A simulated cyber emergency brought together security specialists from across Bosnia and Herzegovina on 28–29 October in Neum. The two-day Cybersecurity Tabletop Exercise tested how different government bodies could work together during a major attack, focusing on coordination between agencies, real-time communication, data sharing and unified crisis response.
TAG International and the e-Governance Academy (eGA) organised the drill in collaboration with Bosnia and Herzegovina's Ministry of Communications and Transport and Ministry of Security. The goal was to build institutional readiness and resilience when facing serious cyber threats that cross organisational boundaries.
A central finding from the exercise was that individual institutions can maintain control over their own infrastructure and decision-making while establishing shared systems for warning, coordination and intelligence exchange. Such arrangements allow faster and more effective responses to incidents that affect multiple agencies at once.
Cyberattacks often affect more than one institution, which is why it is important that we cooperate, share information in a timely manner and know how to respond together. Exercises like this help us assess how prepared we are and where we can improve coordination. Ultimately, we do all of this to ensure safe and reliable services for citizens and to better protect them from the consequences of cyber threats.
Edin Forto, Minister of Communications and Transport of Bosnia and Herzegovina
The simulation presented a realistic attack scenario unfolding across multiple stages, from early detection through situations demanding coordinated action by numerous agencies. Participants examined technical countermeasures, keeping essential services running, who bears responsibility for what, and how to communicate with the public—all while making choices with incomplete data and time pressure.
Cybersecurity is now one of the key prerequisites for the stable and secure functioning of institutions and society as a whole. Through this exercise, we aim to improve the preparedness of institutions in Bosnia and Herzegovina to act promptly and in a coordinated manner in the event of cyber incidents, strengthen inter-institutional cooperation and enhance capacities to respond to increasingly complex cyber threats. Sharing experiences, testing existing procedures and jointly examining potential challenges are important steps towards building a more resilient cybersecurity system in Bosnia and Herzegovina
Mladen Mrkaja, Assistant Minister of Security for ICT at the Ministry of Security of Bosnia and Herzegovina
Key Lessons and Areas for Improvement
Analysis of the simulation underscored the need for transparent assignment of duties, regular data exchange among agencies and shared knowledge of how cyber emergencies develop. Particular focus fell on synchronising technical action, maintaining core services, security investigations and messaging to the public.
Institutions' readiness to respond to cyber threats depends not only on technology but also on their ability to connect and cooperate, share information in a timely manner, coordinate their actions and make decisions under pressure. Exercises like this give us an opportunity to test these processes in a controlled environment, identify potential challenges and improve preparedness before a real incident occurs. Preparedness is built through continuous cooperation, joint exercises and investment in the people responsible for responding to cyber threats.
Adin Ibišević, Cybersecurity Advisor at TAG International
The real value of these exercises lies in what happens afterwards. Participants can use what they've learned to improve internal procedures, clarify responsibilities and make faster decisions when a real cyber incident occurs. The EU-funded Cyber Balkans project remains committed to working with all stakeholders in Bosnia and Herzegovina and with international partners to help institutionalise and sustain these potential improvements
Milan Sekuloski, Senior Expert at eGA
From Lessons Learned to Practical Recommendations
Next steps for strengthening cyber defences include spelling out who does what, setting up clear channels for rapid information flow between agencies and holding regular joint drills. Particular weight was given to partnership structures that allow unified action against shared dangers while keeping each organisation's authority and scope intact.
The exercise ran under two parallel funding schemes: Enhancing Cyber Security and Institutional Resilience in Bosnia and Herzegovina, backed by the UK Government, and EU Cyber Balkans II, supported by the European Union. Both initiatives work to raise cybersecurity standards, build government capacity and strengthen crisis response in Bosnia and Herzegovina through planning, hands-on testing and cross-agency teamwork.
