An unusual year is behind us, the COVID-19 pandemic has presented the world with unprecedented challenges in terms of information security, and this virus has become one of the greatest challenges of modern civilization. Its appearance and our inability to prevent its spread greatly affects our entire life. "Lockdown" as a measure has closed many institutions, reduced the possibility of travel, removed us from the workplace, reduced economic exchange and introduced us to a new life marked by measures and recommendations that we must take on a personal and organized level to reduce the spread of infection. Organizations need to activate their business continuity plans, and that is certainly a good test for business continuity management and how much each organization is ready to respond to such a big challenge in a short time. Regulatory and contractual requirements for the field of information security are growing. The consequences of non-compliance are becoming more severe. This is evidenced by the penalties and costly recovery from the incident itself. Confirmation of the above is the first non-judicially imposed GDPR penalty in Croatia. Simply put, everyone has recognized that information is one of the most valuable resources of this age in which we live and needs to be adequately protected. COVID - 19 caused an unprecedented world crisis in just a few months. States have hastily imposed extensive quarantine measures, travel restrictions, restrictions on the operation of certain activities, restrictions in public life, the introduction of border controls, etc. Now the main focus of states is to combat the crisis from a health and security perspective. Great efforts are being made to ensure the health and safety of employees and citizens. The number of cyber attacks against organizations and individuals is significant and is expected to increase. Criminals are using the COVID-19 crisis to carry out social engineering attacks to distribute various malware packages. Cyber criminals are likely to try to take advantage of the fact that an increasing number of employers are running telecommunications operations and enabling a connection to their organizations ’systems. Fraudsters very quickly adapted known fraud systems to exploit fear throughout the corona crisis. This includes various types of customized versions of telephone fraud schemes, decontamination-related fraud, delivery fraud. They also adjusted investment fraud to provoke stock investment speculation related to COVID - 19 with the promise of substantial profits. Even when the current crisis is over, criminals are likely to quickly adjust fraud schemes to take advantage of the post - pandemic situation