Lithuania's strategic preparation for cyber security challenges

Lithuania's Strategic Preparation for Cyber Security Challenges The paper analyses how Lithuania is strategically ready for cyber security challenges. The main purpose is to identify and explain the gaps in Lithuania's strategic preparation for these challenges. The study relied on Thomas Rid theory of three acts as sabotage, espionage and subversion and his assumption that there is no cyber war. Cyber war has never happened in the past, it will not happen in the present and that cyber war will not occur in the future. T. Rid took Carl von Clausewitz classic war theory and made argument that actions which happens in cyber space nowadays does not match Clausewitz theory about war. First, all military actions are violent or potentially violent. Second, the act of war is always an important factor: physical violence or threat of force is a means to force an enemy to accept the will of the attacker. Thirdly, an attack must have a certain political objective or intent. Rid argued that there is no cyber attacks which will be similar on this three attribute of Clausewitz theory of war. When the risk of cybercrime and surveillance is politicized, when the concept of cyber war is widespread in the mass media, it is easy for a common citizen to get lost. So, this paper tried to answer on the main question: Does Lithuania identifying cyber security challenges as a threat of military level? In order to substantiate the thesis that the delay in the adoption of the Law of Lithuanian Cyber Security Act and insufficient analysis of aspects of the strategic importance of cyber-warfare tools in the context of cyber security challenges, I have used the method applied by Darius Štitilis and his colleagues: the resolutions of the Government of the Republic of Lithuania and Parliament are being examined. Also, trying to answer that question the analysis was based on 6 semi-structured interviews with experts from IT, politicians and policy makers during the Law of Cyber Security was initiated and analyses of incidents based on CERT-LT (NKSC).The first part of analyses is focused on methodical issue “What is war and cyber war”, how people identify these two words, maybe phrase “cyber war” is used too often and will not be identify on the right way then war will really start. Expert has been asked what they are thinking about war and cyber war definitions. Most of them answers that real war has difference from cyber war and these phrase comes from the mass media. The second part was based on legal documents, strategies and other papers from structures which are responsible for documentation of cyber security in Lithuania. Making documents and strategies analyses from 1997 till 2018 focus goes on different definitions of war, cyber war, cyber arena, attacks, incidents and others. How Lithuania’s strategies and Law were updated. This analysis is supplemented by expert insight. Why Lithuania adopted the Law of Cyber Security just in 2014, while Estonia and Georgia faced with first cyber attacks in 2007 and 2009. The main answer is that Lithuania delayed and had been late with law adoption. Looking from the perspective of Lithuania, we, as a nation, have achieved several important achievements over the last five years in the area of cyber-security: the law has been adopted, clear national threats have been defined, the legal framework has been resolved, responsibility divided and cooperation commitments, and the Strategy has been adopted. Moreover, on the May 9 of 2018, the first National Cyber Security Strategy cme into force. Cyber Security law has a superior power, but the strategy provides for further stages of Lithuania's cyber security link to. However, in order to secure cyber security challenges, we must invest in the development of cyber security.Data on incident analysis are closely related to the threats posed by the National Strategy, the neighbour of Lithuania – Russia was most often mentioned in expert statements