Skip to main content
In forceNIS2

NIS2 in Lithuania

Lithuania transposed NIS2 into the national Cybersecurity Act. NKSC coordinates compliance audits and threat alerts.

Transposition law
Kiberetinio saugumo Δ―statymas (Cybersecurity Act amendment)
In force since
17 October 2024
Competent authority
National Cyber Security Centre (NKSC)
Max fine (Essential)
€10 million or 2% of global annual turnover
Max fine (Important)
€7 million or 1.4% of global annual turnover
Law adopted
17 October 2024

Key Deadlines

Law in force
17 October 2024

Competent Authority

National Cyber Security Centre (NKSC)
Central NIS2 competent authority and incident handler
https://www.nksc.lt β†—

NKSC conducts active penetration testing and proactive security reviews for government and infrastructure networks.

Registration Process

Access the NKSC administrative portal to register company identification and asset boundaries.

πŸ“Š Quick Test

Find out if your company is in scope

Does your organisation fall under Annex I (Essential) or Annex II (Important) entities?

Check NIS2 Scope β†’

Key Requirements

  • 1Register operational parameters in the central NKSC database
  • 2Deploy advanced network intrusion detection systems
  • 3Deliver incident declarations within 24 hours to NKSC

National Additions

β˜…Lithuania mandates the absolute exclusion of software from vendors deemed national security threats

FAQ: NIS2 in Lithuania

Does Lithuania restrict software vendors?
Yes, entities must not use security software from vendors headquartered in jurisdictions considered threats to Lithuanian security.

Ready to assess your NIS2 compliance?

Use our free tools to check your NIS2 scope and run a gap assessment.

🎯 Scope CheckerπŸ“Š Gap Assessment

Currency and sources

The legal details on this page were last checked on 25 July 2026. Some details rest on a single secondary source and are not verified against the national authority or official journal. Confirm with the competent authority before relying on them for a compliance decision.