📋 Tender Overview
The Updated Cyber Security Act (Csa), Which Came Into Force In October 2024, Points Out A New Phase In The Liability Of Lithuanian Organizations For Digital Resistance. Following The Transfer Of National Law, The European Union Network And Information Systems Directive (Tis 2), The Duty Of Organizations Has Been Fundamentally Expanded To Take Care Of Their Cybersecurity, From People And Processes To Technology Management. The National Cyber Security Center Has Already Begun The Inclusion Of Organizations In The Register Of Cybersecurity Entities And Their Information. Although Official Inspections That Newly Included Organizations Comply With The Provisions Of The Ksa And Accompanying Legislation Will Only Begin 12 Months After Registration, The Organizations Will Be Invited Immediately. Timely Preparations Help To Optimize Costs, Avoid Urgent Solutions And Attract The Necessary Professionals. The Updated Cyber Security Act Encourages Organizations To Look At Cybersecurity In A Complex Way: To Take Care Of Competent Specialists, To Develop The Awareness Of Managers And Employees, To Identify And Follow Clear Processes And To Choose Technological Solutions. Cyber Space, Says Tomas Godliauskas, Vice -Minister Of National Defense. But What Does A Complex Approach Mean And Where To Start? The Ministry Of National Defense Distinguishes Three Essential Cybersecurity Elements: People, Processes And Technology. People - More Than A Position, The Law Clearly Defines That The Organization Must Be Appointed Head Of Cybersecurity. This Is Not A Formal Requirement - The Responsibility Of This Specialist Includes The Assessment Of The Security Status, The Identification Of The Gaps, The Selection Of The Necessary Tools And The Coordination And Organization Of The Response. Depending On The Size Or Nature Of The Organization, Additional Security Professionals May Also Be Used: From Security Commissioners To Cybersecurity Auditors Or Risk Managers. Even The Most Professional Team Will Not Be Able To Ensure Protection If Cybersecurity Is Only Perceived As A Separate Specialist Responsibility. Sustainable Resistance Can Only Be Achieved When Security Issues Become Part Of The Culture Of The Whole Organization, From Management To Every Employee. This Is Especially Important In Knowing That One Of The Most Common Causes Of Threats Is Human Errors: A Careless Reference Or A Weak Password. Therefore, Organizations Are Invited To Invest In Periodic Training Of Employees And Awareness. Processes - Clarity In Everyday Life Is Not Just About Responding To Danger - It Is A Consistent System Based On Clear Actions And Solutions. The Basic Procedures Referred To By Law Must Not Only Be Written But Also Applied In Practice. Organizations Must Be Able To Assess And Manage The Risks Of Network And Information Systems, Ensure Smooth And Rapid Incidents Management, Provide The Security Of The Supply Circuit, And To Ensure That The Acquisition, Development And Maintenance Of Networks And Information Systems Is Safe. All Of This Helps Not Only To Act Effectively Daily, But Also To Prove Compliance With Legal Acts When The Supervisory Authority Requires It. Following The Implementation Of These Procedures, The Assessment Of Their Effectiveness, The Organization Of Training, Ensuring The Safety Of Human Resources And The Fulfillment Of Other Additional Requirements Must Be Followed. This May Be Integrated Into Other Organizational Processes, But In All Cases A Clear Structure Is Necessary When And What Decisions Responsible Must Be Made. Subsequently, The Effectiveness Of The Measures, Regular Training, And Safety Of Staff Must Also Be Ensured. Although These Procedures Can Be Integrated Into Other Organizational Processes, Most Importantly, Clear Procedure And The Logic Of Decision -Making. The Rational Choice Of Technology Is The Third Element - Technology. They Remain A Cornerstone, But Their Choice Must Be Based On Real Needs. Not All Security Measures Are Expensive Or Complex - They Are Often Integrated Into The Systems Used, But They Need To Be Properly Configured. Successful Technological Protection Starts With A Simple Question: What Do We Want To Protect Most? Only After Prioritization Can Be Targeted To Distribute Resources. Organizations Should First Take An Internal Self -Assessment - Whether The Procedures Available Are In Line With Cybersecurity Requirements, Whether The Responsibility Is Clearly Distributed, Whether The Knowledge Of Specialists Is Effective. This Step Naturally Reveals The Flaws And Helps To Form A Further Action Plan, Says Inga Kenelaitiene, Head Of Cybersecurity And It Policy Group. Cyber Security Is Not Just A Technological Issue. It Is The Result Of Organizational Responsibilities, Preparation And Long -Term Culture.
