Promote cybersecurity culture and innovation is a key target of the national strategy. 

Employee training: Routine and regularly updated training courses for private and public sector employees aimed at increasing employee duty of care as well as building an overall cybersecurity culture.

Cybersecurity culture: Efficient and regular dissemination of information on the latest cyber incidents and other factors that may cause personal data breaches or pose a risk of becoming a victim of cybercrime is a key measure for strengthening the cybersecurity culture of the Lithuanian people. In this context, the strategy prioritises increasing the dissemination of information in the face of 49% of internet users in Lithuania believing that they are not sufficiently aware of the full risk of cybercrimes (the European Union average is 51%). 

Cybersecurity education for children: To boost cybersecurity culture, children and pupils will be given fundamental knowledge of cybersecurity under nursery, preschool, primary and/or secondary education programmes, making ICT part of the country's educational and learning processes. The strategy also includes teacher upskilling and training to improve their qualifications in the area of cybersecurity. 

Training of teaching staff: In the context of implementing programme of the Government of the Republic of Lithuania on reorganisation of the system of teachers’ up-skilling and training, efforts should be made to improve teachers’ qualifications in the area of cybersecurity. Having the opportunity and ability to expand and deepen their cybersecurity knowledge, teachers of different educational areas would not only be able to educate young people better, but would contribute to the development of knowledge and innovation based society and further cybersecurity awareness raising as well.

Filling the skills gap: The strategy highlights that the need to have a precise understanding of the demand for cybersecurity professionals in Lithuania. The second objective of the cybersecurity strategy target is to develop creativity, advanced capabilities and cybersecurity skills and competence that meets market needs. Implementation is creating a cybersecurity competence model, setting up cybersecurity competence standards, developing systems of training, accreditation and certification oriented towards the needs of the labour market, attracting, nurturing and retaining talent, providing training and testing environments for cybersecurity, teaching newcomers, offering training to ICT workers, training employees working with sensitive data.

One of the strategy's measures is to develop scientific research and activities that create high value in the area of cybersecurity. Specifically, the strategy is aimed at creating favourable conditions for new, advanced cybersecurity initiatives, promoting the growth of the cybersecurity market, expanding export of cybersecurity services to foreign market, developing cyber security sector of financial technology and conducting research.

A complementary measure is ensuring reliable measurements of the cybersecurity market in Lithuania in view of growing demand and driving innovation to strengthen the country's competitive position in the development of new products and services. The aim is to combine initiatives of innovation and general national policies while promoting long-term science, technology and innovation development. 

The CYBERWISER.eu CyPR is all about boosting opportunities in the cybersecurity marketplace. 

This European Cybersecurity Professional Register is the place where professionals, juniors or seniors, age can promote their specific skill sets and experiences in cybersecurity, courses taken and qualifications.

Organisations of any size or sector from SMEs to large companies and public institutions can find and contact the right skills and experiences they need to improve their IT security posture.

January 2021. 

The information contained here is based on desk research carried out by CYBERWISER.eu, including the ENISA interactive maps on national strategies and educational courses. 

Lithuania is building its cyber security capacity and management institutions based on a long tradition of information technology and telecommunications.

CERT-LT (English) is the national electronic communications network and information security incidents investigation service operating as the national Computer Emergency Response Team. It is responsible for coordinating security and incident response measures across all Lithuanian networks. CERT-LT is tasked with managing the reporting of cyber security incidents and provides an online reporting structure to log cyber security.

It is also charged with promoting security in the information society by preventing, observing, and solving information security incidents and disseminating information on threats to information security. CERT-LT provides capability to deal with netwotk and information security incidents but would require additional resources in the event of a national cyber security crisis.

LITNET CERT is the Computer Emergency Response Team of the Lithuanian academic and research network.

SVDPT-CERT (English) is the computer emergency response team of Secure State Data Communication Network of State Enterprise ''Infostruktura'' in Lithuania.

SVDP-CERT (English) is the Computer Emergency Response Team of the Lithuanian Public Administrations and municipalities.

In September 2016 the Lithuanian government officially launched the country's National Cyber-Security Centre (NKSC). The NKSC was set up through a transformation of the Lithuanian Defence Ministry's Communications and Informations Systems Service with the aim to consolidate the efforts of public institutions, spread the ideas of cyber-awareness and provide help in dealing with cyber-incidents on government networks.

CERT-LT

• Team Email: cert@cert.lt
• Reporting Form: www.cert.lt/en/report.html
• Telephone: +370 5 210 5679

SVDPT-CERT

• Team Email: info@infostruktura.lt
• Telephone: +370 5 2391708

LITNET

• Team Email: cert@litnet.lt
• Telephone: +370 37 300645

CERT-LT provides regular reports on cyber incidents, spanning statistics for the current period: Attack statistics; Number of infected machines found in "Botnets"; CERT-LT recommendations' efficiency; Number of solved incidents per week, as well as quarterly activity reports. 

LITNET CERT provides some snapshot information on the threat landscape.

There is no legislation in place in Lithuania that requires each agency to have a chief information officer (CIO) or chief (information) security officer (CISO/CSO). This may hamper not only the ability to detect and counteract cyber threats but also significantly impact on capacity building across the public and private sectors in Lithuania. It is also important to note that the national strategy does make reporting a cyber incident to the government or EU a requirement (it is only a provision).

The statistical analysis provided by CERT-LT is a good practice that could be replicated by more CSIRTs/CERTs.

January 2021. 

The information contained here is the result of desk research carried out by CYBERWISER.eu.