North Macedonia Rises to 30th Globally in Cybersecurity

North Macedonia has made significant progress in the National Cyber Security Index (NCSI), the Ministry of Digital Transformation announced. Among the 155 countries and territories included in the ranking, the country has risen by 29 places and now ranks 30th.

With 84.17 points out of a possible 100, North Macedonia ranks among the countries with a high level of preparedness to prevent cyber risks and manage incidents in this field. According to the ministry, this progress has also been highlighted by international media, which have included the country among those that have recently made significant improvements to their national cybersecurity capabilities.

The ministry explained that the National Cyber Security Index was developed by the Estonian e-Governance Academy (eGA). Countries’ preparedness is measured through 49 indicators across 12 areas covering strategic capabilities, preventive measures and responses to cyber threats. The assessment considers published laws, official documents, institutional mechanisms and evidence of the practical implementation of measures.

The latest data show that North Macedonia received the highest possible score in several key sectors. These include cybersecurity policy, critical information infrastructure protection, education and professional development, personal data protection, cyber incident response and the fight against cybercrime.

Minister of Digital Transformation Stefan Andonovski said the 29-place rise provides international evidence that the reforms being implemented are producing concrete and measurable results. He said that clearer institutional responsibilities have been established over the past period, a modern legal framework has been put in place, and mechanisms for protecting critical infrastructure and managing cyber incidents have been strengthened. According to him, this result is not the end point, but creates an obligation to continue efforts to strengthen the country’s cyber resilience with even greater intensity.

Andonovski attributed this progress to coordinated work among institutions and a series of systemic measures. These include the adoption of the Law on the Security of Network and Information Systems, the adoption of the 2025–2028 Cybersecurity Strategy together with its Action Plan, the establishment of national coordination mechanisms, and the strengthening of capacities for reporting and handling cyber incidents.

The new legal framework defines the responsibilities of the Ministry of Digital Transformation for the security of network and information systems. It also establishes obligations related to cyber risk management and incident reporting, while increasing the level of protection for essential and important entities.