Despite mounting cyber incidents, Bosnia and Herzegovina remains the only country in South-East Europe without a formalized national CERT or a cybersecurity strategy. Without urgent institutional reform, it risks further damage to its infrastructure, economy, and overall safety of its citizens.

Key points:

  1. Bosnia and Herzegovina lacks a national cybersecurity strategy and a national CERT, rendering its institutions, critical infrastructure, and citizens vulnerable to potent cyberattacks.
  2. Political fragmentation, lack of will, and daily political issues have stalled progress, despite substantial international and external support.
  3. The creation of a robust legal framework, investment in the cyber capacity of BiH institutions, as well as structured cooperation with international, private, and non-governmental sectors, are the next steps towards enhanced BiH cybersecurity.