CYBER SECURITY STRATEGY OF MONTENEGRO 2018-2021 public administration, with defined responsibilities, which will ensure effective cyber security governance in Montenegro. The following have been identified as the institutions accountable for cyber security in Montenegro: • Ministry of Public Administration within which the national CIRT operates; • National Security Agency; • Ministry of Defence / Army of Montenegro; • Ministry of Interior / Police Administration; • Ministry of Justice; • Ministry of Education; • Directorate for Protection of Confidential Data. The accompanying two-year action plan for the implementation of the Strategy envisages the formation of the Information Security Council, which was formed at the 29th Session of the Government on 08 June 2017. Furthermore, the Cyber Security Strategy for Montenegro 2013-2017 envisages the formation of local CIRTs or appointment of contact persons in all state authorities, aimed at strengthening cyber infrastructure at the local level. A total of 31 local teams were created, in charge of cooperating with members of the national CIRT on the issues of protection against computer security incidents on the Internet. Degree of implementation: It is evident that cyber security is becoming increasingly important in state authorities and that the institutions have largely recognised their role in cyberspace. Further activities aimed at completing the list of local CIRTs and appointing contact persons for cyber security issues will be the subject of activities of the relevant institutions through the Action Plan 2018-2019, which will accompany the Cyber Security Strategy for Montenegro 2018-2021. 14 2. Protection of critical information infrastructure in Montenegro In accordance with the task, the then Ministry of Information Society and Telecommunications of the 40th Government of Montenegro drafted the Law on Amendments to the Law on Information Security (Official Gazette of Montenegro No 040/16) defining critical information infrastructure (CII). Critical information infrastructure consists of information systems which, if compromised or destroyed, would endanger the life, health, and safety of citizens, as well as the functioning of the country, while the performance of public interest activities depends on their proper functioning. Upon the proposal of the then Ministry of Information Society and Telecommunications, the Government of Montenegro adopted the Methodology for selecting critical information infrastructure. Based on the Methodology and in cooperation with other relevant institutions, the Ministry of Public Administration, which inherited certain responsibilities of the former Ministry of Information Society and Telecommunications, has defined the list of critical information infrastructure in Montenegro, and the drafting of a Decree on measures for protecting CII is under way. Degree of implementation: The initial list of critical information infrastructure in Montenegro has been adopted, however, it should be taken into consideration that the list is to be regularly updated. After the adoption of the Decree on measures for protecting CII, it is necessary to implement it in cooperation with the owners of the CII.