Protection of Critical Infrastructure under National Framework: Slovenia's critical infrastructure framework covers energy, transport, food, drinking water, health, finance, environmental protection, and ICT networks and systems. Protection measures include risk assessment, resilience planning, protection measures, continuity arrangements, and recovery mechanisms.
Sources: https://pisrs.si/pregledPredpisa?id=ZAKO9003
https://www.gov.si/assets/ministrstva/MO/Publikacije/Kriticna-infrastruktura-v-Republiki-Sloveniji.pdf
Cybersecurity Obligations for Critical Entities under ZInfV-1: Critical infrastructure operators and entities operating in highly critical and other critical sectors are covered by the Information Security Act (ZInfV-1). The framework establishes cybersecurity risk-management obligations, incident reporting requirements and supervisory arrangements for critical entities.
Sources: https://www.gov.si/assets/vladne-sluzbe/URSIV/Datoteke/Dokumenti/Pojasnila-k-ZInfV-1_verzija1.4-januar2026.pdf
Sector Leadership for ICT Critical Infrastructure Protection: Within URSIV, the Information and Cyber Security Division is responsible for the critical infrastructure sector covering information and communication networks and systems. The division develops protection measures, supports identification of critical entities and assists operators with protection planning.
Sources: https://www.gov.si/en/state-authorities/government-offices/government-information-security-office/about-the-office/information-and-cyber-security-division/
National CSIRT Support for Critical Services: SI-CERT and SIGOV-CERT provide incident-handling support, threat monitoring, vulnerability handling and incident response capabilities for organisations delivering essential and critical services. Cybersecurity is explicitly recognised as supporting the continuity of critical and important services.
Sources: https://www.gov.si/teme/informacijska-in-kibernetska-varnost/
Critical Infrastructure Cybersecurity Capacity Building: URSIV has conducted dedicated work on protecting critical infrastructure from cyberattacks. A multi-stakeholder initiative examined cybersecurity across critical sectors including water, energy, health and finance and produced recommendations focused on resilience, information sharing, incident response exercises and collaboration.
Sources: https://www.gov.si/novice/2022-08-04-zascita-kriticne-infrastrukture-pred-kibernetskimi-napadi/
National Coordination, Exercises and Resilience Activities: URSIV coordinates operational cybersecurity capabilities and supports training, exercises and awareness activities for entities covered by cybersecurity legislation. The office also serves as the national authority for cyber crisis management and cooperation with European partners.
Sources: https://www.gov.si/en/state-authorities/government-offices/government-information-security-office/about-the-office/
