Lithuania approves new National Cyber Security Strategy.

On August 13, the Lithuanian Government approved the new Cyber Security Strategy. The document drawn up by the Ministry of National Defence sets key directions of national cyber security policy in public and private sectors for the coming five years and embeds regulations of the European Union Directive on Security of Network and Information Systems (the NIS Directive).

(Credit: Lithuanian MoD/Sgt Spc Ieva Budzeikaitė)

The new Cyber Security Strategy was concluded on the basis of assessment of the increasing number of cyber-attacks on public an energy sectors, airports, media organisations, and infrastructure of national security objects seen in Lithuania last year, and also the deteriorating conditions of websites in the public sector, shortage of cyber security experts, and other identified shortcomings.

The Strategy proposes five key objectives: to strengthen national cyber security and defence capabilities, to ensure prevention and investigation of offences in cyberspace, to promote culture of cyber security and innovation, to encourage close cooperation between public, private sectors and scientific institutions, and to strengthen international cooperation in cyber security.

Approval of the Strategy is the implementation of regulations of the EU NIS Directive on drafting and adoption of a national network and information systems strategy, as agreed by all EU members seeking to make development of cyber capabilities and fight against offences in the realm more effective.

Tasks set out in the National Cyber Security strategy will soon be pursued – the Ministry of National Defence will draft an Inter-institutional Action Plan and table it for approval by the Government.

The Ministry of National Defence began formation and coordination of the state information resources, cyber and electronic information security policy in 2018, and will continue consistently strengthening the capabilities of state cyber security, implement decisive steps in the improvement of cyber security requirements and development of a systemic approach to the security of any sector.