CYBER SECURITY STRATEGY OF MONTENEGRO 2018-2021 It is necessary to have a good organisational hierarchy within the state administration, that will ensure the most efficient and long-term sustainable provision of adequate cyber security governance in Montenegro. ising awareness, providing useful information and advice on internet security, and In line with the task of providing early detection of cyber threats and incidents and adequately reacting and responding to them, the Directorate for Protection against Computer and Security Incidents Online (CIRT) was formed in 2012. In addition to this, CIRT carries out activities to establish and promote partner relations both at the national level (with relevant authorities, private sector partners, and academic community), and the international level, in order to respond to cyber threats in a better and more efficient manner. CIRT is the central body for the coordination of prevention and protection against computer security incidents on the Internet and other security risks to information systems for the territory of Montenegro. In accordance with its responsibilities, CIRT acts: • In a preventive manner - through education, ra- Year 2013 2014 2015 2016 2017 ( until Sept 1 ) TOTAL Attacks on websites and IS 5 5 6 18 • In a reactive manner - through analysis and conducting detailed investigations in case of online incidents at the national level. The analysis of the incident reports in Montenegro, which are drafted annually by CIRT, records a trend of growth in the number of reported incidents year after year, as well as a degree of sophistication of the attacks themselves. Inappropriate content Malware Other online 1 3 5 6 19 17 36 14 50 25 Online frauds Abuse of social profiles 3 6 17 20 10 20 37 36 90 13 25 4 245 8 124 59 128 42 313 78 Statistics by year and type of attack In accordance with the Law on Amendments to the Law on Information Security (Official Gazette of Montenegro, No 40/2016) the Information Security Council was formed on August 1, 2017 (Official Gazette of Montenegro, No 48/2017), thus providing a national parent organisation to advise the Government of Montenegro on all important issues in this field. The Council’s tasks are to: - inform the Government of Montenegro on all important issues related to cyber security; - monitor the implementation of the Cyber Security 20 Strategy for Montenegro and the action plans for its implementation; - monitor and coordinate activities in the field of cyber security; - propose measures for harmonisation of the legislative and administrative frameworks in order to improve the cyber security of Montenegro; - work to improve cooperation between state authorities and administrative bodies in the field of cyber security and coordinate their activities; - work to improve cooperation with the private sector in the field of cyber security; - submit its performance report to the Government of Montenegro at least once a year.