This paper aims to explore the cyber-deception-based approach and to design a novel conceptual model of hybrid threats that includes deception methods. Security programs primarily focus on prevention-based strategies aimed at stopping attackers from getting into the network. These programs attempt to use hardened perimeters and endpoint defenses by recognizing and blocking malicious activities to detect and stop attackers before they can get in. Most organizations implement such a strategy by fortifying their networks with defense-in-depth through layered prevention controls. Detection controls are usually placed to augment prevention at the perimeter, and not as consistently deployed for in-network threat detection. This architecture leaves detection gaps that are difficult to fill with existing security controls not specifically designed for that role. Rather than using prevention alone, a strategy that attackers have consistently succeeded against, defenders are adopting a more balanced strategy that includes detection and response. Most organizations deploy an intrusion detection system (IDS) or next-generation firewall that picks up known attacks or attempts to pattern match for identification. Other detection tools use monitoring, traffic, or behavioral analysis. These reactive defenses are designed to detect once they are attacked yet often fail. They also have some limitations because they are not designed to catch credential harvesting or attacks based on what appears as authorized access. They are also often seen as complex and prone to false positives, adding to analyst alert fatigue. The security industry has focused recent innovation on finding more accurate ways to recognize malicious activity with technologies such as user and entity behavioral analytics (UEBA), big data, artificial intelligence (AI), and deception.

Cybersecurity encompasses a broad range of practices, tools and concepts related closely to those of information and operational technology (OT) security. Cybersecurity is distinctive in its inclusion of the offensive use of information technology to attack adversaries. Use of the term “cybersecurity” as a key challenge and a synonym for information security or IT security confuses customers and security practitioners, and obscures critical differences between these disciplines. Recommendation for security leaders is that they should use the term “cybersecurity” to designate only security practices related to the defensive actions involving or relying upon information technology and/or OT environments and systems. Within this paper, we are aiming to explain “cybersecurity” and describe the relationships among cybersecurity, information security, OT security, IT security, and other related disciplines and practices, e.g. cyber defence, related to their implementation aligned with the planned or existing cybersecurity strategy at the national level. In the case study given example of The National Cybersecurity Strategy of the Republic of Croatia and Action plan is presented and elaborated. The Strategy's primary objective is to recognize organizational problems in its implementation and broaden the understanding of the importance of this issue in the society.

Cybersecurity planning within a complex system and applying its principles aims to achieve system resilience in cyberspace. The purpose of a complex system is to carry out a mission as a set of abilities and preferences concerning the internal and external circumstances of the system. Achieving cyber resistance requires organizational, human, material, and financial resources to implement measures, activities, and procedures to reduce residual (remaining) security risk. This part of the security risk must be accepted within the system since it is impossible to achieve its further reduction. The research in this paper analyzes ways and means to achieve cyber resistance in the conditions of today's growing security risks. This research aims to create a new model of cyber resistance, which includes cyber and information security. This also considers that the methods of separating previously unseen threats and attacks of the past day are unknown today in a large number of business cases. To confront the challenges, there is a need to create "knowledge about ignorance" and the development of cyber capabilities based on the principles of cyber security and defense.

Project team work depends considerably on the contribution of its members and its management as well. Cooperation among members depends on the leader who is supposed to encourage interactions, growth and knowledge exchange among members. To identify the importance of each individual, a leader/manager must evaluate individual contributions. On the basis of such assessments, necessary and possible actions will be undertaken to improve the achievements of the team as a whole. A leader usually has defective and incomplete information at his disposal and, besides, is subjective. To solve the aforesaid problem, fuzzy approach and fuzzy logic are used. Fuzzy logic, as a method for soft-computing, as input values employs data with the following features; uncertainty and partial verity, indistinctive borders among particular categories. Fuzzy evaluation system has been designed to reduce evaluation subjectivity.

In presence of rapid development of information and communications technology (ICT) able to increase data processing, much more data can be stored, used and/or mediated and disseminated. Today, information and knowledge become a resource of strategic importance in complex systems, both business and military. On the other hand the question of credibility of the collected data arises: complex systems have to deal with an increasing access to information with less knowledge about their origins and their quality. Due to this lack of information on information, contemporary organizations suffer from organizational indifference. In this paper the ways and means for ensuring semantic interoperability in order to achieve information superiority in complex systems are examined, with special emphasis to military systems using Command and Control Information Systems (C2IS). Canonical messages (canonical intermediaries) based on canonical forms (canonical data models and formats) reduce the number of transformation maps that system must create and manage. An approach based on canonical messaging within the military domain is presented: Multilateral Interoperability Programme (MIP). If implemented correctly and consistently it should lead to achievement of information superiority.

Complex systems nowadays are usually supported by previously developed or inherited application systems, which have been developed on the basis of business functions standard model. Such application systems cover particular business fields, however, since they have been developed in an independent and uncoordinated way, there are modest possibilities of interacted automated data exchange because of heterogeneous data. Because of increasing data exchange needs, enforcement of development and upgrade of programmatic procedures is required. In this connection it is necessary to find ways and means to integrate all existing application systems in given circumstances and render possible exchange and usage of all needed data in a reliable and consistent way. The problem can be solved in different ways. Asynchronous message-passing and inter-application communication software appliance imply commencement of automated data exchange among existing organizations application systems, providing for full scale control and management of mutually exchangeable data, internally as well as externally. In this connection contributing model of the running application systems integrated by means of Message-Oriented Middleware (MOM) of the complex system has been created.