CYBER SECURITY STRATEGY OF MONTENEGRO 2018-2021 of communication and information systems. Indicator of success: the drafting of relevant legal acts and supporting documents by the inter-ministerial working group. b) Strengthening of information capacities of the state authority in charge of security accreditation of communication and information systems and processes where classified information is used (Security Accreditation Authority - SAA), and the state authority responsible for handling materials for cryptographic protection of secret data (National Distribution Authority - NDA). Indicator of success: the number of newly employed IT specialists in the Directorate for Protection of Confidential Data which will deal with accreditation of communication and information systems and with management of crypto materials. c) Strengthening of the institutional capacities necessary for carrying out certification of communication and information systems and their inter-connections through the introduction of a systematised function that includes a job description for information security of classified information in state institutions where classified information is mostly handled electronically (for higher levels of classification a separate working position is provided, while for the lowest level of classification it is possible to add a job description to the existing working position). Indicator of success: the number of systemised working positions with a job description related to information security of classified data. d) Certification of communication and information systems where information marked with higher level of classification is used, the introduction of security information management system and risk management in communication and information systems where classified data marked as INTERNAL are used (ISO/IEC 27000 certification with additional security measures) and unclassi- 30 fied sensitive information (ISO/IEC 27001). Indicator of success: the number of certified communication and information systems and the number of conducted internal reviews aimed at controlling the implementation of standards. e) Establishing cooperation with educational and scientific institutions with the aim of long-term education and training of personnel, for the needs of creating national cryptographic solutions. Indicator of success: the degree of established cooperation and the number of educational or scientific projects resulting from that. 6. Cyber security education STRATEGIC OBJECTIVE: In order to achieve the best cyber security practice, the responsible bodies will learn about the newest cyber threats and undertake activities on educating citizens and organisations about protection mechanisms in cyberspace. Sustainable, continuous and coordinated efforts are necessary to achieve wider changes in behaviour and secure that all target groups, public and private sectors, as well as individual citizens, understand risks and threats in cyberspace. Raising awareness of threats in cyberspace and their influence on the overall society is of vital importance. Through raising awareness, individual and corporative users may learn how to behave and feel secure and ready to do business online. Education of employees and citizens through publishing of various security tips, instructions and warnings is based on current trends in technology and distribution of relevant knowledge of regional and international experts. An important