Crisis Management Days

A cross-sector analysis of a cybersecurity crisis preparedness in Croatian organizations

Ivan Biošić

Algebra Bernays University

Martina Dragičević

Keywords: cybersecurity, Crisis Communication, crisi management, preparedness

---

Abstract

The increasing digitalisation of organisational processes and the rising complexity of cyber threats have made cybersecurity a key concern within the wider framework of crisis management theory. Building on established crisis management models, especially those emphasising the pre-crisis phase of preparedness, prevention, and mitigation (Coombs, 2015; Mitroff, 1994), modern authors recognise that effective cybersecurity crisis management goes beyond reactive incident response to include proactive organisational capabilities, such as risk assessment, strategic planning, and stakeholder coordination. The European regulatory landscape has further accelerated this shift, with the NIS2 Directive introducing cross-sectoral obligations that require a systematic approach to cyber resilience. Nevertheless, the level of organisational preparedness to handle cyber incidents varies greatly across sectors, regulatory frameworks, and available resources, with limited empirical evidence from the Croatian context.

This paper aims to assess the level of cybersecurity crisis preparedness among Croatian organisations and to identify whether there are statistically significant differences among specific sectors. The research employs a quantitative approach, using a structured survey questionnaire distributed to organisations in the private sector, critical infrastructure, and educational institutions in Croatia. The questionnaire covers areas such as the presence of crisis plans for cyber incidents, the involvement of communication teams, the use of simulations and exercises, employee awareness, compliance with regulatory requirements, notably Directive (EU) 2022/2555 (NIS2) and the Croatian Cybersecurity Act (NN 14/2024), and resource allocation for cybersecurity. Data are analysed through descriptive and inferential statistics, with a comparative analysis across sectors. Results are expected to show variability in preparedness levels across organisations in different sectors. The study provides empirical insights into the state of cybersecurity crisis preparedness in Croatia at organisational and sectoral levels.

---

Author Biographies

Ivan Biošić, Algebra Bernays University

Ivan Biošić serves as an executive director and senior communications consultant at Reborn Communications, with a mission of bringing brands closer to people. He is responsible for client relations and managing day-to-day operations in public relations, stakeholder relations, marketing campaigns, creative, design, events, and digital projects.  Ivan shares his expertise as an Adjunct Lecturer (Social Sciences) in the Department of Communication Sciences at Algebra Bernays University, teaching courses in Written Communication, Business Communication, and Communication and Public Presentation Skills.  Before founding Reborn Communications, Ivan managed communications and enrollment campaigns at the Edward Bernays University of Applied Sciences and has worked on both the client and agency sides.  Ivan holds a master’s degree in public relations management and a bachelor’s degree in communications management from the Algebra Bernays University of Applied Sciences. He is currently enrolled in a university postgraduate program in Public Relations at the Faculty of Political Science, University of Zagreb, while simultaneously completing his second master’s degree in Media and Journalism at the School of Advanced Social Studies in Slovenia, as he prepares to pursue a PhD. Ivan has authored and co-authored several scientific and professional papers published in scientific journals and conference proceedings. He has presented at multiple international scientific and professional conferences and published book reviews. His research interests include strategic communications, marketing communications, brand management, and brand equity in the higher education and services industries. He is a member of leading international professional organisations, including the Chartered Institute of Public Relations (MCIPR), the International Association of Business Communicators (IABC), and the Centre for Strategic Communication Excellence (GCSCE).

Martina Dragičević

Martina Dragičević is Director of Regulatory Affairs, EU Funds, and Wholesale at A1 Croatia, bringing over 20 years of experience in the electronic communications sector and related industries. She holds a law degree from the University of Zagreb, a Master's degree in EU Competition Law from King's College London, and an MBA in General Finance from the Swiss School of Business Management (SSBM).

In her current role, she leads a team responsible for sector-specific (ex ante) and general competition (ex post) regulation across a broad portfolio — spanning wholesale and retail electronic communications markets, the energy sector, cybersecurity, digital and media services, and ESG strategy implementation. She also oversees the strategic use of EU funds to support business processes and corporate strategy, as well as institutional communications at both national and EU level.

Martina is actively engaged in several industry bodies, including the Croatian Employers' Association (HUP), the Croatian Chamber of Commerce, AmCham, the Foreign Investors Council (FIC), and the XEnergy Association. Within HUP, she serves as Head of the Telecommunications and Connectivity Working Group, Vice-Chair of the HUP ICT Executive Board, and Head of the HUP Cybersecurity Coordination.