Adwisery experts have started providing Chief Information Security Officer (CISO) services to a medical services and healthcare network

During the project, the following will be performed:

• A GAP analysis.
• An assessment of compliance with the requirements of the Law on Cyber Security of the Republic of Lithuania.
• Drafts of the cybersecurity policy for networks and information systems and the procedures implementing it.
• An annual information security risk assessment.
• Cybersecurity training organised twice a year for all employees, with a training report prepared.
• Social engineering testing organised for all employees.
• A cybersecurity monitoring and management plan prepared.
• A business impact analysis (BIA) conducted.
• Business continuity management and disaster recovery plans prepared.
• Business continuity plan testing exercises organised.
• Support provided in procuring network and information systems vulnerability scanning services.
• Coordination of information and cybersecurity incident management, with notifications on major cybersecurity incidents and incident management reports prepared and submitted to the National Cyber Security Centre (NCSC) as required.
• Consultations provided to managers and responsible employees on information security and cybersecurity management matters, as well as support during the implementation of measures defined in the nonconformity remediation plan and the risk treatment plan.

Purpose:

• To ensure proper management of cybersecurity and compliance with the requirements of the Law on Cyber Security of the Republic of Lithuania and its implementing secondary legislation.

Benefits:

• The Client will comply with the requirements of the Law on Cyber Security of the Republic of Lithuania and its secondary legislation, ensure adequate protection of information and technological infrastructure, reduce the risk of cybersecurity incidents, and strengthen the organization’s reliability and resilience.

Estimated duration of initial service:

Services description links:

• Preparation for Directive (EU) 2022/2555 (NIS 2) of the European Parliament and the Council services
• Services of Chief Information Security and Cyber Security Officer