Lithuania Unveils Plan for 44 Local Cybersecurity Centers to Fortify Digital Defenses

Nationwide Cybersecurity Expansion Underway

On Monday, November 17, 2025, Lithuania's Ministry of National Defence unveiled an ambitious plan to establish 44 local cybersecurity operations centers across the country. This significant initiative, spearheaded by the National Cyber Security Centre (NKSC), aims to substantially fortify Lithuania's digital defense network amidst a complex and evolving threat landscape. The NKSC intends to roll out these regional centers in every county within the next three and a half years.

Enhancing Localized Cyber Resilience

The new network of cybersecurity operations centers is designed to significantly enhance Lithuania's public-sector cyber resilience by decentralizing threat detection and incident response capabilities, making them available nationwide rather than concentrated solely in the capital. These centers will be integrated into a wide array of public institutions, including ministries, government agencies, municipal companies, and critical sectors such as water management, ensuring dedicated monitoring and rapid-response capabilities for essential services.

As part of the operational model, the NKSC will provide the necessary hardware, software, and training for the centers. In turn, municipalities will be responsible for supplying the premises and funding staff salaries. The centers are also expected to play a crucial role in managing major cyber incidents, ensuring consistent coordination between local and national institutions.

Responding to a Heightened Threat Landscape

This strategic expansion comes in direct response to a surge in cyber incidents and heightened geopolitical tensions in Central and Eastern Europe. The war in Ukraine has reshaped the threat landscape, making countries like Lithuania prime targets for cyberattacks. The NKSC reported a 63% increase in cyber incidents in 2024, recording 3,874 cases compared to 2,378 in 2023. While improved awareness and reporting contribute to these figures, the number of more dangerous, moderate-category incidents also saw a 12% increase in 2023.

Foreign state-backed groups have been implicated in major incidents, with three significant cases in 2024 linked to such entities targeting Lithuanian networks for long-term objectives like espionage. Lithuania's active support for Ukraine has kept it in the crosshairs of Advanced Persistent Threat (APT) groups associated with the Kremlin.

Building on an Established Cybersecurity Framework

The establishment of these 44 centers builds upon Lithuania's already robust national cybersecurity framework. The country has a comprehensive national cybersecurity model led by the Ministry of National Defence through the NCSC. Furthermore, the Lithuanian Cyber Command (LTCYBERCOM) was officially launched on January 1, 2025, within the Lithuanian Armed Forces, tasked with planning and executing operations in cyberspace.

The initiative also aligns with the EU Network and Information Systems Directive (NIS 2), which Lithuania was among the first European Union countries to transpose into national law in 2024. The NIS2 directive mandates Security Operations Center (SOC) capabilities for critical infrastructure and municipalities, a requirement directly addressed by this new plan.

A pilot center in the Siauliai region, established earlier this year, serves as a model for the nationwide rollout. This center is expected to become operational by the end of 2025, employing four specialists to provide cybersecurity services to seven municipalities, including monitoring digital infrastructure and strengthening vulnerable systems.