Filter Search for grants
Call Navigation
Call key data
Support for Implementation of EU Legislation on Cybersecurity and National Cybersecurity Strategies (2024)
Funding Program
Digital Europe
Call number
DIGITAL-ECCC-2024-DEPLOY-CYBER-07-CYBERSEC-02
deadlines
Opening
04.07.2024
Deadline
21.01.2025 17:00
Funding rate
50%
Call budget
€ 20,000,000.00
Estimated EU contribution per project
between € 2,000,000.00 and € 4,000,000.00
Link to the call
Link to the submission
Call content
short description
The action focuses on capacity building and the enhancement of cooperation on cybersecurity at technical, operational and strategic levels, in the context of existing and proposed EU legislation on cybersecurity in particular the NIS2 Directive (Directive (EU) 2022/2555), the Cybersecurity Act, and the Directive on attacks against information systems (Directive 2013/40). It complements the work of SOCs in the area of threat detection. It is a continuation of work currently supported under the previous Digital Work Programme.
Call objectives
In addition, this action also aims at supporting the implementation of the proposed Cyber Resilience Act (CRA) by market surveillance authorities/notifying authorities/national accreditation bodies, by increasing their capacities to ensure effective implementation of the CRA.
Proposals should contribute to achieving at least one of these objectives:
- Development of trust and confidence between Member States.
- Supporting market surveillance authorities/notifying authorities/national accreditation bodies to implement the CRA.
- Effective operational cooperation of organisations entrusted with EU or Member State’s national level cybersecurity, in particular cooperation of CSIRTs (including in relation to the CSIRT Network) or cooperation of Operators of Essential Services including public authorities.
- Better security and notification processes and means for Essential and Important Entities in the EU, including cross-border (automated) incident notification systems.
- Better reporting of cyber-attacks to law enforcement authorities in line with the Directive on attacks against information systems.
- Improved security of network and information systems in the EU.
- More alignment of Member States’ implementations of NIS2 (Directive (EU) 2022/2555).
- Support cybersecurity certification in line with the amended Cybersecurity Act.
The action will focus on the support of at least one of the following priorities:
- Implementation, validation, piloting and deployment of technologies, tools and IT based solutions, processes and methods for monitoring and handling cybersecurity incidents.
- Increasing capacity for market surveillance authorities/notifying authorities/national accreditation bodies in view of tasks as provided by the CRA.
- Collaboration, communication, awareness-raising activities, knowledge exchange and training, including through the use of cybersecurity ranges, of public and private organisations working on the implementation of NIS2 (Directive (EU) 2022/2555).
- Twinning schemes involving originator and adopter organisations from at least 2 different Member States to facilitate the deployment and uptake of technologies, tools, processes and methods for effective cross-border collaboration preventing, detecting and countering Cybersecurity incidents.
- Robustness and resilience building measures in the cybersecurity area that strengthen suppliers’ ability to work systematically with cybersecurity relevant information or supplying actionable data to CSIRTs.
- Ensure that manufacturers improve the security of products with digital elements since the design and development phase and throughout the whole life cycle.
- Ensure a coherent cybersecurity framework, facilitating compliance for hardware and software producers.
- Enhance the transparency of security properties of products with digital elements.
- Enable businesses across all sectors and consumers to use products with digital elements securely.
- Support to Cybersecurity certification, including support to national cybersecurity certification authorities and other relevant stakeholders, such as SMEs. This includes activities such as threat-led penetration testing, acquiring certification testbeds, sharing best practices, implementing innovative evaluation methods for specific ICT products or components.
Proposals may target, where relevant, Member State competent authorities, which play a central role in the implementation of NIS2 (Directive (EU) 2022/2555), as well as other actors within the scope of this Directive.
Proposals may support, amongst others, the continuation of cybersecurity activities funded through the CEF Telecom programme, building where relevant on the results from the CEF projects.
Proposals may support, amongst others, for the onboarding to the CEF Cybersecurity Core Service Platforms of public and private organisations working on the implementation of NIS2 (Directive (EU) 2022/2555) and are potential contributors to the goals of the CEF Cybersecurity Core Service Platform.
read more
Expected results
- Incident management solutions reducing the overall costs of cybersecurity for individual Member States and for the EU as a whole.
- Better compliance with NIS2 (Directive (EU) 2022/2555) and higher levels of situational awareness and crisis response in Member States.
- Organisation of events, workshops, stakeholder consultations and white papers.
- Enhanced cooperation, preparedness and cybersecurity resilience in the EU.
- Support actions and cooperation for further advanced of cybersecurity certification.
- Effective supervision and enforcement of the CRA by the market surveillance authorities and adequate capabilities of notifying authorities and national accreditation bodies for the implementation of the CRA.
Eligibility Criteria
Regions / countries for funding
Moldova (Moldova), Albania (Shqipëria), Bosnia and Herzegovina (Bosna i Hercegovina / Босна и Херцеговина), Iceland (Ísland), Kosovo (Kosova/Kosovë / Косово), Liechtenstein, Montenegro (Црна Гора), North Macedonia (Северна Македонија), Norway (Norge), Serbia (Srbija/Сpбија), Türkiye, Ukraine (Україна)
eligible entities
Education and training institution, Non-Profit Organisation (NPO) / Non-Governmental Organisation (NGO), Other, Private institution, incl. private company (private for profit), Public Body (national, regional and local; incl. EGTCs), Research Institution incl. University, Small and medium-sized enterprise (SME)
Mandatory partnership
No
Project Partnership
Submissions from consortia, despite not mandatory, will positively contribute to the impact of the action.
This topic targets relevant industrial stakeholders, including SMEs and start-ups in the scope of the upcoming CRA, concerned by the NIS2 Directive or that may benefit from the European cybersecurity certification schemes. It refers also to Member State competent authorities, which play a central role in the implementation of the NIS2 Directive, Computer Security Incident Response Teams (CSIRTs) including sectorial CSIRTs, Security Operation Centres (SOC), Operators of Essential Services (OES), digital service providers (DSP), Information Sharing and Analysis Centres- ISACs, actors that play a role in the implementation of the Cyber Resilience Act (including certification bodies), and any other actors within the scope of the legislations mentioned above.
To be eligible for funding, applicants must be:
- legal entities (public or private bodies)
- established in one of the eligible countries:
- EU Member States (including overseas countries and territories (OCTs))
- listed EEA countries and countries associated to the Digital Europe Programme (list of participating countries)
Specific cases:
Natural persons are NOT eligible (with the exception of self-employed persons, i.e. sole traders, where the company does not have legal personality separate from that of the natural person).
International organisations — International organisations are not eligible, unless they are International organisations of European Interest within the meaning of Article 2 of the Digital Europe Regulation (i.e. international organisations the majority of whose members are Member States or whose headquarters are in a Member State).
EU bodies — EU bodies (with the exception of the European Commission Joint Research Centre) can NOT be part of the consortium.
Entities without legal personality — Entities which do not have legal personality under their national law may exceptionally participate, provided that their representatives have the capacity to undertake legal obligations on their behalf, and offer guarantees for the protection of the EU financial interests equivalent to that offered by legal persons.
Associations and interest groupings — Entities composed of members may participate as ‘sole beneficiaries’ or ‘beneficiaries without legal personality’.
other eligibility criteria
Please be aware that all topics of this call are subject to restrictions due to security, therefore entities must not be directly or indirectly controlled from a country that is not an eligible country.
All entities will have to fill in and submit a declaration on ownership and control.
Moreover:
- participation in any capacity (as beneficiary, affiliated entity, associated partner, subcontractor or recipient of financial support to third parties) is limited to entities established in and controlled from eligible countries
- project activities (included subcontracted work) must take place in eligible countries (see section geographic location below and section 10)
- the Grant Agreement may provide for IPR restrictions (see section 10).
Finally, for the topics DIGITAL-ECCC-2024-DEPLOY-CYBER-07-SOC and DIGITAL ECCC-2024-DEPLOY-CYBER-07-SOCPLAT grants will only be awarded to applicants that have succeeded the evaluation of the joint procurement action.
Financial Support to Third Parties is not allowed.
Additional information
Topics
Relevance for EU Macro-Region
EUSAIR - EU Strategy for the Adriatic and Ionian Region, EUSALP - EU Strategy for the Alpine Space, EUSBSR - EU Strategy for the Baltic Sea Region, EUSDR - EU Strategy for the Danube Region
UN Sustainable Development Goals (UN-SDGs)
project duration
36 months
Additional Information
Proposals must be submitted electronically via the Funding & Tenders Portal Electronic Submission System (accessible via the Topic page in the Search Funding & Tenders section. Paper submissions are NOT possible.
Proposals must be complete and contain all the requested information and all required annexes and supporting documents:
- Application Form Part A — contains administrative information about the participants (future coordinator, beneficiaries and affiliated entities) and the summarised budget for the project (to be filled in directly online)
- Application Form Part B — contains the technical description of the project (to be downloaded from the Portal Submission System, completed and then assembled and re-uploaded)
- Mandatory annexes and supporting documents (to be uploaded):
- detailed budget table/calculator:
Proposals must be submitted electronically via the Funding & Tenders Portal Electronic Submission System (accessible via the Topic page in the Search Funding & Tenders section. Paper submissions are NOT possible.
Proposals must be complete and contain all the requested information and all required annexes and supporting documents:
- Application Form Part A — contains administrative information about the participants (future coordinator, beneficiaries and affiliated entities) and the summarised budget for the project (to be filled in directly online)
- Application Form Part B — contains the technical description of the project (to be downloaded from the Portal Submission System, completed and then assembled and re-uploaded)
- Mandatory annexes and supporting documents (to be uploaded):
- detailed budget table/calculator: not applicable
- CVs of core project team: not applicable
- activity reports of last year: not applicable
- list of previous projetcts: not applicable
- ownership control declarations (including for associated partners and subcontractors): applicable
- Other annex: for Topic DIGITAL-ECCC-2024-DEPLOY-CYBER-07-SOC the appointment decision from the Member State designating the entity to act as National SOC: applicable
- detailed budget table/calculator:
Proposals are limited to maximum 70 pages (Part B).
Call documents
Cal document DIGITAL-ECCC-2024-DEPLOY-CYBER-07Cal document DIGITAL-ECCC-2024-DEPLOY-CYBER-07(665kB)
Contact
Website
To see more information about this call, you can register for free here
or log in with an existing account.
Log in
Register now