Abstract:States, organizations and individuals are becoming targets of both individual and state-sponsored cyber-attacks, by those who recognize the impact of disrupting security systems and effect to people and governments. The energy sector is seen as one of the main targets of cyber-attacks against critical infrastructure, but transport, public sector services, telecommunications and critical (manufacturing) industries are also very vulnerable. One of most used example of cyber-attack is the Ukraine power grid attack in 2015 that left 230,000 people without power for up to 6 hours. Another most high profile example of a cyber-attack against critical infrastructure is the Stuxnet computer virus (first used on Iranian nuclear facility) which could be adapted to attack the SCADA systems (industrial control systems) used by many critical infrastructures in Europe.Wide range of critical infrastructure sectors are reliant on industrial control systems for monitoring processes and controlling physical devices (sensors, pumps, etc.) and for that reason, physical connected devices that support industrial processes are becoming more vulnerable. Not all critical infrastructure operators in all sectors are adequately prepared to manage protection (and raise resilience) effectively across both cyber and physical environments. Additionally there are few challenges in implementation of protection measures, such as lack of collaboration between private and public sector and low levels of awareness on existence of national key legislation.From supranational aspect, in relation to this papers topic, the European Union has took first step in defense to cyber threats in 2016 with „Directive on security of network and information systems“ (NIS Directive) by prescribing member states to adopt more rigid cyber-security standards. The aim of directive is to improve the deterrent and increase the EU’s defenses and reactions to cyber attacks by expanding the cyber security capacity, increasing collaboration at an EU level and introducing measures to prevent risk and handle cyber incidents. There are lot of other „supporting tools“ for Member States countries, such as European Union Agency for Network and Information Security – ENISA (which organize regular cyber security exercises at an EU level, including a large and comprehensive exercise every two years, raising preparedness of EU states); Network of National Coordination Centers and the European Cybersecurity Industrial, Technology and Research Competence Centre; and Coordinated response to major cyber security incidents and crises (Blueprint) with aim to ensure a rapid and coordinated response to large-scale cyber attacks by setting out suitable processes within the EU.Yet, not all Member States share the same capacities for achieving the highest level of cyber-security. They need to continuously work on enhancing the capability of defense against cyber threats as increased risk to state institutions information and communication systems but also the critical infrastructure objects. In Southeast Europe there are few additional challenges – some countries even don't have designated critical infrastructures (lower level of protection; lack of „clear vision“ of criticality) and critical infrastructures are only perceived through physical prism; non-EU countries are not obligated to follow requirements of European Union and its legislation, and there are interdependencies and transboundary cross-sector effects that needs to be taken in consideration. Critical infrastructure Protection (CIP) is the primary area of action, and for some of SEE countries (like the Republic of Croatia) the implementation of cyber security provisions just complements comprehensive activities which are focused on physical protection.This paper will analyze few segments of how SEE countries cope with new security challenges and on which level are they prepared for cyber-attacks and threats: 1. Which security mechanisms they use; 2. The existing legislation (Acts, Strategies, Plan of Action, etc.) related to cyber threats in correlation with strategic critical infrastructure protection documents. Analysis will have two perspectives: from EU member states and from non-EU member states point of view. Additionally, for EU member states it will be analyzed if there were any cyber security legislation before NIS directive that meets same aims. The aim of research is to have an overall picture of efforts in region regarding cyber-security as possibility for improvement thorough cooperation, organizational measures, etc. providing also some recommendations to reduce the gap in the level of cyber-security development with other regions of EU.

The Concept of Human Security as a Basis for the Application of Big Data Concept in Establishment of Early Warning System for Crisis Management in the Republic of Croatia

A Civil Protection Early Warning System to Improve the Resilience of Adriatic-Ionian Territories to Natural and Man-made Risk

Digital Cultural Heritage, Cybersecurity, and the Human Factor

Methodology for Detecting Cyber Intrusions in e-Learning Systems during COVID-19 Pandemic

Security of the European Union ad the Western Balkan Countries with Corruption and Illegal Migration

Comprehensive Risk Analysis of Emergency Medical Response Systems in Serbian Healthcare: Assessing Systemic Vulnerabilities in Disaster Preparedness and Response

Beyond Physical Threats: Cyber-attacks on Critical Infrastructure as a Challenge of Changing Security Environment – Overview of Cyber-security legislation and implementation in SEE Countries

Humanitarian aid in the age of COVID-19: A review of big data crisis analytics and the General Data Protection Regulation

Disaster Risk Reduction Education Through Digital Technologies in the Context of Education for Sustainable Development: A Curricula Analysis of Security and Defense Studies in Serbia

Mitigating information overload in social media during conflicts and crises: design and evaluation of a cross-platform alerting system

A Big Data Reference Architecture for Emergency Management

Decentralized Security Systems in Hybrid War Conditions with an Emphasis on the Security System in Bosnia and Herzegovina

From Social Data Mining to Forecasting Socio-Economic Crisis

Spatiotemporal Detection of Unusual Human Population Behavior Using Mobile Phone Data

Electronic human resource management (e-HRM): A new concept for digital age

Conceptual Model for Integrated Meso-Scale Fire Risk Assessment in the Coastal Catchments in Croatia

Informing crisis alerts using social media: Best practices and proof of concept

Digital privacy and data protection knowledge and skills of university students in Croatia: Preliminary findings

ENVIRONMENTAL GEO-INFORMATIONAL MONITORING SYSTEM FOR THE CIVIL AND FIRE SAFETY SERVICES OF UKRAINE

A lightweight framework for cyber risk management in Western Balkan higher education institutions

The theoretical and methodological analysis of challenges, risks and threats in modern theory of national security