Cybersecurity and the Slovenian Electrical Grid
Abstract
This article examines cybersecurity risks to the Slovenian electrical grid, a critical infrastructure asset, amid escalating global threats from state-sponsored actors, geopolitical tensions, and technological vulnerabilities, including ICT interdependencies, legacy systems, IoT devices, and supply chain weaknesses. Adopting an interdisciplinary lens from law, public policy, and cybersecurity, it addresses three research questions: identifying cyber threats, evaluating Slovenia's policy framework and legal regime, and proposing enhancements to resilience. Through normative-dogmatic, dialectical methods and a Xanthakian qualitative assessment of legislative quality, focusing on effectiveness, clarity, precision, and unambiguity, it uncovers gaps such as inconsistent strategic prioritisation, scattered provisions, and reactive approaches. Recommendations include formalising stakeholder cooperation, developing grid-specific strategies, mandating annual cyber stress tests, integrating AI-driven modelling, and refining drafting to ensure unified terminology. The study highlights Slovenia's need for proactive, EU-harmonised measures to bolster energy security amid an evolving cyber landscape.