Adwisery experts, together with partners, have begun providing external cybersecurity chief (CISO) services to the nuclear safety regulatory authority, helping to strengthen the organization’s cyber resilience and information security

During the project, the following will be performed:

• Evaluating the effectiveness of cybersecurity requirements;
• The Cybersecurity Policy for Networks and Information Systems and the procedures governing its implementation will be developed;
• The required plans will be prepared in accordance with the approved procedures;
• An assessment of compliance with the requirements of the Law on Cybersecurity of the Republic of Lithuania will be conducted;
• An information security risk assessment will be carried out, a risk assessment report and a risk treatment plan will be prepared, and the results will be submitted to KSIS;
• Cybersecurity training and social engineering testing organized for employees;
• Business continuity plan testing exercises will be organized, a business continuity plan testing report will be prepared, and the results will be submitted to KSIS;
• Supply chain cybersecurity requirements will be developed, and assistance will be provided to ensure their implementation;
• Draft technical specifications for external and internal network as well as workstation testing (technological vulnerability assessment and penetration testing) will be prepared;
• Consultations on information security and cybersecurity management matters will be provided;
• Coordination of information and cybersecurity incident management will be ensured.

Purpose:

• To support the institution in effectively organizing and managing cybersecurity, ensuring the performance of the Chief Information Security Officer (CISO) and Information Security Officer functions, and maintaining compliance with the requirements of the Cybersecurity Law of the Republic of Lithuania and its implementing regulations.

Benefits:

• The services provided will help the institution strengthen its cybersecurity, ensure compliance with the Cybersecurity Law of the Republic of Lithuania and its implementing regulations, reduce the risk of cyber incidents, and enhance the organization’s overall cyber resilience.

Estimated duration of initial service:

Services description links:

• Preparation for Directive (EU) 2022/2555 (NIS 2) of the European Parliament and the Council services
• Services of Chief Information Security and Cyber Security Officer