Telekom Slovenije marks Cybersecurity Month: digital resilience starts with control over data, infrastructure and technology

To mark European Cybersecurity Month, Telekom Slovenije is highlighting the importance of digital sovereignty, multi-layered protection, continuous expert monitoring, and the responsible and considered use of digital services.

Attackers are becoming increasingly organised, and their techniques are evolving rapidly. According to the ENISA Threat Landscape 2026 report, denial-of-service (DDoS) attacks accounted for 51.3% of incidents handled in the European Union, while unauthorised access accounted for 39.5%. As many as 72.9% of recorded attacks targeted essential and important entities as recognised under the NIS2 Directive, particularly entities in public administration, business services, transport, manufacturing, and the financial and banking sectors. Phishing and the exploitation of known and newly discovered security vulnerabilities remain common cyberattack methods. Artificial intelligence is also making it easier to create convincing fraudulent messages, fake content and rapidly evolving malicious code. ENISA also detects the first instances of malicious code that employs generative artificial intelligence in attacks. “Today, cyber resilience means much more than protection against any individual attack. Organisations need to know where their data is located, who can access it, under which legislation it is processed, how their devices and networks are protected, and how quickly they can respond to an incident. Telekom Slovenije brings together networks, data centres, cloud services and cybersecurity in an integrated, locally managed ecosystem. This makes digital sovereignty an increasingly important element of modern cyber resilience,” emphasised Janez Anžič, Director of the Service Operation Centre at Telekom Slovenije.

Digital sovereignty is a security and a business issue
Digital sovereignty means having effective control over data, digital services and technology. Merely having a server physically located in Slovenia or the European Union is not sufficient. You have to know who can access the data, who manages the environment, which legislation applies, how relationships with subcontractors are regulated, and whether data and applications can be securely transferred elsewhere if circumstances change. This is particularly important for public administration, healthcare, energy, finance, critical infrastructure and companies that protect intellectual property, trade secrets or production data. Telekom Slovenije’s Sovereign Cloud is based on three geographically separate data centres in Slovenia – two in Ljubljana and one in Maribor – and is locally managed in accordance with Slovenian and European legislation. The environment is supported by advanced security services, ISO 27001, ISO 27018 and ISO 22301 certifications, and continuous monitoring provided by the Cyber Security and Resilience Centre and the Service Operation Centre. Organisations can make the transition gradually: first by classifying data according to its sensitivity, then assessing compliance requirements and risks, planning the architecture, and migrating critical systems without disrupting business operations. “Data sovereignty means that a company retains full control over its information while benefiting from the advantages of the cloud, such as speed, flexibility and efficiency. All infrastructure operates in Slovenia and complies with both European and national legislation. This provides a genuinely reliable and secure digital environment,” explains David Bevc, Head of Cloud Solutions at Telekom Slovenije.

Artificial intelligence as an assistant to security analysts
Every second, security systems generate large volumes of data on logins, network traffic, processes running on devices and access attempts. Artificial intelligence and machine learning help correlate events from different sources, identify deviations from normal operations, consolidate duplicate alerts and prioritise them for investigation. This allows experts to identify the highest-risk events more quickly and focus on the appropriate response. “Although artificial intelligence reduces the time between the initial detection of an anomaly and obtaining a clear picture of an event, it must not operate autonomously in cybersecurity. Machine-learning models have their blind spots and do not yet understand the business impact and context, so the algorithm merely lays the groundwork; the final operational decision and responsibility always rest with the analyst,” explains Rok Peršak, Head of Telekom Slovenije’s Cyber Security and Resilience Centre.

Multi-layered protection from the network to the device
Effective cybersecurity is based on multiple interconnected layers, as no single solution can stop every type of threat. Threats need to be identified and contained at network level, while at the same time workstations and servers must be protected, and with every security incident, continuous expert monitoring and a rapid response to security incidents must be provided. Telekom Slovenije combines network- and device-level security solutions with the capabilities of its Cyber Security and Resilience Centre:

•  Safe Internet and Safe Business Internet block known malicious domains, phishing websites, fake online shops and other online scams at network level, before users even accesses them.
•  Security Shield, with advanced protection for workstations and servers, detects suspicious behaviour on devices, stops attacks and helps prevent threats from spreading.
•  The Cyber Security and Resilience Centre, with more than 100 experts, provides monitoring and response 24/7/365, and combines data from different security solutions to provide a comprehensive view of risks.

Resilience also requires responsible behaviour
Individuals can significantly improve their security simply by using long and unique passphrases, multi-factor authentication and regularly installing security updates. Before clicking on a link, it is essential to check the sender and the website domain; when shopping online, also check the seller, payment and return terms, and the personal data being requested. Children and young people demand additional attention, as they are more frequently exposed to fake online shops, surreptitious advertising, microtransactions and other incentives that encourage impulsive purchases. In addition to technological protection, digital resilience is also strengthened by digital literacy, critical thinking and open discussion about using the internet safely. Telekom Slovenije combines these elements with secure infrastructure, control over data, advanced security solutions and qualified experts in an integrated, locally managed ecosystem.

More information about security solutions is available on the Telekom Slovenije website, while recommendations for the safe and responsible use of the internet by young people are available on the Enjoy Intelligently and Safe.si websites.