Invosec
The CoverContact UsOur Insights
Explore
NIS2

Kibernetinio saugumo reikalavimų aprašas (KSRA)

KSRA Implementing the Cybersecurity Requirements
Title-not-shown
Chapter I (1-3) General Provisions
General requirements (1-3)
Chapter II Section One (4-6) Network and Information Systems Security Policy
Org. requirements (4-6)
Chapter II Section Two (7-15) Cybersecurity Risk Analysis
Org. requirements (7-15)
Chapter II Section Three (16-21) Duties of the Persons Responsible for Cybersecurity and of the Head of the Cybersecurity Entity or a Person Authorised by Them
Org. requirements (16-21)
Chapter II Section Four (22-26) Cyber Incident Management
Org. requirements (22-26)Tech. requirements (Table 1, 1-15)
Chapter II Section Five (27-31) Business Continuity
Org. requirements (27-31)Tech. requirements (Table 2, 16-20)
Chapter II Section Six (32-39) Supply Chain Security
Org. requirements (32-39)
Chapter II Section Seven (40-47) Security of the Acquisition, Development and Maintenance of Network and Information Systems, Including Vulnerability Management and Disclosure
Org. requirements (40-47)Tech. requirements (Table 3, 21-43)
Chapter II Section Eight (48-51) Assessing the Effectiveness of Cybersecurity Requirements
Org. requirements (48-51)
Chapter II Section Nine (52-54) Cyber Hygiene Practice and Cybersecurity Training
Org. requirements (52-54)
Chapter II Section Ten (55-57) Cryptography and Encryption Usage Policy and Procedures
Org. requirements (55-57)Tech. requirements (Table 4, 44-50)
Chapter II Section Eleven (58-60) Human Resources Security, Physical Access Policy and Asset Management
Org. requirements (58-60)Tech. requirements (Table 5, 51-52)Org. requirements (61-64)Tech. requirements (Table 6, 53-57)
Chapter II Section Twelve (65-69) Access Management and Multi-Factor Authentication Measures
Org. requirements (65-69)Tech. requirements (Table 7, 58-76)
Chapter III (70-72) Final Provisions
General requirements (70-72)

Kibernetinio saugumo reikalavimų aprašas (KSRA)

KSRA Implementing the Cybersecurity Requirements
Title-not-shown
Chapter I (1-3) General Provisions
General requirements (1-3)
Chapter II Section One (4-6) Network and Information Systems Security Policy
Org. requirements (4-6)
Chapter II Section Two (7-15) Cybersecurity Risk Analysis
Org. requirements (7-15)
Chapter II Section Three (16-21) Duties of the Persons Responsible for Cybersecurity and of the Head of the Cybersecurity Entity or a Person Authorised by Them
Org. requirements (16-21)
Chapter II Section Four (22-26) Cyber Incident Management
Org. requirements (22-26)Tech. requirements (Table 1, 1-15)
Chapter II Section Five (27-31) Business Continuity
Org. requirements (27-31)Tech. requirements (Table 2, 16-20)
Chapter II Section Six (32-39) Supply Chain Security
Org. requirements (32-39)
Chapter II Section Seven (40-47) Security of the Acquisition, Development and Maintenance of Network and Information Systems, Including Vulnerability Management and Disclosure
Org. requirements (40-47)Tech. requirements (Table 3, 21-43)
Chapter II Section Eight (48-51) Assessing the Effectiveness of Cybersecurity Requirements
Org. requirements (48-51)
Chapter II Section Nine (52-54) Cyber Hygiene Practice and Cybersecurity Training
Org. requirements (52-54)
Chapter II Section Ten (55-57) Cryptography and Encryption Usage Policy and Procedures
Org. requirements (55-57)Tech. requirements (Table 4, 44-50)
Chapter II Section Eleven (58-60) Human Resources Security, Physical Access Policy and Asset Management
Org. requirements (58-60)Tech. requirements (Table 5, 51-52)Org. requirements (61-64)Tech. requirements (Table 6, 53-57)
Chapter II Section Twelve (65-69) Access Management and Multi-Factor Authentication Measures
Org. requirements (65-69)Tech. requirements (Table 7, 58-76)
Chapter III (70-72) Final Provisions
General requirements (70-72)
Chapter I (1-3)

General Provisions

1. The Description of Cybersecurity Requirements (hereinafter — the Description) sets out the cybersecurity requirements applicable to cybersecurity entities.

2. The terms used in the Description are defined in the Law on Electronic Communications of the Republic of Lithuania, the Law on Information Society Services of the Republic of Lithuania, the Cybersecurity Law of the Republic of Lithuania, the Law on the Management of State Information Resources of the Republic of Lithuania, the Law on Public Procurement of the Republic of Lithuania, and the Lithuanian standard LST EN ISO/IEC 27002.

3. When implementing the requirements of the Description relating to the approval of documents, a cybersecurity entity has the right to choose whether to set out the provisions implementing those requirements in a single document or in separate documents.
Next Network and Information Systems Security Policy