CYBER SECURITY STRATEGY OF MONTENEGRO 2018-2021 hire individuals who, in the name of certain interests, will have considerable power to inflict as much damage as possible using modern Internet technology. In this regard, numerous attacks on critical information infrastructure of the countries are being organised, which is developing into a model of cyberwarfare. The attack and/or destruction of critical information infrastructure achieves the goals of disruption or complete outage of vital state or military communications, resulting in certain consequences for the civilian population. For example, an attack on industrial control systems in the energy supply system may result in a breakdown of production and/or distribution of electricity for the population, causing numerous problems. Furthermore, the attack on information systems in the healthcare sector can cause damage to people’s health, through possible modification of parameters on devices which the patients use to communicate online with the system in the healthcare institution. In addition to the above mentioned, it should be noted that a great challenge is also the fact that nowadays online instructions for organising cyber attacks using the “know-how to launch cyber attacks” model are widely available. Risks caused by natural disasters or human error In its “2014 Cyber Security Intelligence Index” research report, IBM’s presented a highly intriguing piece of information saying that 95% of all security incidents were caused by the factor of human error. Many successful attacks were carried out by attackers using human weaknesses and various forms of intimidation to turn employees into insi- 10 ders, who reluctantly allowed access to classified information. Contrary to that, there are constant risks that are difficult to predict and the entire mankind struggles with them; they are caused by natural disasters, such as: earthquakes, floods, and hurricanes. Great physical damage can also be caused by fires, extremely high temperatures and lightning strikes, which can also lead to data loss. Other significant challenges Challenges relating to the home affairs of a country are equally significant as the risks and threats described above. More specifically, they represent one of the important prerequisites for adequate cyber protection. A need for further investment of funds in the strengthening of resources, expertise and continuous progress in the field of proactive action within the cyberspace of Montenegro was recognised. In a large number of countries and international organisations, such as NATO and the EU, cyber security is one of the top priorities, and so this problem has also been defined in relevant strategies and concepts of cyber security. In addition to the above mentioned, the legal framework limitations in this field are causing difficulties in procedure implementation. Namely, the cyber attacks on a country to be labelled as digital “armed attacks” remains a challenge. For this reason, there is a lack of adequate international level cooperation, while the role of international organisations is also very limited. Inadequate communication and cooperation between the public and private sectors largely results in the lack of trust of citizens in institutions and companies doing business online. On the other hand, insufficient digital li-