Ensuring cyber security

The objectives of the reform are to strengthen the strategic and operational level of entities which are part of the national cybersecurity system. The reform ensures greater capacity of public administration to respond to cyber incidents.

The new Information Security Act (ZInfV-1) regulates the field of information and cyber security and establishes a national information security system in Slovenia. It defines the powers, tasks, organization, and operation of the competent national authority, the authority for managing large-scale incidents and crises, the single point of contact, and the computer security incident response teams (CSIRTs). It defines the adoption of the Cyber Security Strategy of the Slovenia, the field of cyber defense, and the cooperation of competent authorities and CSIRT groups. 

To ensure the smooth functioning of key social and economic activities, it sets out risk management measures, reporting obligations for obligated parties, and the possibility of voluntary incident reporting, and regulates information exchange and supervision, including in the field of cybersecurity certification.