CYBER SECURITY STRATEGY OF MONTENEGRO 2018-2021 In accordance with the Cyber Security Strategy for Montenegro 2018-2021, the amendments to the Law on Information Security were adopted (Official Gazette of Montenegro, No 40/2016), through which formally and legally critical information structure have been defined as (previously it was defined through Methodology for selecting CII): „information systems of bodies which, if compromised or destroyed, would endanger the life, health, and safety of citizens, as well as the functioning of the country, while the performance of public interest activities depends on their proper functioning“. A detailed analysis of information systems of the responsible authorities was drafted within the first stage. A detailed analysis of information systems of the state authorities was drafted within the second stage. Within the third stage, a questionnaire was sent to the private sector, on the basis of which the analysis of their information systems was acquired, thereby analyses of information systems of all critical sectors have been completed. On the basis of the said analysis, and the analysis of criticality, a proposal list of critical information systems was adopted, after which the Government of Montenegro tasked the Ministry of Public Administration to adopt a final list of CII, and subsequently the define protection measures. The European Union identifies two main methods for protecting CII: The first one, where the overall process is governed by the state, applied by Montenegro, and the second one, where the main function belongs to operators/owners of CII. Eight critical sectors have been identified in Montenegro which include one or more CIIs: Security control of CII within a sector belongs to line ministries or other state authorities that have the legal basis and obligation for securing and regulating these sectors. National CIRT is a central point for coordination of activities, development of cooperation and other activities related to this field. Case study In February 2017, a number of services belonging to the state authorities were under intensive and continuous DDoS attack, lasting for two weeks. The analysis showed that the attack originated from a wide range of IP addresses spread all over the world, and represented a network of so-called zombies - compromised computers characteristic of this kind of attacks, and during this period of time, several state services were under a continuous cyber attack. The said incident influenced on raising awareness of the consequences that can be caused by an attack in cyberspace. Simultaneously, the state authorities dealing with the defence had an opportunity to test their capacities and to develop faster and more efficient cooperation with partners from private sector with the aim of more efficient defence from this type of attacks. STRATEGIC OBJECTIVE: The Government of Montenegro will continue to strengthen the CII defence capabilities, and since the National CIRT has a key role in this field - it must have adequate resources and tools to effectively understand, analyse and respond to the wide spectrum of threats in this field. The resources of state authorities in charge of safety control of CII must be adequate to the task, i.e. the state authorities must have staff members who understand threats and risks for specific CII belonging to their sector. Human and technical resources must be strengthened with the aim of efficient performance of this function. 27