In today’s interconnected world, cybersecurity and artificial intelligence have become critical concerns. Yet, Bosnia and Herzegovina finds itself inadequately prepared to confront these growing threats. Darko Brkan, co-author of the policy brief “Cybersecurity in BiH: Progress, Potential, and Unfinished Business,” warns of the pressing cybersecurity challenges facing Bosnia and Herzegovina (BiH) today. The brief highlights shortcomings in legislation, public awareness, and coordination, emphasizing the need for swift political action in order to protect national security, stability, and peace processes in the country. Brkan, who identifies several key issues affecting BiH’s cybersecurity readiness, states that one of the most challenging and urgent aspects to consider is disinformation. One of the critical issues Brkan identified is the absence of adequate legislation and a strategic framework for cybersecurity in BiH. While cybersecurity laws exist at the state and entity levels, they fail to sufficiently address all relevant aspects. Additionally, although BiH has committed to implementing international agreements and conventions, further aligning with European Union (EU) cybersecurity standards is necessary to fortify the country’s cyber defenses. Brkan acknowledges the recent establishment of a Computer Incident Response Team (CERT) for BiH institutions is a positive step, but he says that’s just one piece of the puzzle. When asked about the broader solution, Brkan states, “To effectively tackle cyber threats, BiH needs a robust cybersecurity strategy encompassing various areas, including public-private partnerships, regional and international cooperation, and investments in IT infrastructure.” Cyber threats have transcended borders to become a global issue, and BiH is no exception. However, the political climate in the country tends to downplay the gravity of cybersecurity. “This lack of political will and interest has hindered the formulation and implementation of effective cybersecurity policies, ultimately failing to keep our citizens safe,” says Brkan. In a separate report, the Cyber Security Excellence Centre writes, “Bosnia and Herzegovina finds itself in a disadvantaged position, being the last Western Balkans country without a functioning all-encompassing CSIRT [Computer Security Incident Response Team]. This leaves BiH, its government, economy and citizens exposed to cyber harm to such an extent that it may jeopardize the potential benefits of digitalization for the economy and society and make the country more vulnerable to malign external influences in the cyber domain.” Despite these concerns, BiH has been relatively spared from major cyberattacks compared to other countries such as neighboring Montenegro, which suffered a major cyber-attack in August 2022. Nevertheless, Brkan warns that this should not create a false sense of security. In an article on the August 2022 incident, AP news stated, “The coordinated attack that started around Aug. 20 crippled online government information platforms and put Montenegro’s essential infrastructure, including banking, water and electricity power systems, at high risk.” In a world facing a growing number of cyber-attacks which pose serious security concerns for infrastructure and citizens, Brkan says that the attack in Montenegro should serve as a grave warning to BiH policymakers about the dangers of neglecting cybersecurity.