ADWISERY experts implemented services for the assessment of technological vulnerabilities, security management compliance, and information security risk of the information system (PKIS)

During the performance of the contract, the following was performed:

• A project execution plan with a work schedule has been prepared and coordinated.
• A technological vulnerability assessment has been performed, which included: external perimeter check of the data transmission network; check of the website www.lrp.lt; internal network check.
• An assessment of the PKIS infrastructure (servers, computer networks, data storage, computer workstations, etc.) has been carried out.
• An assessment of the security of email services has been conducted.
• A technological vulnerability assessment report and recommendations for the elimination of technological vulnerabilities have been prepared.
• A PKIS information technology security management compliance assessment has been performed, and a compliance assessment report with a plan for addressing identified deficiencies has been submitted.
• An information security risk assessment has been carried out, including: a preliminary list of LRPK PKIS information resources has been prepared; An analysis of the impact on data protection and LRPK operations was conducted, assessing the importance of information resources based on confidentiality, integrity, and availability criteria; A list of tolerable data loss sizes (Recovery Point Objective) has been prepared and agreed upon with the owners of information resources; A list of minimum service recovery time intervals (Recovery Time Objective) has been prepared and agreed upon with the owners of information resources.
• A presentation of the results has been organized for the responsible persons of LRPK.