The fourth CyberAgent project seminar “Protecting SME Critical Infrastructure” brought together international experts seeking to help small and medium-sized enterprises (SMEs) strengthen their cyber resilience. During the event, the latest project results were presented, and the most relevant cybersecurity threats and practical solutions were discussed.
The seminar was organized by IT Akademija and TIMTAL together with partners, and moderated by Jorė Bendinskaitė, Public Relations Specialist at the Kaunas Faculty of Vilnius University.
Strengthening the Cyber Resilience of European SMEs through Education and Cooperation
Dr. Renata Danielienė, representative of Vilnius University and coordinator of the CyberAgent project, emphasized in her opening speech that SMEs are an integral part of the European economy — from logistics and healthcare to IT services and energy supply chains. However, many of them still underestimate the importance of cybersecurity or fail to allocate sufficient resources until they experience a real attack.
“Our goal is not only to teach cybersecurity — we aim to develop internal ‘change agents’ capable of identifying risks, making informed decisions, and initiating change within their companies,” stressed Dr. Danielienė.
Speaking about the latest achievements, she introduced eight developed learning modules designed for higher education institutions, vocational training providers, and companies. The courses combine technical and soft skills — from system security to decision-making and risk awareness. In addition, an extra module titled “Strengthening Career Opportunities in Cybersecurity” was developed to encourage more women and newcomers to choose this field.
From January 2025, project partners will begin pilot training sessions, providing SME employees, vocational training participants, and students with the opportunity to enhance their cybersecurity competencies using the developed learning modules.
Concluding her presentation, Dr. Danielienė emphasized that cybersecurity is not only about technology but also about the people who manage it. “If at least one person in every company is able to recognize cyber threats and respond appropriately — together we are building a stronger Europe,” she said.
Cybersecurity Culture and Principles of Responsible Security in Small Enterprises
Dr. Vilius Benetis, CEO of NRD Cyber Security,
presented global insights into attacks on SME critical infrastructure and emphasized that such organizations often lack sufficient resources to ensure professional cybersecurity. According to him, employing a moderately qualified security specialist can cost more than EUR 40,000 per year — an amount that is too high for many small businesses.
Dr. Benetis highlighted an important cultural aspect — society’s attitude toward victims of cyberattacks. “When we fall ill, no one blames us. But when we become victims of a cyberattack, society often tends to blame insufficient protection,” he noted. According to the expert, such an attitude harms the development of a mature cybersecurity culture and discourages open incident reporting and cooperation.
Speaking about practical solutions, he introduced the concept of “reasonable cybersecurity”, based on the CIS Critical Security Controls methodology. This approach includes essential security hygiene measures: asset inventory, access management, system updates, data backups, and employee training.
Dr. Benetis emphasized that these measures allow small enterprises to achieve a “reasonable” level of protection that helps avoid the most significant risks and demonstrates a responsible approach to digital security. During the Q&A session, he also discussed the application of the NIS2 Directive, encouraging companies to appoint responsible persons and use external services to meet new requirements.
The Human Factor – the Weakest Yet Most Important Link in Cybersecurity
Dr. Arzu Kilitci Calayır, cybersecurity lecturer, researcher, and founder of the initiative Technologist Women, emphasized that cybersecurity is now one of the most significant global risks alongside climate change. She highlighted that cyberattacks occur constantly and pose increasing threats to individuals, organizations, and states.
The speaker stressed the human factor — many security breaches occur due to human error. “Amateurs hack systems; professionals hack people,” she quoted cybersecurity expert Bruce Schneier, emphasizing that emotions, trust, and habits often become tools in social engineering attacks.
Dr. Arzu Kilitci Calayır proposed shifting toward a human-centered cybersecurity model, integrating principles of human–technology interaction. She introduced a blockchain-based digital identity concept designed to ensure data integrity and traceability.
At the end of her presentation, Dr. Arzu Kilitci Calayır discussed the role of Artificial Intelligence (AI) in the future of cybersecurity. She noted that AI can become both a powerful defensive tool — helping detect anomalies and proactively respond to threats — and a dangerous weapon when used by malicious actors. “The most important thing is to understand why and how we use technology. An ethical approach must become an integral part of cybersecurity,” she emphasized.
Conclusions and Next Steps
During the seminar, experts agreed that strengthening SME cybersecurity must be based not only on technological solutions but also on awareness, responsible management, and education. Technologies, including artificial intelligence, can enhance protection and accelerate threat detection, but they also introduce new challenges related to their ethical and responsible use.
The CyberAgent project will continue these discussions and organize new events for cybersecurity professionals, representatives of higher education institutions, and SMEs.
More information about upcoming events and project activities is available on the CyberAgent project website and social media channels.
Presentations:
- CyberAgent Project Overview,
Dr. Renata Danielienė, Vilnius University - Attaks on Critical Infrastructures (SME),
Dr. Vilius Benetis, CEO, NRD Cyber Security - Security of Critical Infrastructures,
Dr. Arzu Kilitci Calayır, cybersecurity lecturer, researcher, and founder of “Technologist Women”
Video recordings (in English):
- Attacks on Critical Infrastructures (SME),
Dr. Vilius Benetis - Security of Critical Infrastructures,
Dr. Arzu Kilitci Calayır
Project Coordinator – Kaunas Faculty of Vilnius University.
Project Manager: Dr. Renata Danielienė, Institute of Social Sciences and Applied Informatics.
renata.danieliene@knf.vu.lt
