The following policy brief aims to allocate the grassroots of cyber security awareness for Western Balkan states through analysis of the legal and policy frameworks in each of the states in the region. The topic is considered as one of the utmost priorities for the region due to (geo-) political, economic and security reasons. The legal and policy frameworks came out to be unclear, and a screening process had to be conducted for this analysis, due to the fact that comprehensive information is lacking, or at least are not publicly available. The first lesson to come out from this cluttered situation points to the need to prepare national cyber security strategies and organise the regional cooperation in that process.