Montenegro is preparing a new resilience regime for critical infrastructure that could create recurring demand for risk assessment, business-continuity planning and security engineering across essential industries.
The proposed Law on Critical Infrastructure Resilience entered parliamentary procedure on Sept. 14, following earlier consultations.
The framework is intended to require critical operators to prepare for a wider range of disruptions rather than focusing mainly on physical security.
Potential exposure extends beyond conventional utilities and could include parts of food production, distribution, transport, healthcare and other essential services.
For companies eventually designated as critical, compliance could require more systematic assessment of operational dependencies, suppliers, backup capacity and emergency response.
That creates a market for business-continuity consultants, physical-security specialists, backup systems, emergency exercises, supplier-risk mapping and resilience engineering.
Cybersecurity will form part of the framework, but the commercial opportunity is broader.
Flooding, equipment failure, supply-chain disruption or loss of key facilities can stop essential operations even when IT systems continue functioning.
Companies may therefore need to identify single points of failure, alternative suppliers and minimum operating capacity before an incident occurs.
For engineering and advisory firms, much of that work could become recurring because risk assessments, emergency plans and resilience testing require regular updates.
The final commercial impact will depend on which companies are formally classified as critical and how quickly implementing rules are adopted.
But the direction is clear.
Montenegro is moving from protecting selected infrastructure assets towards requiring essential operators to prove they can continue functioning during disruption.
That turns resilience into a new professional-services market.
