CYBER SECURITY STRATEGY OF MONTENEGRO 2018-2021 tegy, and six months after that Member States must complete the identification of operators of essential services. The Commission adopted an Annex on the effective application of the NIS Directive COM (2017) 476 of 4 October 2017. Furthermore, the Commission presented a proposal for the ENISA reform, which includes its permanent mandate as a reference point in the EU cyber system, and that is will ensure the implementation of the NIS Directive and the proposed Information and Communication Technology cyber security certification Framework COM (2017) 477 of 4 October 2017. For some companies that hold critical sectors, the EU’s General Data Protection Regulation (EU) 2016/679 of 27 April 2016 is very important, and it will be in application as of May 2018. Companies will have to take care of the data processing of the entities from the EU due to severe penalties for non-compliance, therefore they are obliged to start adapting their business to the new requirements of the Regulation that deal with information risks, ICT security, rapid reaction to discovering threats and data breach, recovery of information and continuity of successful business. Although the NIS Directive is not binding for Montenegro, the implementation of its recommendations would contribute to the development of a modern, efficient and European compatible national cyber security concept. And while there could be room for discussion about the application of ENISA recommendations, when it comes to the NATO alliance, there is no dilemma for Montenegro as its full member. At the Warsaw Summit of 2016, NATO declared the cyber domain the fourth operational domain, making the effects and consequences in cyberspace equal to that within the remaining three domains: water, air and land. Additionally, in July 2016, the heads and presidents of the governments of the NATO Member States committed themselves to treating cyberspace in strategic 10 sense the same as the remaining three operational domains in their so-called “cyber pledge”. Among other things, Member States pledged to: • strengthen and enhance the cyber defences of national networks and infrastructures, as a matter of priority; • allocate adequate resources nationally to strengthen their cyber defence capabilities; • reinforce the interaction amongst their respective national cyber defence stakeholders to deepen co-operation and the exchange of best practices; • enhance skills and awareness, among all defence stakeholders at national level, of fundamental cyber hygiene through to the most sophisticated and robust cyber defences; • foster cyber education, training and exercising of their forces, and enhance their educational institutions, to build trust and knowledge across the Alliance. The Government of Montenegro will continue to undertake activities towards the implementation of the strategic objectives defined in the Strategy so as to ensure further improvement of the concept of cyber security of Montenegro in order to be compatible with the concepts of the most developed EU and NATO Member States. Special attention will be paid to harmonisation with regard to the standardisation of concepts, methods, policies and procedures in line with the accepted European and international standards. 1. Cyber defence capacities According to the Global Cybersecurity Index10, drafted in 2017 by the International Telecommunication Union, Montenegro ranks 71st in the field of cyber security with a coefficient of 0.422, Globalni sajber bezbjednosni indeks za 2017. Link: https://www.itu.int/dms_pub/itu-d/opb/str/D-STR-GCI.01-2017-PDF-E.pdf 24