Organization

CARNET operation is realized through a series of interconnected services and projects united into nine sectors:

• Business Support Sector
• Network Infrastructure Sector
• Computer Infrastructure and Services Sector
• National CERT Sector
• National Services and Support Sector
• Education Support Sector
• Artificial Intelligence Sector
• National Coordination Center for Cybersecurity Industry, Technology, and Research
• The Office of the CEO 

CARNET bodies consist of the Managing Council, the CEO, and the Council of Users.

Managing Council represents the interests of CARNET founders, the Croatian Government. The Managing Council members are appointed by the Minister of Science and Education.

Since July 14^to , 2023 the members of the Managing Council are:

• Prof. Dr. Sc. Drago Žagar, Faculty of Electrical Engineering, Computer Science and Information Technology, Osijek
• Prof. Dr. Sc. Marin Golub, University of Zagreb, Faculty of Electrical Engineering and Computing
• Božo Pavičin, Ministry of Science and Education
• Katarina Matasić, Ministry of Science and Education
• Ivica Markulin, Croatian Academic and Research Network – CARNET, employee representative.

President of the Managing Board is Prof. Dr. Sc. Drago Žagar, Faculty of Electrical Engineering, Computing and Information Technology, Osijek.

ABOUT Board of Directors coordinates short- and long-term planning, and makes decisions on business organization and is responsible for relations with government bodies, users, partners, and the public, and its members are:

• CEO Hrvoje Puljiz
• Vice CEO Ivan Šabić

Deputy CEOs: Gabrijela Bagarić, Andreja Bekavac, Juraj Bilić, Tomislav Gotovac, Mirna Ljubić Tustonjić, Vlatka Marčan, Tihomir Markulin, Aleksandra Mudrinić Ribić, Darko Parić, Goran Škvarč. 

Chief Executive Officer coordinates activities at an institutional level and externally, and represents CARNET in public.

Minister of Science and Education Prof. Radovan Fuchs, Ph.D. appointed Hrvoje Puljiz as the CEO of CARNET for a period of four years. 

The Users Board includes all CARNET coordinators from CARNET member institutions, who represent users from the academic community, heads of county expert councils for Computer Science teachers, as well as representatives of educational institutions and the CEO of CARNET.

The Office of the CEO is a specialized sector of CARNET that manages, coordinates, and organizes the operations of the institution. The office is managed by the CEO and Vice CEO of CARNET, while the CEO assistants coordinate and organize the operations of other sectors and key segments of the institution. The CEO oversees activities at the institution and beyond, representing CARNET in public.

The Office of the CEO oversees the legality and timeliness of tasks, takes measures to ensure efficiency, allocates tasks, ensures proper use of property and resources, and takes measures to determine responsibility for violations of official duties as defined by law.

Within the Office of the CEO, there are four assistant directors:

1. Deputy CEO for Information Security
2. Deputy CEO for Quality Control and Business Processes
3. Deputy CEO for International Cooperation
4. Deputy Chief Executive Officer for Internal Audit

The office also includes one department and two independent divisions:

1. Department for European Union Projects
2. Independent Division for Communications
3. Independent Division for Human Resources

The Office of the CEO coordinates various activities, including:

• Information security coordination
• Public administration task coordination
• quality control and business process coordination
• international cooperation
• internal audit
• Management and coordination of EU-funded projects
• Public Relations
• annual user conference
• marketing activities and support for events
• Human Resource Management and Related Tasks
• special information services and activities related to specific programs

Information security coordination Involves the monitoring and management of CARNET's information security program, overseeing the implementation and effectiveness of prescribed measures and standards, and providing coordination, education, and advice on information security matters.

Quality control and business process coordination encompasses managing systems, participating in the development of standards, plans, and technological solutions for the systems, and continuously improving the institution’s systems.

Public administration coordination tasks include strategic planning, advocacy, and active involvement in projects that advance technology integration to improve education, research, and innovation within the country.

The Office of the CEO also coordinates international cooperation and participates in various international activities, including monitoring the activities of other academic networks in Europe, participating in the work of international organizations, and encouraging the involvement of the Croatian academic community in international research and IT projects.

Internal audit and control evaluate the adequacy, efficiency, and effectiveness of internal control systems, ensuring the necessary level of security to enable risk management, control, and business management processes.

Management and coordination of EU-funded projects involve participating in international partnerships and projects, building human and administrative capacities for participation in structural and other programs after Croatia's accession to the EU, and co-financing existing and new CARNET services from EU funds.

Public relations at CARNET involves developing and implementing communication strategies, projects, and activities to raise awareness about the institution’s work and ensure information availability in accordance with the Law on the Right to Access Information.

Marketing activities and event support Includes designing and producing various materials, as well as promoting the institution and its services.

CARNET's annual Users Conference (CUC) is the largest educational conference in Croatia, organizing conferences for users from primary and secondary schools as well as participants from the academic community. These conferences serve as central hubs for knowledge and experience exchange in using digital technology in education.

Human resource management And personnel tasks at CARNET involve a series of interconnected activities and tasks aimed at ensuring an adequate number and structure of employees, their knowledge, skills, interests, motivation, and behavior needed to achieve current, developmental, and strategic goals through the development of each employee’s capabilities.

The activities of the Network Infrastructure Sector involve the construction and maintenance of the CARNET network infrastructure, along with research and implementation of new network technologies.

The Network Infrastructure Sector is organized into three services:

1. Network Services
2. Access Network Infrastructure
3. Network Maintenance

The Network Services department is responsible for the development, maintenance, and security of the CARNET network backbone, data centers, and associated monitoring and management systems. The department's tasks include establishing and maintaining network services within the network backbone, connecting the CARNET network to external networks (Internet, GÉANT, CIX), and developing and adapting open-source tools for network monitoring and management.

The Access Network Infrastructure department is responsible for planning and technically implementing connections to CARNET institution locations, as well as handling the financial and legal aspects of sector operations. The department's activities include close collaboration with external telecommunications service providers, exploring possibilities for connecting member institution locations and ministry institutions to the CARNET network, preparing and implementing contracts related to the Network Infrastructure Sector, allocating public IP address space, and implementing and maintaining active network equipment for connecting institutions.

The Network Maintenance department is responsible for monitoring the operation of the CARNET network and network services, and providing support to CARNET network users. The department's tasks include monitoring and maintaining the access portion of the CARNET network (equipment upgrades), overall monitoring of all production devices, services, and connections within the CARNET network, and escalating issues related to the connectivity of member institutions and other ministry institutions to the telecommunications service provider.

The Computer Infrastructure and Services Sector performs tasks related to the development and maintenance of central computer and data infrastructure, support for multimedia and video conferencing services, and the provision of system support to member institutions, as well as the development of services.

The tasks carried out within the Sector for Computer Infrastructure and Services include:

1. Managing a range of administrative and technical services provided by CARNET to its member institutions.
2. Providing system maintenance services for CARNET's public services such as NISpVU (National Information System for Higher Education Enrollment), NISpuSŠ (National Information System for Secondary School Enrollment), IFIS (Integrated Financial Information System), e-Class Register (electronic grade book), CARNET id (Hosting services for secondary and primary schools), and a content filtering system for elementary and high school students, along with other internal computer systems used by CARNET in its operations.
3. Offering video conferencing and multimedia services.
4. Designing, developing, and maintaining application solutions that are a significant component of numerous CARNET services. This involves reviewing and supporting other departments in the process of designing, developing, and maintaining services within their domain.

The Computer Infrastructure and Services Sector is organized into three departments:

1. Infrastructure Department
2. Service Development Department
3. Infrastructure Projects and Multimedia Department

The Infrastructure Department provides maintenance and improvement services for the system infrastructure of CARNET's public services, including e-Diary, CARNET id, NISpVU, NISpuSŠ, the content filtering system, IFIS, and internal computer systems used by CARNET.

The Service Development Department is involved in designing, developing, testing, and maintaining application solutions that are significant components of various CARNET services, such as e-Diary, e-Citizens mToken, Public Servant, content management for school websites, development of an application for managing the .hr domain registry, applications for internal operations, etc.

The Infrastructure Projects and Multimedia Department defines and ensures the quality standardization of CARNET’s key services at the technical level, allocates resources needed for their realization, provides guidelines for integration with other systems and services, standardizes and monitors service security, and establishes control over their operation. This department is also responsible for multimedia activities, including services related to establishing and maintaining video conferences, webinars, and other multimedia collaboration services over the network.

We empower and support the education community for the integration and application of digital technologies in business and educational processes.

The Education Support Sector, through systematic education, the development of digital educational content, educational services, and innovative approaches, empowers the educational and academic community for the purposeful and effective use of digital technologies in the processes of learning and teaching. The sector's activities are focused on empowering the education community with the aim of its digital maturity through continuous support, networking, and education on the implementation of technology and online content in the learning and teaching process, as well as through continuous research and implementation of educational technologies suitable for the Croatian educational context.

The Education Support Sector is organized into two Services and four Departments:

1. Service for Research and Development of Emerging Digital Educational Technologies

   • Department for Research on Digital Technologies in Education
   • Department for the Development of E-learning Concepts

2. Service for the Development and Implementation of E-Education

   • Department for the Integration of Innovations
   • Department for the Development and Support of Educational Technologies

The Service for Research and Development of Emerging Digital Educational Technologies focuses on researching, developing, and implementing innovative digital educational content. By creating various types of interactive and multimedia educational content, users gain access to quality-assured materials that effectively support their learning process. The service's goal is to provide users with high-quality, innovative digital educational content designed to support personalized learning, monitor user progress, and adapt content to individual user needs.

The Department for Research on Digital Technologies in Education explores the application of digital technologies in education by monitoring development trends and investigating the needs of CARNET users and stakeholders. Based on the conclusions, recommendations, and guidelines derived from research results, the department provides support in directing CARNET projects and services, raising awareness of global trends in the application of technology in education.

The Department for the Development of E-learning Concepts studies the development and application of e-learning technologies in education, with a focus on artificial intelligence tools applied or applicable to learning and teaching. The department aims to adapt learning content, methods, and activities to individual student needs and capabilities, thereby improving the learning process, primarily through adaptive learning. The department includes sections for learning analytics and the analysis of e-learning concepts.

The activities of the Service for the Development and Implementation of E-Education are aimed at developing digital competencies within the educational, academic, and wider community. Through the creation of various types of self-paced educational content and the implementation of diverse educational activities, including workshops, webinars, virtual workshops, and e-courses, users gain competencies and empower themselves for the effective application of digital technologies in business and educational processes. The service also focuses on disseminating knowledge in the field of e-learning, CARNET's content and services, and facilitating the exchange of information and experiences with users.

The Department for the Integration of Innovations is responsible for aligning new ideas, technologies, and processes with existing business and educational models and structures. The department facilitates access to advanced technology and supports innovations within the education system to stimulate competitiveness and improve educational processes.

The Department for the Development and Support of Educational Technologies promotes innovative approaches to learning and teaching through the application of digital technology within the Croatian education and academic community. Its purpose is to provide support and resources to enable educational progress through the effective integration of technology. Activities include monitoring the latest technological trends in educational technologies, and developing and implementing applications and platforms that support learning, teaching, accessibility of educational content, and teacher professional development.

In addition, the Education Support Sector, through participation in EU-funded projects, aims to contribute to the exchange of experience and dissemination of knowledge in the field of applying digital technologies in education and teaching in online and blended environments.

The National Services and Support Sector provides information about CARNET services, methods, and terms of use, as well as assistance in case of difficulties. Within the sector, all tasks related to key information systems in primary and secondary education are coordinated. The sector also manages the .hr domain registry.

The National Services and Support Sector is organized into two services and four departments:

1. Service for National Services

   • Support Centers
   • Department for the State Information System of Education (DISOO)
   • Department for the Improvement of Educational Processes
   • .hr Domain Registry

2. User Support Service

   • Helpdesk
   • Member Relations Department
   • Support Centers Department

The Support Centers Department coordinates tasks related to the National Information System for primary school enrollment, the National Information System for adult education, e-Matica, Kindergarten enrollment, CARNET sigma, Information System for applications and enrollment in student dormitories, Application for selecting textbooks, National Information System for applications and enrollment in high schools (NISpuSŠ), Education Portal, e-Class Register, CARNET mToken, e-Citizens mToken, MDM:

• Planning upgrades and issuing specifications
• Monitoring supplier contract implementation
• Quality control and testing of deliveries
• System development and onboarding of new users
• User system education
• Coordinating external and internal stakeholders involved in system upgrades and providing second-level support.

The Department for the Improvement of Educational Processes:

The Data Management Department defines procedures, protocols, and standards for managing data in information computer systems and services under its purview. It oversees CARNET’s analytical ecosystem, which comprises a high-availability system for storing and analyzing structured and unstructured data, an information system for learning analytics and educational data mining, and the CARNET data user application.

The .hr Domain Registry Department:

• Manages the .hr domain registry and registers free .hr and .from.hr domains
• Coordinates activities with the .hr Domain Management Commission
• Collaborates with registrars of paid .hr domains
• Coordinates arbitration proceedings
• Collaborates with state administrative bodies, local government units, and other entities
• Provides support to users in registering domains, additional requests, and arbitration proceedings
• Proposes improvements to .hr domain registry management
• Participates in the work of the European association of national top-level domain registries called CENTR (Council of European National Top-Level Domain Registries) and the international organization ICANN (Internet Corporation for Assigned Names and Numbers).

The User Support Service aids in the use of CARNET services and applications within the education system to ensure the best possible user experience. This service comprises a Helpdesk with a contact center, regionally located Mobile Teams that offer on-site support to institutions, and the Member Institutions Department. The service provides information about CARNET services and projects, along with usage instructions, technical support, and assistance with any challenges encountered. Support is available through email, phone, the CARNET Info user portal, and postal mail.

Activities of the User Support Service include:

• Supporting users with CARNET services
• Providing support for key information systems in the education system (NISpuSŠ, e-Matica, and e-Diary)
• Testing supported applications and proposing upgrades
• Creating user guides
• Managing user relations
• Informing users via distribution mailing lists and Viber communities
• Conducting user satisfaction surveys
• Supporting the Work of the CARNET User Council
• Managing Legal Relationships with Member Institutions
• Maintaining a database of member institutions
• Managing the RA office for issuing digital signature certificates
• Responding to specific requests from member institutions.

The National CERT (Computer Emergency Response Team) is established in accordance with the Law on Information Security of the Republic of Croatia. According to this law, CERT is the national body for the prevention and protection against cyber threats to public information systems in the Republic of Croatia. One of its main tasks is to coordinate actions in the event of cyber incidents on public information systems in Croatia or other countries and organizations when they are related to the IP address or domain space of the Republic of Croatia.

The operation and organization of the National CERT are determined and regulated by the Law on Information Security (Official Gazette 79/2007) and the Law on Cybersecurity of Operators of Essential Services and Digital Service Providers (Official Gazette 64/2018), which transposes Directive 2016/1148 of the European Parliament and of the Council of 6 July 2016 on measures for a high common level of security of network and information systems across the Union (NIS Directive). The National CERT’s activities are also guided by the National Cybersecurity Strategy and its action plan.

According to the National CERT's Work Regulations, NCERT deals with an incident if one of the parties involved is located in Croatia (i.e., if it is within the .hr domain or Croatian IP address space) or if the incident originates from a sector for which NCERT is responsible under the Law on Cybersecurity of Operators of Essential Services and Digital Service Providers.

The users of the National CERT include:

1. According to the Cybersecurity Law:

   • Providers of essential services in the sectors of banking, financial market infrastructure, digital infrastructure, and parts of business services for government entities.
   • Digital service providers.

2. According to the Law on Information Security:

   • Providers of hosting services and internet access services (ISP).
   • All users of public information systems and internet users in the Republic of Croatia, including CARNET users.

The National CERT is organized into two services: the Cyber Incident Processing and Security Management Service and the Service for the Development and Security of Services and Infrastructure. Within these two services, departments are structured as follows:

1. Cyber Incident Processing and Security Management Service

   • Department for Cyber Incident Management
   • Department for Cybersecurity Management

2. Service for the Development and Security of Services and Infrastructure

   • Department for Service and Infrastructure Security
   • Department for the Development and Maintenance of Services
   • Department for the Development and Maintenance of Other Services and Applications

The Cyber Incident Processing and Security Management Service is responsible for handling and resolving cyber incidents, processing aggregate data, preparing reports, and raising awareness about cybersecurity. The service manages a system for collecting, analyzing, and correlating log records, enhancing the visibility of anomalies in the CARNET organization’s network traffic. It is also involved in awareness-raising and education activities, participating in cybersecurity-related bodies at national, European, and international levels, proposing and participating in defining national legislative regulations, and preparing internal regulations.

The Service for the Development and Security of Services and Infrastructure works to ensure that security is implemented “by design” in services developed in or for CARNET. It conducts in-depth security checks (penetration testing) of CARNET services before they go into production and periodically thereafter based on service criticality. The service issues electronic server certificates and conducts vulnerability checks of networks and devices connected to the internet in CARNET member institutions. A significant part of the service’s activities is focused on further developing and adapting the national PiXi platform for reporting incidents, with significant impact under the Cybersecurity Law for Operators of Essential Services and Digital Service Providers.

As part of its operations, the National CERT implements proactive and reactive measures. Proactive measures are taken before incidents and other events that may compromise the security of public information systems, to prevent or mitigate potential damages. Reactive measures are taken in response to incidents in Croatia and other events that may compromise the computer security of public information systems in Croatia.

The National CERT's proactive measures include:

• Monitoring the state of computer security and publishing news related to Internet security
• Publishing computer security recommendations for discovered vulnerabilities
• Issuing security recommendations for popular operating systems
• Publishing technical documents and brochures related to Internet security
• Conducting vulnerability assessments of public information systems and information systems of CARNET member institutions
• Conducting security testing of services developed in or for CARNET
• Publication of information on the analysis and recommendations of security tools
• Educating targeted groups on Internet security
• Collecting and analyzing data on the security of CARNET services
• Participating in the implementation of security solutions to protect and prevent CARNET services
• Informing the public through the www.antibot.hr portal to combat bots
• Participating in television and radio programs on the topic of computer security
• Attending lectures at conferences and workshops
• Participating in cybersecurity exercises.

Reactive measures implemented by the National CERT include:

• Collecting and analyzing data on significant incidents in Croatia that have occurred on public information systems (National CERT uses its developed tools and software – SRU@HR)
• Collecting data on compromised computers and their activities from internet sources and analyzing it
• Creating reports on statistics and the state of cybersecurity in Croatia
• Mediating and coordinating the resolution of significant incidents in Croatia
• Operating the CARNET network's Abuse service.

The National CERT collaborates with other sectors to design security protections for critical and other CARNET services, as well as to establish a central system for collecting security data and monitoring security events.

Planned advancements include:

• Further development of the National Platform for the exchange of information on incidents and threats in the field of cybersecurity (PiXi) and its adaptation to the requirements of new regulations – the new Law on Cybersecurity and the DORA Regulation, which further regulates the financial sector
• Awareness-raising campaigns on cybersecurity
• Strengthening cross-sector collaboration between national regulatory bodies and information security bodies
• Planning projects in the 2023-2024 program period through the DIGITAL Europe – Cybersecurity Work Programme 2023-2024
• Participation in national and European partner projects in the field of cybersecurity
• Cybersecurity exercise participation
• Further strengthening the resilience to cyber threats of the CARNET organization, users of CARNET services, and institutions connected to the CARNET network.

The Business Support Sector includes the joint services required for the work of all CARNET departments.

Within this sector, the following services are performed:

• Legal Services
• Procurement Activities
• Finance and Accounting
• Car Fleet Services
• Warehousing Services
• Internal Technical and System Support.

Legal Services include the work of drafting and controlling the legal basis of contracts and procedures, monitoring of regulations, providing expert assistance in the interpretation of regulations, preparation and drafting of general acts, registration and entry in court and other registries. 

Procurement activities Include participation in public procurement and simple procurement procedures, as well as drafting public procurement contracts (goods, services, and works) for conducted procedures, and performing other tasks within its scope of work (procurement planning and monitoring of implementation). 

Finance and accounting related activities are related to budget planning and execution, budget execution control, mid-year and annual budget execution reports, management of accounting records, financial statements and consolidated financial statements in accordance with financial accounting regulations, bookkeeping records, petty cash transactions, as well as the calculation and payment of salaries, other income, royalties, and other tasks within their scope of work.

Car Fleet Services include registration and verification of vehicle documentation, vehicle tracking via an application, technical validation and vehicle servicing, and other tasks within its scope of work.

Warehousing Services This includes the organization of equipment reception, warehousing, storage, and provision of equipment to users, along with all accompanying documentation. It also involves monitoring the application of regulations on storage operations and other storage-related regulations, updating and maintaining the matrix system, designating responsibility locations, defining material groups and types within the system, preparing and controlling reverse logistics, organizing qualitative and quantitative equipment acceptance in accordance with contracts, preparing equipment lists, and performing other tasks within its scope of work.

Internal technical and system support Manages personal computers, operating systems, and additional equipment for the user's work, organizes software product installation on computers, records the distribution and use of computer equipment and licensed software, and performs administrative and technical maintenance tasks of existing technical resources required for employee work, provides support to information system users within CARNET, proposes and sets criteria for the procurement, distribution, and use of computer and software equipment, and performs other activities within its scope of work.

The Artificial Intelligence Sector at CARNET was established to provide support in enhancing the competitiveness, quality, and relevance of the education system in Croatia in the digital age. The Sector's purpose is to support research, development, application, and integration of AI solutions and new technologies that can improve the digital competencies of users and education system personnel. It aims to contribute to the development of educational infrastructure and related resources to more effectively address the challenges of current and future technological changes. This, in turn, provides decision-makers with timely and relevant information that can be used to monitor trends across the entire education vertical.

The establishment, development, and active presence of the Sector within its assigned responsibilities aim to position CARNET as an indispensable institutional player in Croatia's digital technology innovation initiatives. This is accompanied by activities to strengthen its resources, network, and collaborations with relevant public and private stakeholders. By focusing on project funding sources that align with CARNET’s development plans in AI research and integration, it will subsequently support the continuous and adequate implementation of AI in Croatia’s education system.

The Artificial Intelligence Sector is organized into two Services and four Departments:

Development and Research Service

• AI Research and Development Department
• Research and Development of New Technologies Department

Application and Technology Integration Service

• Application and Development of the AI Department
• Application of New Technologies Department

The Government of the Republic of Croatia, at a session held on October 25, 2023, adopted a Decision on the establishment of the National Coordination Centre for Industry, Technology, and Research in the field of cybersecurity. This decision designates the Croatian Academic and Research Network – CARNET to perform the tasks of the National Coordination Centre for Industry, Technology, and Research in the field of cybersecurity (NCC) in the Republic of Croatia. The organization within CARNET was established on December 1, 2023, through a new Regulation on internal organization and operation. The legal basis for this is Regulation (EU) 2021/887 of the European Parliament and of the Council of May 20, 2021, on the establishment of the European Cybersecurity Industrial, Technology, and Research Competence Centre and the network of national coordination centres (Regulation).

In today’s world, where the majority of the population is connected to the internet, people’s daily lives and the economy increasingly depend on digital technologies, making them more vulnerable to serious cyber incidents. This emphasizes the need for resilience, strengthening technological and industrial capabilities, and the use of high standards and comprehensive solutions in the field of cybersecurity, covering people, products, processes, and technology.

The National Coordination Centre (NCC) is established to consolidate expertise and enhance capabilities in defense against cyber threats. One of its tasks is to encourage investment in cybersecurity, as well as the adoption and implementation of key technologies, and to promote and facilitate the participation of the economy, especially newly established companies and SMEs, academic educational and research communities, and other stakeholders at the national level in cross-border projects and activities in the field of cybersecurity funded through European Union programs.

Following the Directive, the NCC will represent the Republic of Croatia in the Network of National Coordination Centres and have its representative in the European Competence Centre. The NCC operates as a sector within CARNET and has its deputy director as well as a Management Board consisting of representatives of institutions based on the Decision of the Government of the Republic of Croatia on the establishment of the National Coordination Centre for Industry, Technology, and Research in the field of cybersecurity (Official Gazette 125/23).