National Cyber Security Centre (Lithuania)

National Cyber Security Centre (Lithuania)
Name	National Cyber Security Centre (Lithuania)
Native name	Nacionalinio kibernetinio saugumo centras
Formed	2015
Jurisdiction	Republic of Lithuania
Headquarters	Vilnius
Parent agency	Ministry of National Defence
Chief1 name	(Director)

National Cyber Security Centre (Lithuania) The National Cyber Security Centre (Lithuania) is the central Vilnius-based agency responsible for national cybersecurity oversight, incident response, threat intelligence and resilience coordination. It operates within the Lithuanian Ministry of National Defence ecosystem, interfaces with regional bodies such as the European Union institutions, and engages with multinational partners including NATO, ENISA, and the Council of Europe.

History

The Centre was established amid post-2014 Baltic security concerns following incidents linked to the 2014 Annexation of Crimea by the Russian Federation, the 2015 BlackEnergy attacks that affected energy sectors, and continuity efforts exemplified by Operation Gladio-era resilience planning. Early milestones included aligning Lithuanian policy with the NIS Directive (EU) and coordinating with NATO cyber initiatives such as the Tallinn Manual-inspired doctrine work. The Centre expanded after Lithuania joined the European Union in 2004 and after intensified cooperation with allies including United States Department of Defense, United Kingdom National Cyber Security Centre, Estonian Information System Authority, and the Polish Government Security Centre to modernize digital infrastructure protection for institutions like the Bank of Lithuania and national telecom operators formerly under the legacy of Soviet Union networks. Notable operational collaborations referenced Baltic Air Policing-era interoperability exercises and joint cyber defence exercises with Cyber Coalition and Locked Shields participants.

Mandate and Legal Framework

Legislative foundations derive from statutes enacted by the Seimas and policy instruments influenced by the European Commission's directives and the NATO Cooperative Cyber Defence Centre of Excellence recommendations. The Centre's mandate includes duties articulated under national acts analogous to frameworks used by the United Kingdom's National Cyber Security Strategy and complies with obligations under the General Data Protection Regulation regime as interpreted by the European Court of Justice. It also operates within the strategic guidance of Lithuania's National Defence System and coordinates with oversight bodies such as the State Security Department of Lithuania and the Law on Cyber Security legislative text. International agreements include memoranda of understanding with entities like the US Cyber Command, German Federal Office for Information Security (BSI), and the French National Cybersecurity Agency.

Organizational Structure

The Centre's internal organization mirrors structures found in peer agencies such as the Finnish National Cyber Security Centre and the Swedish Civil Contingencies Agency. Divisions handle functions comparable to CERT-EU teams: an Incident Response Unit, Threat Intelligence and Analysis, Vulnerability Assessment, Policy and Legal Affairs, and Education and Outreach. Leadership reports to the Minister of National Defence and collaborates with the Prime Minister of Lithuania's office, the Ministry of the Interior, the Lithuanian Armed Forces, and civilian regulators like the Communications Regulatory Authority. Liaison officers maintain ties with the European Defence Agency, Interpol, and the Organisation for Security and Co-operation in Europe.

Responsibilities and Activities

Operational responsibilities include national incident response for sectors such as finance (e.g., SEB (bank) and Swedbank-linked infrastructures), energy (e.g., interactions with grid operators influenced by events like the 2007 cyberattacks on Estonia), transport, and critical information infrastructure associated with agencies like the Lithuanian Railways and Ignalina Nuclear Power Plant legacy systems. The Centre produces threat assessments, issues alerts similar to advisories from the US Cybersecurity and Infrastructure Security Agency, develops continuity plans akin to NATO StratCom guidance, and supports cyber exercises such as Cyber Coalition and regional drills with Baltic States partners. It also enforces compliance with digital resilience measures influenced by the EU Agency for Cybersecurity (ENISA) recommendations.

National and International Cooperation

Domestically, the Centre coordinates with the State Tax Inspectorate, Lithuanian Police, the Fire and Rescue Department, and academic institutions like Vilnius University and Kaunas University of Technology. Internationally, it engages in partnerships and information exchanges with NATO bodies, bilateral ties with the United States Department of Homeland Security, cooperation with the European Commission’s cybersecurity initiatives, and joint operations with the Estonian Defence Forces and Latvian National Armed Forces under Baltic defence mechanisms. The Centre participates in EU policy fora alongside delegations from Germany, France, Poland, Sweden, Norway, Netherlands, Belgium, Italy, Spain, Portugal, Czech Republic, Slovakia, Hungary, Greece, Romania, Bulgaria, Croatia, Slovenia, Ireland, Austria, Denmark, Luxembourg, Malta, Cyprus, Lithuania, Latvia, Estonia, Finland, Iceland and coordinates with international law enforcement via Europol and INTERPOL.

Incidents and Public Advisories

The Centre issues public advisories mirroring practices seen in responses to incidents like the 2017 NotPetya and the 2016 SWIFT-related cyber heists by providing mitigation steps to stakeholders including state institutions such as the Lithuanian National Radio and Television and private sector firms like Ignitis Group. It maintains a warning registry and collaborates with media outlets including LRT (Lithuanian National Radio and Television) and international press agencies such as Reuters and The Guardian when coordinating disclosure. High-profile coordinated advisories have referenced tactics associated with threat actors investigated by institutions like the Computer Emergency Response Team (CERT) community and academic centers such as the EU Institute for Security Studies.

Research, Development and Capacity Building

The Centre fosters research partnerships with Vilnius University, Kaunas University of Technology, the University of Cambridge and technical collaborators including Cisco Systems, Microsoft, IBM Security, and open-source communities linked to projects like MITRE ATT&CK. Capacity building includes training programs aligned with curricula from the SANS Institute, collaboration with the NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE) in Tallinn, scholarship initiatives with the Fulbright Program and exchange programs with the Estonian Defence College. It supports innovation hubs and startup ecosystems such as those in Vilnius Tech Park and participates in EU research frameworks modelled after Horizon Europe projects and cooperative research with laboratories at institutions like the European Organisation for Nuclear Research.

Category:Government agencies of Lithuania Category:Cybersecurity agencies