Institutions in Bosnia and Herzegovina test joint response to major cyber incidents
Cybersecurity experts in Bosnia and Herzegovina participated in a two-day Cybersecurity Tabletop Exercise held in Neum on 28–29 October.
Through a simulated major cyber incident, participants tested inter-institutional coordination, communication, information sharing and approaches to a joint response. The exercise provided an opportunity to explore practical ways in which institutions can further strengthen cooperation and preparedness to respond to shared cyber threats.
The exercise was organised by TAG International and the e-Governance Academy (eGA), in partnership with the Ministry of Communications and Transport of Bosnia and Herzegovina and the Ministry of Security of Bosnia and Herzegovina, with the aim of strengthening institutional preparedness and resilience to major cyber incidents.
One of the key messages from the exercise was that institutions can retain responsibility for their own systems and decisions while developing shared mechanisms for coordination, early warning and information sharing, enabling them to respond more effectively to threats that extend beyond any single institution.
During the opening of the exercise, Edin Forto, Minister of Communications and Transport of Bosnia and Herzegovina, stated:
“Cyberattacks often affect more than one institution, which is why it is important that we cooperate, share information in a timely manner and know how to respond together. Exercises like this help us assess how prepared we are and where we can improve coordination. Ultimately, we do all of this to ensure safe and reliable services for citizens and to better protect them from the consequences of cyber threats.”
The exercise was based on a realistic cyber incident scenario, and covered different stages of an evolving crisis, from initial warnings to situations requiring a coordinated response from multiple institutions. Participants explored technical response, continuity of essential services, institutional responsibilities and public communication, with particular emphasis on decision-making under pressure and with incomplete information.
“Cybersecurity is now one of the key prerequisites for the stable and secure functioning of institutions and society as a whole. Through this exercise, we aim to improve the preparedness of institutions in Bosnia and Herzegovina to act promptly and in a coordinated manner in the event of cyber incidents, strengthen inter-institutional cooperation and enhance capacities to respond to increasingly complex cyber threats. Sharing experiences, testing existing procedures and jointly examining potential challenges are important steps towards building a more resilient cybersecurity system in Bosnia and Herzegovina”, said Mladen Mrkaja, Assistant Minister of Security for ICT at the Ministry of Security of Bosnia and Herzegovina.
Key Lessons and Areas for Improvement
The final analysis of the simulation highlighted the importance of clearly defined roles and responsibilities, regular information sharing and a shared understanding of how cyber incidents evolve. Particular emphasis was placed on coordinating technical response, continuity of essential services, security and investigative activities, and public communication.
Commenting on the importance of practically testing institutional capacities, Adin Ibišević, Cybersecurity Advisor at TAG International, said: “Institutions’ readiness to respond to cyber threats depends not only on technology but also on their ability to connect and cooperate, share information in a timely manner, coordinate their actions and make decisions under pressure. Exercises like this give us an opportunity to test these processes in a controlled environment, identify potential challenges and improve preparedness before a real incident occurs. Preparedness is built through continuous cooperation, joint exercises and investment in the people responsible for responding to cyber threats.”
Milan Sekuloski, Senior Expert at eGA added: “The real value of these exercises lies in what happens afterwards. Participants can use what they’ve learned to improve internal procedures, clarify responsibilities and make faster decisions when a real cyber incident occurs. The EU-funded Cyber Balkans project remains committed to working with all stakeholders in Bosnia and Herzegovina and with international partners to help institutionalise and sustain these potential improvements”.
From Lessons Learned to Practical Recommendations
Potential steps for further improvement include clarifying roles and responsibilities, developing straightforward procedures for the timely exchange of information and conducting regular joint exercises. Particular attention was given to cooperation models that enable a coordinated response to shared threats while preserving the mandates and responsibilities of individual institutions.
The Cybersecurity Tabletop Exercise was conducted under two complementary programmes: Enhancing Cyber Security and Institutional Resilience in Bosnia and Herzegovina, funded by the UK Government, and EU Cyber Balkans II, funded by the European Union.
Both programmes contribute to strengthening cybersecurity, institutional capacities and resilience in Bosnia and Herzegovina through preparation, practical testing and inter-institutional cooperation.
