor’s degree following UTT’s validation of candidates’ prior credits (at least 120 ECTS). This course is primarily intended for early career professionals in the public sector and critical infrastructure, as well as for 3rd/4th year students or master degree students in information technology or closely related fields.  Eligible candidates are also those holding internationally recognized certificates in IT or cybersecurity even if they do not have a degree in IT or related field. 

Why this program

Cyber and cyber‑enabled crimes, systemic digital risks, and skills shortages require rapid upskilling. This diploma course develops practitioners who can secure systems and networks, detect and respond to incidents, and work within EU legal and regulatory frameworks.

Outcomes

  • Operate and secure IT systems and networks
  • Apply cryptography and data protection
  • Develop and audit secure software
  • Detect, investigate, and respond to incidents
  • Navigate EU law, regulation and ethics

Target Roles

Students who successfully complete this course may be eligible for the following junior roles:  Security administrator, SOC analyst, junior penetration tester, digital forensic technician, cybersecurity auditor.

About the course:

DURATION:  1 academic year or 10 weeks of classroom instruction across 2026

METHODS: Lectures, labs, case studies, Capture‑the‑Flag (CTF) exercise

ASSESSMENT: Continuous assessment, supervised project defense, internship report

WORKING LANGUAGE: English

LOCATION: WB3C Podgorica, Montenegro

Download the brochure below for more details. 

Crime Typology, Digital Evidence and Cryptocurrencies

Understanding and combating cyber financial crimes

In the digital age, the development of communication networks and the widespread use of the internet have significantly transformed business operations. This digital integration, while beneficial, has also escalated the vulnerability of organisations to cyber threats. With the rise of cryptocurrencies—a blend of innovative technologies and financial services—there is an increasing opportunity for their malicious use. Cryptocurrencies, characterized by their pseudo-anonymity and decentralization, have become attractive tools for money laundering and other illicit online activities across parallel web networks.

Course Overview

This training programme is designed to empower WB6 administrations to keep pace with the rapid advancements in technology and the evolving landscape of digital crimes by developing the knowledge and skills needed to effectively combat and adapt to the multifaceted nature of cyber offenses related to crime typology and the misuse of cryptocurrencies.

Training Modules

Foundations of Crime Typology and Cyber Offenses

  • Understanding the basics of crime typology specific to digital platforms
  • Identifying patterns and classifications of cybercrimes affecting companies today

Collection and Management of Digital Evidence

  •  Techniques for identifying, collecting, and preserving digital evidence.
  • Legal considerations and compliance issues in handling digital data.
  • Utilizing digital forensics tools and methodologies to extract critical information.

Cryptocurrencies and Cyber Financial Crimes

  •  Exploring the technology behind cryptocurrencies and their role in financial systems.
  • Investigating the use of cryptocurrencies in money laundering, fraud, and other financial crimes.
  • Strategies for tracing and analyzing crypto transactions on decentralized networks.

Adapting to Technological Innovations

  •  Staying ahead of technological trends and their implications on security practices.
  • Developing adaptive strategies to mitigate risks associated with new digital currencies and platforms.

Case Studies and Real-World Applications

  •  Analyzing recent cases of digital crimes involving cryptocurrencies.
  • Hands-on simulations to apply concepts and techniques learned in a controlled, test-driven environment.

Learning Outcomes

Upon completion of this program, participants will be able to:

  •  Clearly classify types of digital crimes and identify relevant digital evidence.
  • Utilize advanced tools and techniques for digital forensics investigations.
  • Understand the mechanics of cryptocurrencies and identify potential misuse in financial transactions.
  • Develop proactive strategies to prevent and respond to cybercrimes in an ever-evolving digital landscape.

Who Should Attend

This training is aimed at law enforcement personnel, cybersecurity experts, financial service professionals and otehr professionals involved in digital security and regulatory roles.


Copyright © WB3C

Disclaimer: Translations of the original content written in English into other languages are AI generated by Weglot.