Archived data from 2016-2023

Kosovo(*) 59.74

N/A National Cyber Security Index
N/A Global Cybersecurity Index
N/A ICT Development Index
N/A Networked Readiness Index
Population 1.9million
Area (km2) 10.9thousand
GDP per capita ($) 13.0thousand
NCSI FULFILMENT PERCENTAGE
NCSI DEVELOPMENT TIMELINE 3 years All data
RANKING TIMELINE
NCSI Update Data source
31 Mar 2023 Public data collection

Version 31 Mar 2023

GENERAL CYBER SECURITY INDICATORS
  • 1. Cyber security policy development 5/7 71%
    5
    7 71%
    • 1.1. Cyber security policy unit 3
      3
      3
      Requirements
      Criteria

      A central government entity (ministry or equivalent) has a specialised official or unit responsible for national cyber security policy development.

      Accepted references

      Official website or legal act

      Evidence

      https://gzk.rks-gov.net/ActDetail.aspx?ActID=39317

      Regulation (QRK) – NO.02/2021 for the areas of administrative responsibility of the Office of the Prime Minister and Ministers (link above), see p. 48, no. 5.1.

      Ministry of Internal Affairs
      “Prepares the public policies, drafts legal acts, drafts and adopts the bylaws, and determines the mandatory standards in the field of public order and public safety, cyber security (…)”.

      https://gzk.rks-gov.net/ActDetail.aspx?ActID=70933

      Law on Cyber Security (Law NO. 08/L-173), link above, see Article 23 and Article 16:

      Article 23 (Cyber Security Strategy and Action Plan) 
      "1. The National Strategy for Cyber Security and the Action Plan are drawn up by the Ministry of Internal Affairs and approved by the Government of the Republic of Kosovo. ASK [Cyber Security Agency] and KSHSK [State Council for Cyber Security]  participate and provide professional assistance to the Ministry in the drafting of the State Strategy and Action Plan. 
      2. KSHSK oversees the implementation of the national strategy for cyber security and the action plan. All institutions that have obligations for the implementation of the Strategy and the Action Plan report to KSHSK at the end of each year on the status of the implementation of the actions. (…)"

      Article 16 
      "1. ASK [Agjencinë për Siguri Kibernetike; the Cyber Security Agency] is the institution responsible for proposing and implementing cyber security measures in the Republic of Kosovo."

    • 1.2. Cyber security policy coordination format 2
      2
      2
      Requirements
      Criteria

      The central government has a committee, council, working group, etc. for national-level cyber security policy coordination.

      Accepted references

      Official website or legal act

      Evidence

      https://gzk.rks-gov.net/ActDetail.aspx?ActID=70933

      State Council for Cyber Security (Këshilli Shtetëror për Siguri Kibernetike, KSHSK); Law on Cyber Security (Law NO. 08/L-173), link above, see Article 20.

      Article 20 
      “1. The State Council for Cyber Security is an independent advisory body of the Government of the Republic of Kosovo and the business community, consisting of high-level representatives from government institutions, law enforcement institutions, public and private organizations and the scientific community.
      (…) 
      4. KSHSK is responsible for strengthening coordination and cooperation between various public institutions with competences in cyber security issues, as well as between the public and private sectors. Also, this council will facilitate the decision-making process through the analysis, study and proposal of initiatives at the national and international level.”

    • 1.3. Cyber security strategy 0
      0
      1
      Requirements
      Criteria

      The central government has established a national-level cyber security strategy or other equivalent document.

      Accepted references

      Valid official document

      Evidence
    • 1.4. Cyber security strategy implementation plan 0
      0
      1
      Requirements
      Criteria

      The central government has established an implementation plan to the national-level cyber security strategy or other equivalent document.

      Accepted references

      Valid official document or its enforcement act

      Evidence
  • 2. Cyber threat analysis and information 3/5 60%
    3
    5 60%
    • 2.1. Cyber threats analysis unit 3
      3
      3
      Requirements
      Criteria

      A central government entity has a national-level unit that is specialised in national strategic cyber threat situation analysis.

      Accepted references

      Official website or legal act

      Evidence

      https://gzk.rks-gov.net/ActDetail.aspx?ActID=70933

      The Cyber Security Agency [Agjencinë për Siguri Kibernetike, ASK]; Law on Cyber Security (Law NO. 08/L-173), link above, see Article 9 (2) and Article 16 (6). 

      Article 9 (2)
      “2. In order to guarantee cyber security, ASK in coordination with the Ministry of Defense, the Regulatory Authority of Electronic and Postal Communications and other security institutions, analyzes the risks that affect the security of the systems and their impact on the state, society and the security of the systems.”

      Article 16 (6)
      “ASK conducts research and analysis, as well as issues recommendations for implementation by other institutions.”

    • 2.2. Public cyber threat reports are published annually 0
      0
      1
      Requirements
      Criteria

      The public part of the national cyber threat situation analysis is published at least once a year.

      Accepted references

      Official public report

      Evidence
    • 2.3. Cyber safety and security website 0
      0
      1
      Requirements
      Criteria

      Public authorities provide at least one cyber safety and security website for cyber security and ICT professionals, and regular users.

      Accepted references

      Website

      Evidence
  • 3. Education and professional development 2/9 22%
    2
    9 22%
  • 4. Contribution to global cyber security 1/6 17%
    1
    6 17%
BASELINE CYBER SECURITY INDICATORS
INCIDENT AND CRISIS MANAGEMENT INDICATORS
Information Disclaimer

The information provided on the NCSI website is based on publicly available evidence materials. The appearance in the index and subsequent ranking is commensurate to the existence and public availability of such information. The NCSI links to third party websites and information. The NCSI and eGA are not responsible for the accuracy or completeness of third party website information.

What can I do to improve my country's data in NCSI?

Become a data contributor Update a specific indicator with evidence data

CONTRIBUTORS

Kosovo (*)
This designation is without prejudice to positions on status, and is in line with UNSCR 1244/1999 and the ICJ opinion on the Kosovo declaration of independence.