Framework coverage
Each one ships as a real control catalogue rather than a mapping added afterwards: its own codes, its own clause references and its own titles. You select the ones that apply to you, and a control can satisfy several at once, so evidence collected for one is evidence for all of them.
Names are written the way the standard is written, not translated. A standard's name is a proper noun.
KSRA (Nutarimas Nr. 945)
The Cybersecurity Requirements Description, which implements the NIS2 Directive (EU) 2022/2555 as transposed into Lithuanian law. This is what a Lithuanian entity is audited against, so the catalogue carries NIS2-LT codes, Lithuanian titles and NKSC references rather than the directive text. Approved by Government Resolution No. 818 and in force in the version set by Resolution No. 945 of 6 November 2024.
DORA
The Digital Operational Resilience Act, Regulation (EU) 2022/2554, including the register of information for ICT third party arrangements and its reporting export.
ISO/IEC 27001
The information security management system, with Annex A available as a scope of its own when an export needs to be Annex A alone.
CRA (Cyber Resilience Act)
EU Regulation 2024/2847, for products with digital elements. For anyone who builds or sells something with software in it rather than only operating it.
CSMS (UN R155)
The Cyber Security Management System under UN R155 section 7.2, required for vehicle type approval.
SUMS (UN R156)
The Software Update Management System under UN R156 section 7.1, normally held by whoever holds R155.
Part-IS (Aviation)
EASA Regulations (EU) 2022/1645 and 2023/203, the information security management requirements for aviation organisations.
LITGRID PET aprašas
The LITGRID AB transmission grid access rules, for organisations connected to or supplying the Lithuanian electricity transmission grid.
ESO PST aprašas
The ESO distribution grid access rules, the equivalent for the Lithuanian distribution network.
EE 73³ kibernetinio saugumo deklaracija
The cybersecurity declaration under article 73³ of the Lithuanian Electricity Energy Law, annexed to the LITGRID PET and ESO PST aprašas. EE is elektros energetika, the electricity sector. It is not a country code, and reading it as one has put the wrong country on a regulator's pack before.