Sarajevo Cyber Security Summit 2026 Highlights Supply‑Chain Resilience Risks for Western Balkans Organizations
What Happened — The e‑Transformacija Association will host the sixth Sarajevo Cyber Security Summit on 18‑19 Nov 2026. The program focuses on “supply‑chain risk”: how a compromised supplier account, an exposed edge device, or a cloud‑provider outage can interrupt critical business processes. Organizers cite ENISA’s 2026 Threat Landscape, which found 73 % of targeted entities classified as essential under NIS 2, with public administration accounting for 32 % of cases and ransomware delivering the greatest short‑term impact. Sessions will also cover post‑quantum cryptography migration, AI‑enabled threats, network security, data‑center resilience and incident‑recovery rehearsals.
Why It Matters for Trust & Control Assurance — The summit spotlights the control objective of maintaining continuous visibility and assurance over third‑party services and dependencies, a single control that maps to many frameworks (e.g., NIST CSF Identify – Supply‑Chain Risk Management, ISO 27001 A.15).
Who Is Affected — Public‑sector bodies, critical‑infrastructure operators, and private enterprises in the Western Balkans that rely on external suppliers, network devices or cloud services.
Recommended Actions —
- Build and maintain an up‑to‑date inventory of all external dependencies, rating each by criticality to business operations.
- Deploy continuous monitoring of third‑party security posture and collect defensible evidence for audit readiness.
Technical Notes — ENISA’s 2026 data set shows 73 % of targeted entities are essential or important under NIS 2; ransomware remains the top short‑term impact. NIST’s post‑quantum standards (FIPS 203‑205) are referenced as a migration priority for long‑lived secrets. Source: https://www.helpnetsecurity.com/2026/11/06/sarajevo-cyber-security-summit-2026/

