Objective H.5 Participating in and organising international civilian and military exercises and other expert programmes. Participating in international exercises and expert meetings in the area of cyber security and organising them is necessary for ensuring efficient development and strengthening of the capabilities for a coordinated national and international response to cyber security threats, as well as harmonisation, testing and improvement of the achieved implementation level of cooperative defence of cyberspace. In organising and participating in such activities it is necessary to follow and coordinate them with regard to national competences of certain bodies as stakeholders of Croatia’s cyber security. Objective H.6 Strengthening cooperation in the area of risk management for European critical infrastructures. The Croatian Act on Critical Infrastructures defines the concept of European critical infrastructures and prescribes their designation and protection. In accordance with the Council Directive 2008/114/EC on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection, Member States are required to cooperate, establish information sharing, and exchange experiences and best practices to achieve the best and most efficient protection of the identified European critical infrastructures. 6.4 Education, research, development and raising security awareness in cyberspace (I) For building a safe society and using the market potential of the information security and information society as a whole, it is necessary to apply a systematic approach to raising the level of the entire society’s competences in the area of cyber security. Appropriate educational activities have to be directed towards the following target groups:  Formal education participants - it is necessary to ensure that primary and secondary school pupils and students attending professional and university studies acquire knowledge of the dangers they can encounter in the virtual environment; skills and competences to successfully ensure their own safe use of information and communication technologies at all levels of formal education, and awareness of the need to protect personal data;  Various population segments - including all population segments in the process of learning about information security through the concept of lifelong learning and raise awareness of the need for protection;  Data controllers, personal data recipients, data processors and all other persons coming into contact with critical national infrastructures and databases containing groups of protected information - ensure a higher level of education in the area of cyber security and raise awareness of the need to protect electronic information; 24 of 31