Development of National SOC/CSIRT Modular System

The Project is funded by the Economic Recovery and Resilience Facility "New Generation Lithuania"

The State Data Agency (project partner), together with other partners and the National Cyber Security Centre under the Ministry of National Defence (project promoter), is implementing Project No 05-002-P-0001 "Development of National SOC/CSIRT Modular System".

The aim of the Project is to develop national SOC/CSIRT modular system enabling the use of SOC/CSIRT services by cybersecurity actors in the sectors identified in NIS2 Directive, and to set up exemplary SOCs by providing them with the necessary tools, processes and knowledge.

Start of the Project – January 2024

End of the Project –April 2026

Value of the Project –EUR 17,003,154.41

Other Project partners: the State Enterprise Centre of Registers, association Vandens Jėga, the Ministry of Transport and Communications of the Republic of Lithuania, the Ministry of Finance of the Republic of Lithuania, the Core Center of State Telecommunications.

In order to develop national security measures, considering the emerging threats in cyberspace and the changing needs of the state and society, the National Cyber Security Centre under the Ministry of National Defence (NCSC) implements the European Union co-funded Project No 05-002-P-0001 "Development of National SOC/CSIRT Modular System".

Directive (EU) 2016/1148, known as NIS2 Directive (Network and Information Systems Security Directive), is an important legal instrument that has laid the foundations for the creation and strengthening of Security Operations Centres (SOCs), Computer Emergency Response Teams (CERTs), and Computer Security Incident Response Teams (CSIRTs) in the EU. The Directive obliges Member States to designate national CSIRTs and to set up a network thereof in order to effectively manage cybersecurity incidents and build resilience to cyber threats. Based on this Directive, Lithuania is expected to have three levels of security: national CSIRT (NCSC), SOC, and cybersecurity entities. In order to accelerate the supply of cybersecurity, the key is to encourage the establishment of SOCs and the development of their competences and capacities.