Critical Information Infrastructure - refers to any information-communication system whose maintenance, security and safety are critical for the national security, economy, public health and country security. The national critical information infrastructure is part of the critical infrastructure (CI). Cryptocurrency - decentralized virtual currencies, based on mathematical principles and protected by cryptography, where the principles of cryptography are used for the implementation of a distributed, decentralized, secure information economy. Personal data - any information which refers to physically identifying an individual or an individual that may be identified, whereas an identifiable individual is a person whose identity may be determined directly or indirectly, especially on the basis of a Unique Master Citizen Number or on the basis of one or more physical characteristics, physiological, mental, economic, cultural or social identity. Authorities — state administration bodies, other state organs, organs within ministries, governing organizations and independent bodies, judicial authorities and courts, municipality bodies, City of Skopje and municipalities of the City of Skopje, as well as other legal entities and individuals which by law are entitled to perform public authorizations. In this context, the term other subjects refer to: legal subjects that provide and secure services of public interest, e.g. entities in the field of education, health, finance, banking, insurance, energy, water supply, electronic communications and communal services. National security - a system for contemporary form of organization and functioning of the society which implements specific activities and measures for prevention and repression in order to protect fundamental societal values from security challenges, threats and risks at all levels. Ransomware - type of malicious software designed to block access to the information system or data stored in that system, often by encrypting, by which certain amount of ransom is required for the victim to pay for the attacker to enabling description of the information system or to allow access to data. 34