Cybersecurity and the Slovenian Electrical Grid
Regulation and Policy Recommendation
DOI:
https://doi.org/10.46282/blr.2026.10.1.1178Keywords:
Cybersecurity, Electrical Grid, Critical Infrastructure, Slovenia, NIS2 Directive, Legislative QualityAbstract
This article examines cybersecurity risks to the Slovenian electrical grid, a critical infrastructure asset, amid escalating global threats from state-sponsored actors, geopolitical tensions, and technological vulnerabilities, including ICT interdependencies, legacy systems, IoT devices, and supply chain weaknesses. Adopting an interdisciplinary lens from law, public policy, and cybersecurity, it addresses three research questions: identifying cyber threats, evaluating Slovenia's policy framework and legal regime, and proposing enhancements to resilience. Through normative-dogmatic, dialectical methods and a Xanthakian qualitative assessment of legislative quality, focusing on effectiveness, clarity, precision, and unambiguity, it uncovers gaps such as inconsistent strategic prioritisation, scattered provisions, and reactive approaches. Recommendations include formalising stakeholder cooperation, developing grid-specific strategies, mandating annual cyber stress tests, integrating AI-driven modelling, and refining drafting to ensure unified terminology. The study highlights Slovenia's need for proactive, EU-harmonised measures to bolster energy security amid an evolving cyber landscape.
References
Abraham, D and others, ‘Consequence Simulation of Cyber Attacks on Key Smart Grid Business Cases’ (2024) 12 Frontiers in Energy Research https://doi.org/10.3389/fenrg.2024.1395954
Abramov, A, ‘Cybersecurity in the Republic of Slovenia—One Can Never Be Too Careful’ (2024) 79 Pravnik: Revija za Pravno Teorijo in Prakso 471 https://heinonline.org/HOL/Page?handle=hein.journals/pravnik79&id=471&collection= accessed 28 January 2026.
Araszkiewicz, M and Florczak-Wątor, M, ‘AI and the Principles of Proper Legislation: Enhancing Quality, Understandability, and Consistency in Legal Texts’ (2025) 13(3) The Theory and Practice of Legislation https://doi.org/10.1080/20508840.2025.2559165
Ayano, K, ‘Cybersecurity in Critical Infrastructure: Protecting Power Grids and Smart Grids’ Cyber Defense Magazine (2024) https://www.cyberdefensemagazine.com/cybersecurity-in-critical-infrastructure-protecting-power-grids-and-smart-grids/ accessed 28 January 2026.
Baumgart, M and Espinosa Apráez, B, ‘On the Implementation of Smart Meters in the European Union: Legal Considerations Regarding Privacy and Personal Data Protection in Times of the Twin Transitions’ in Leal-Arcas, R (ed), Research Handbook on EU Energy Law and Policy (2nd edn, Edward Elgar Publishing 2024) https://doi.org/10.4337/9781035328024.00032
BBC News, ‘Venezuela Blackout: Power Cuts Plunge Country into Darkness’ (30 April 2019) https://www.bbc.com/news/world-latin-america-49079175 accessed 28 January 2026.
Bouramdane, AA, ‘Cyberattacks in Smart Grids: Challenges and Solving the Multi-Criteria Decision-Making for Cybersecurity Options, Including Ones That Incorporate Artificial Intelligence, Using an Analytical Hierarchy Process’ (2023) 3(4) Journal of Cybersecurity and Privacy https://doi.org/10.3390/jcp3040031
Cicilio, P and others, ‘Resilience in an Evolving Electrical Grid’ (2021) 14(3) Energies https://doi.org/10.3390/en14030694
Cottey, A, ‘NATO and the Russia–Ukraine War: Geopolitics, Ideology, and the New Politics of the Alliance’ (2025) 25(4) Defence Studies https://doi.org/10.1080/14702436.2025.2562982
Cybersecurity and Infrastructure Security Agency, Cyber-Attack Against Ukrainian Critical Infrastructure (IR-ALERT-H-16-056-01) (2016) https://www.cisa.gov/news-events/ics-alerts/ir-alert-h-16-056-01 accessed 28 January 2026.
Dolzhikov, AV, ‘The Constitutional Principle of Proportionality: A Legal-Dogmatic Method’ (2021) 53 Вестник Пермского университета. Юридические науки 540–561 https://doi.org/10.17072/1995-4190-2021-53-540-561
Dragos, CHRYSENE Threat Group (no date) https://www.dragos.com/threat/chrysene/ accessed 28 January 2026.
Drinóczi, T and Cormacain, R, ‘Introduction: Illiberal Tendencies in Law-Making’ (2021) 9(3) The Theory and Practice of Legislation https://doi.org/10.1080/20508840.2021.1955483
Farooq, A and others, ‘Impact of Cyber-Attack on Coordinated Voltage Control in Low Voltage Grids’ (2023) 17(11) IET Renewable Power Generation https://doi.org/10.1049/rpg2.12571
FireEye, ‘North Korean Actors Spear Phish U.S. Electric Companies’ (11 October 2017) https://web.archive.org/web/20171012004812/https://www.fireeye.com/blog/threat-research/2017/10/north-korean-actors-spear-phish-us-electric-companies.html accessed 28 January 2026.
Fošner, A and others, ‘Risk Analysis of Critical Infrastructure with the MOSAR Method’ (2024) 10(4) Heliyon https://doi.org/10.1016/j.heliyon.2024.e26439
Gaiser, L, ‘Slovenia: A Fragmented Cyber Security’ in Romaniuk, SN and Manjikian, M (eds), Routledge Companion to Global Cyber-Security Strategy (Routledge 2021).
Galinec, D, Možnik, D and Guberina, B, ‘Cybersecurity and Cyber Defence: National Level Strategic Approach’ (2017) 58(3) Automatika https://doi.org/10.1080/00051144.2017.1407022
Government Information Security Office of the Republic of Slovenia, Protecting Critical Infrastructure against Cyber Threats (2022) https://www.gov.si/assets/vladne-sluzbe/URSIV/Datoteke/Dogodki/Protecting-critical-infrastructure-against-cyber-threats.pdf#page=8.06 accessed 28 January 2026.
Government of the Republic of Slovenia, Policies (no date) https://www.gov.si/en/policies/ accessed 12 November 2025.
Government of the Republic of Slovenia, Defence Act (ZObr) (PISRS) (20 December 1994) https://pisrs.si/pregledPredpisa?id=ZAKO532 accessed 12 November 2025.
Government of the Republic of Slovenia, Act on the Slovenian Intelligence and Security Agency (ZSOVA) (PISRS) (7 April 1999) https://pisrs.si/pregledPredpisa?id=ZAKO1884 accessed 12 November 2025.
Government of the Republic of Slovenia, Cyber Security Strategy: Establishing a System to Ensure a High Level of Cyber Security (2016) https://www.itu.int/en/ITU-D/Cybersecurity/Documents/National_Strategies_Repository/Slovenia_2016_Cyber_Security_Strategy.pdf accessed 28 January 2026.
Government of the Republic of Slovenia, Digital Slovenia 2020—Development Strategy for the Information Society until 2020 (2016) https://www.gov.si/assets/ministrstva/MDP/DID/Digital-Slovenia-2020-Development-Strategy-for-the-Information-Society-until-2020.pdf accessed 28 January 2026.
Government of the Republic of Slovenia, Digital Slovenia 2030 – An Overarching Strategy for Slovenia’s Digital Transformation by 2030 (2023) https://www.gov.si/assets/ministrstva/MDP/Digital_Slovenia_2030.docx accessed 28 January 2026.
Government of the Republic of Slovenia, Decree on the Establishment, Tasks and Organization of the Information Security Office of the Government of the Republic of Slovenia (2025) https://pisrs.si/pregledPredpisa?id=ODLO3026 accessed 28 January 2026.
Ingber, S, ‘Blackout in Venezuela Leaves Its Leaders Casting Blame in the Dark’ NPR (8 March 2019) https://www.npr.org/2019/03/08/701448955/blackout-in-venezuela-leaves-its-leaders-casting-blame-in-the-dark accessed 28 January 2026.
IronNet, ‘Cyber Attacks on the Power Grid’ (19 May 2022) https://www.ironnet.com/blog/cyber-attacks-on-the-power-grid accessed 28 January 2026.
Kazancı, BA, ‘The Strategic Importance of Cyber Security in Electric Energy Policies’ (2024) 14(4) International Journal of Energy Economics and Policy https://doi.org/10.32479/ijeep.16244
Kirvan, P, ‘What Resilience Professionals Need to Know: Protecting Critical Infrastructure – the Power Grid’ Risk and Resilience Hub (14 March 2023) https://www.riskandresiliencehub.com/what-resilience-professionals-need-to-know-protecting-critical-infrastructure-the-power-grid/ accessed 28 January 2026.
Korošec, D, Filipčič, K and Devetak, H (eds), Veliki komentar posebnega dela kazenskega zakonika KZ-1 (Uradni list Republike Slovenije 2023) [The Large Scientific Commentary on the Special Part of the Criminal Code (KZ-1)] https://www.uradni-list.si/knjigarna/knjiga/veliki-znanstveni-komentar-posebnega-dela-kazenskega-zakonika-kz-1-1 accessed 28 November 2025.
Kpegouni, A, Palanga, ETG and Salami, AA, ‘Electricity Grids Facing Cyber Threats: What Approaches for Electricity Companies?’ in 2022 International Conference on High Technology for Sustainable Development (HiTech) (IEEE 2022) https://doi.org/10.1109/HITECH56937.2022.10145560
Macagno, F and Walton, D, ‘Argument from Analogy in Law, the Classical Tradition, and Recent Theories’ (2009) 42(2) Philosophy & Rhetoric https://doi.org/10.1353/par.0.0034
Maiti, S and Dey, S, Smart Grid Security: A Verified Deep Reinforcement Learning Framework to Counter Cyber-Physical Attacks (arXiv 2024) https://doi.org/10.48550/arXiv.2409.15757
Maurya, AK, Singhaal, P and Pathak, HK, ‘Analysis of Cyber Security Attacks on Power System Networks and its Protection Schemes’ in 2024 4th International Conference on Advances in Electrical, Computing, Communication and Sustainable Technologies (ICAECT) (IEEE 2024) https://doi.org/10.1109/ICAECT60202.2024.10469140
Mazhar, T and others, ‘Analysis of Cyber Security Attacks and Its Solutions for the Smart Grid Using Machine Learning and Blockchain Methods’ (2023) 15(2) Future Internet https://doi.org/10.3390/fi15020083
Ministry of Defence, Defence White Paper of the Republic of Slovenia 2020 (2020) https://www.gov.si/assets/ministrstva/MO/Dokumenti/WP2020.pdf accessed 28 January 2026.
Ministry of Defence, Resolution on the National Security Strategy of the Republic of Slovenia (ReSNV-2) (2020) https://www.gov.si/assets/ministrstva/MO/Dokumenti/ReSNV2.pdf accessed 28 January 2026.
Mission Support Center, Idaho National Laboratory, Cyber Threat and Vulnerability Analysis of the U.S. Electric Sector (2016) https://www.energy.gov/policy/articles/cyber-threat-and-vulnerability-analysis-us-electric-sector accessed 28 January 2026.
Muren, PD and Franca, V, ‘National Recovery and Resilience Plan: Slovenia’ (2022) 15(1S) Italian Labour Law E-Journal https://doi.org/10.6092/issn.1561-8048/15691
National Institute of Standards and Technology, Critical Infrastructure (no date) https://csrc.nist.gov/glossary/term/critical_infrastructure accessed 28 January 2026.
Nguyen, T and others, ‘Electric Power Grid Resilience to Cyber Adversaries: State of the Art’ (2020) 8 IEEE Access https://doi.org/10.1109/ACCESS.2020.2993233
Paul, B and others, ‘Potential Smart Grid Vulnerabilities to Cyber Attacks: Current Threats and Existing Mitigation Strategies’ (2024) 10(19) Heliyon https://doi.org/10.1016/j.heliyon.2024.e37980
Rajaperumal, TA and Columbus, CC, ‘Transforming the Electrical Grid: The Role of AI in Advancing Smart, Sustainable, and Secure Energy Systems’ (2025) 8(1) Energy Informatics https://doi.org/10.1186/s42162-024-00461-w
Rajkumar, VS and others, ‘Cyber Attacks on Power System Automation and Protection and Impact Analysis’ in 2020 IEEE PES Innovative Smart Grid Technologies Conference Europe (ISGT-Europe) (IEEE 2020) https://doi.org/10.1109/ISGT-EUROPE47291.2020.9248840
Recorded Future, Continued Targeting of Indian Power Grid Assets by Chinese State-Sponsored Activity Group (2022) https://go.recordedfuture.com/hubfs/reports/ta-2022-0406.pdf accessed 28 January 2026.
Reuters, ‘Power Beginning to Return in Venezuela after Nationwide Blackout’ (30 August 2024) https://www.reuters.com/business/energy/venezuelas-capital-caracas-other-regions-face-power-outage-2024-08-30/ accessed 28 January 2026.
Saeed, S, ‘The Crises in the Middle East: Reshaping the Region’s Geopolitical Landscape and Altering the Global Order’ (2025) 4(1) Asian Review of Political Economy https://doi.org/10.1007/s44216-024-00043-3
Salazar, L and others, ‘A Tale of Two Industroyers: It Was the Season of Darkness’ in 2024 IEEE Symposium on Security and Privacy (SP) (IEEE 2024) https://doi.org/10.1109/SP54263.2024.00162
Sanger, DE, ‘Russian Hackers Appear to Shift Focus to U.S. Power Grid’ The New York Times (27 July 2018) https://www.nytimes.com/2018/07/27/us/politics/russian-hackers-electric-grid-elections-.html accessed 28 January 2026.
Saraswat, A and Tiwari, G, ‘United Nations and Beyond: Legal Strategies for Defending Critical Energy Infrastructure Against Cyber Attacks’ in Chawki, M and Abraham, A (eds), Cybercrime Unveiled: Technologies for Analysing Legal Complexity (Springer Nature Switzerland 2025) https://doi.org/10.1007/978-3-031-80557-8_13
Smith, DC, ‘Enhancing Cybersecurity in the Energy Sector: A Critical Priority’ (2018) 36(4) Journal of Energy & Natural Resources Law https://doi.org/10.1080/02646811.2018.1516362
Tomažič, LM, ‘Best Available Techniques Principle: International Treaties and Drafting in National Legislation’ (2022) 14(2) LeXonomica https://doi.org/10.18690/lexonomica.14.2.153-172.2022
Tomažič LM and Bratina B, 'Pravni okvir odzivanja na krizna stanja v slovenskem elektroenergetskem sistemu' [Legal Framework for Responding to Crisis States in the Slovenian Electrical Energy System] (2024) 50(8) Podjetje in delo 1417 https://www.podjetjeindelo.si/literatura/PID101D202412V8PS1417PE1417N1/
United Nations Institute for Disarmament Research, Slovenia—Cyber Policy Portal (November 2023) https://cyberpolicyportal.org/states/slovenia accessed 11 November 2025.
Vandezande, N, Cybersecurity in the EU: How the NIS2 Directive Stacks Up Against its Predecessor (SSRN Scholarly Paper No 4383118, Social Science Research Network 2023) https://doi.org/10.2139/ssrn.4383118
Verheij, B, ‘Dialectical Argumentation with Argumentation Schemes: An Approach to Legal Logic’ (2003) 11(2–3) Artificial Intelligence and Law https://doi.org/10.1023/B:ARTI.0000046008.49443.36
Włodyka, EM and Kaczmarek, K, ‘Cyber Security of Electrical Grids – A Contribution to Research’ (2024) 2(12) Cybersecurity and Law https://www.cybersecurityandlaw.com/pdf-188575-109965 accessed 28 January 2026.
Woleński J, 'Formal and Informal in Legal Logic' in Dov M Gabbay, Patrick Canivez, Shahid Rahman and Alexandre Thiercelin (eds), Approaches to Legal Rationality (Logic, Epistemology, and the Unity of Science vol 20, Springer 2010) 73 https://doi.org/10.1007/978-90-481-9588-6_4 accessed 27 November 2025.
Xanthaki, H, Legislative Reform in the EU – The Role of Drafting in Legislative Quality (SSRN Scholarly Paper No 4695537, Social Science Research Network 2024) https://doi.org/10.2139/ssrn.4695537
Zavodnik, M, ‘Pomen načela zakonitosti v povezavi z drugimi ustavnimi načeli: Analiza odločbe Ustavnega sodišča: UI-155/20–24’ [The Meaning of the Principle of Legality in Connection with Other Constitutional Principles: An Analysis of the Constitutional Court Decision UI-155/20-24] (2025) 103 Dignitas 199–223.
Zorzetto, S, ‘The Principle Lex Specialis: A Critical Explanation’ (2024) 46 Revista de Derecho Privado https://heinonline.org/HOL/Page?handle=hein.journals/revdpriv46&id=10&collection= accessed 28 January 2026.
Downloads
Published
License
Copyright (c) 2026 Bratislava Law Review
This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
The Author(s) transfers copyright to the Article to the Publisher of the Journal by the Licence Agreement.
The Author(s) retains rights specified in the Licence Agreement.
The readers may read, download, copy, distribute, print, search, or link to the full texts of all of the Article of the Journal and use them for any other lawful purpose under specified Creative Commons Licence (CC BY-NC-ND 4.0).
