CYBER (IN)SECURITY IN BOSNIA AND HERZEGOVINA: CHALLENGES AND PERSPECTIVES

Abstract

This paper examines the current state of cyber security in Bosnia and Herzegovina, focusing on legislative frameworks, incidents of cyber attacks, and potential avenues for advancement in line with Bosnia and Herzegovina’s aspirations for European Union membership. This analysis highlights the urgent need for comprehensive cyber security legislation that aligns with the EU’s Network and Information Security (NIS) Directive. Bosnia and Herzegovina has experienced numerous cyber attacks, including ransomware incidents, phishing campaigns, and DDoS attacks. These incidents underscore significant deficiencies in protecting critical infrastructure and IT systems. Case studies reveal that government institutions, the financial sector, and educational establishments are frequent targets. A pervasive lack of awareness about cyber security among employees and the general populace further increases system vulnerabilities. In this paper, a case study of Sarajevo Canton will be conducted, with the primary goal of highlighting, through real world examples, all the deficiencies in the security system’s response to cyber attacks.