日内瓦安全部门治理中心-西巴尔干地区的网络安全能力建设和捐助者协调（英文）-2021.5-17页_528kb

Cybersecurity Capacity Building and Donor Coordination in the Western Balkans

Core Content

This document provides an in-depth analysis of cybersecurity capacity building (CCB) and donor coordination in the Western Balkans. It highlights the growing interest in enhancing the region's cyber resilience and the various international actors involved in this process. The document emphasizes the need for improved coordination among donors to avoid duplication of efforts, ensure coherence, and align CCB activities with national and regional priorities.

Main Points

Cybersecurity Capacity Building Overview

• Definition: CCB is the development and reinforcement of processes, competences, resources, and agreements aimed at strengthening national and collective capabilities to respond to cyber-related challenges.
• Importance: As digital transformation accelerates, CCB has become a key tool for improving national security, protecting citizens and critical infrastructure, and fostering international cooperation.
• Challenges:
  • Limited human capacity and political will.
  • Inconsistent national cybersecurity strategies and legislation.
  • Lack of formal categorization of critical infrastructure.
  • Inadequate cybersecurity culture among citizens.
  • Resource scarcity and shifting political priorities, especially post-pandemic.

Key Actors in Cybersecurity Capacity Building

• European Union (EU):

  • Focuses on aligning partner countries' cybersecurity policies with EU standards.
  • Funded projects include iPROCEEDS and ENSYSEC, which support legal, institutional, and technical reforms.
  • Supports public-private partnerships, especially through the Petnica Group in Serbia.
  • An 8-million-euro program was announced in 2020 but later cancelled due to re-assessment.

• United Kingdom (UK):

  • Prioritizes security cooperation and anti-corruption efforts post-Brexit.
  • DCAF-led project supports governance reforms in four Western Balkan countries.
  • Sponsors Chevening Cyber Security Fellowships for mid-career professionals.

• United States (US):

  • Emphasizes a defense-forward strategy, strengthening NATO alliances and cyber defense.
  • Carnegie Mellon University's Software Engineering Institute (SEI) and the George C. Marshall European Center for Security Studies support CCB through training and technical assistance.
  • Engages with both NATO and non-NATO states, including Serbia.

• OSCE:

  • Focuses on cybersecurity governance and confidence-building measures.
  • Supported by Germany and the US, it has conducted CCM assessments and helped develop national implementation roadmaps.
  • Engages in regional and international CERT cooperation and table-top exercises.

• World Bank:

  • Supports economic transformation and EU accession.
  • Launched the Global Cybersecurity Capacity Program in 2016, with follow-up in 2019.
  • Collaborates with institutions like the GCSCC and KISA to provide assessments and training.

• United Nations (UN):

  • Through ITU and UNDP, provides technical assistance and supports legal and policy frameworks.
  • ITU has engaged in national CERT development in several Western Balkan countries.
  • UNDP supports cybersecurity initiatives in Kosovo*, including legal and policy development.

Key Information

Cyber Maturity in the Western Balkans

• Cyber maturity in the region ranges from start-up to formative levels.
• Several countries lack formal national cybersecurity strategies or legislation.
• CERTs exist but vary in their affiliation with international consortia.
• There is a growing but still insufficient cybersecurity culture among citizens.

Coordination Challenges

• Duplications: Multiple actors are working on similar objectives, leading to inefficiencies.
• Resource Allocation: Donors face challenges in aligning resources and strategies.
• Policy Alignment: Donors must ensure that their interventions align with national policy objectives.
• Geopolitical Tensions: Rising tensions complicate donor coordination and strategy implementation.

Coordination-by-Design

• Coordination should be integrated into the design and implementation of CCB projects.
• It helps in aligning objectives, sharing best practices, and avoiding duplication.
• It supports the development of a unified approach despite multiple funding sources.

Recommendations

• Stakeholder Mapping: Utilize tools like the Cybil Portal to identify and understand key actors.
• Policy Analysis: Ensure that CCB projects are informed by a thorough analysis of national policy priorities.
• Coordination Mechanisms: Develop and implement coordination frameworks that include both national and international stakeholders.
• Enhanced Partnerships: Foster strategic partnerships between donors, governments, and civil society to enhance the effectiveness and sustainability of CCB initiatives.

Conclusion

The Western Balkans remain a strategically important region for international cybersecurity capacity building. While progress has been made, coordination among donors is essential to ensure that efforts are coherent, effective, and sustainable. The document advocates for a more holistic and inclusive approach to CCB that considers both technical and political dimensions, enabling meaningful international engagement on the peace and security of cyberspace.