Filter Search for grants
Call Navigation
Call key data
Preparedness Support and Mutual Assistance, Targeting Larger Industrial Operations and Installations
Funding Program
Digital Europe
Call number
DIGITAL-ECCC-2024-DEPLOY-CYBER-07-LARGEOPER
deadlines
Opening
04.07.2024
Deadline
21.01.2025 17:00
Funding rate
100%
Call budget
€ 35,000,000.00
Estimated EU contribution per project
between € 3,000,000.00 and € 5,000,000.00
Link to the call
Link to the submission
Call content
short description
This mechanism aims to complement and not duplicate efforts by Member States and those at Union level to increase the level of protection and resilience to cyber threats, in particular for large industrial installations and infrastructures, by assisting Member States in their efforts to improve the preparedness for cyber threats and incidents by providing them with knowledge and expertise.
Call objectives
The provision of preparedness support services (ex-ante) shall include activities listed below, addressing for example large industrial installations or infrastructures, operators of essential services, digital service providers and governmental entities:
- Support for testing for potential vulnerabilities:
- Development of penetration testing scenarios. The proposed scenarios may cover Networks, Applications, Virtualisation solutions, Cloud solutions, Industrial Control systems, and IoT.
- Support for conducting testing of essential entities operating critical infrastructure for potential vulnerabilities.
- Support the deployment of digital tools and infrastructures supporting the execution of testing scenarios and for conducting exercises such as the development of standardised cyber-ranges or other testing facilities, able to mimic features of critical sectors (e.g., energy sector, transport sector etc.) to facilitate the execution of cyber exercises, in particular within cross-border scenarios where relevant.
- Evaluation and/or testing of MS cybersecurity capabilities (including capabilities to prevent, detect and respond to incidents).
- Consulting services, providing recommendations on how to improve infrastructure security and capabilities.
- Support for threat assessment and risk assessment:
- Threat Assessment process implementation and life cycle
- Customised risk scenarios analysis.
- Risk monitoring service:
- Specific continuous risk monitoring such as attack surface monitoring, risk monitoring of assets and vulnerabilities.
Preparedness actions should benefit entities (including SMEs and start-ups) in sectors indicated as critical infrastructure sectors in NIS2 (Directive (EU) 2022/2555), such as energy, transport and banking, and entities in other relevant sectors.
This action aims at the creation of platforms that serve as a reference point and provide services such as penetration testing and threat assessments for providers of essential services and critical infrastructures, as well as other actors. This involves data and operational measure regarding cybersecurity, including penetration tests and exploitable vulnerabilities. Such information could be exploited by malicious actors, and thus it must be protected against possible dependencies and vulnerabilities in cybersecurity to pre-empt foreign influence and control. As previously noted, participation of non-EU entities entails the risk of highly sensitive information about security infrastructure, risks and incidents being subject to legislation or pressure that obliges those non-EU entities to disclose this information to non-EU governments, with an unpredictable security risk.
Therefore, based on the outlined security reasons, the actions relating to these technologies are subject to Article 12(5) of Regulation (EU) 2021/694, in consistency with WP 2021/2022.
read more
Expected results
- preparedness support services
- threat assessment and risk assessment services
- risk monitoring services
Eligibility Criteria
Regions / countries for funding
Moldova (Moldova), Albania (Shqipëria), Bosnia and Herzegovina (Bosna i Hercegovina / Босна и Херцеговина), Iceland (Ísland), Kosovo (Kosova/Kosovë / Косово), Liechtenstein, Montenegro (Црна Гора), North Macedonia (Северна Македонија), Norway (Norge), Serbia (Srbija/Сpбија), Türkiye, Ukraine (Україна)
eligible entities
Education and training institution, Non-Profit Organisation (NPO) / Non-Governmental Organisation (NGO), Other, Private institution, incl. private company (private for profit), Public Body (national, regional and local; incl. EGTCs), Research Institution incl. University, Small and medium-sized enterprise (SME)
Mandatory partnership
No
Project Partnership
Submissions from consortia, despite not mandatory, will positively contribute to the impact of the action.
This topic targets in particular industrial players, national cybersecurity authorities, national cybersecurity competence centres, National Coordination Centres (as defined in Regulation (EU) 2021/887), private entities and any other relevant stakeholders with the capacity to aggregate demand from end beneficiaries, to launch tenders for procurement in the cybersecurity market space and to run downstream calls for allocating Financial Support to Third Parties.
To be eligible for funding, applicants must be:
- legal entities (public or private bodies)
- established in one of the eligible countries:
- EU Member States (including overseas countries and territories (OCTs))
- listed EEA countries and countries associated to the Digital Europe Programme (list of participating countries)
Specific cases:
Natural persons are NOT eligible (with the exception of self-employed persons, i.e. sole traders, where the company does not have legal personality separate from that of the natural person).
International organisations — International organisations are not eligible, unless they are International organisations of European Interest within the meaning of Article 2 of the Digital Europe Regulation (i.e. international organisations the majority of whose members are Member States or whose headquarters are in a Member State).
EU bodies — EU bodies (with the exception of the European Commission Joint Research Centre) can NOT be part of the consortium.
Entities without legal personality — Entities which do not have legal personality under their national law may exceptionally participate, provided that their representatives have the capacity to undertake legal obligations on their behalf, and offer guarantees for the protection of the EU financial interests equivalent to that offered by legal persons.
Associations and interest groupings — Entities composed of members may participate as ‘sole beneficiaries’ or ‘beneficiaries without legal personality’.
other eligibility criteria
Please be aware that all topics of this call are subject to restrictions due to security, therefore entities must not be directly or indirectly controlled from a country that is not an eligible country.
All entities will have to fill in and submit a declaration on ownership and control.
Moreover:
- participation in any capacity (as beneficiary, affiliated entity, associated partner, subcontractor or recipient of financial support to third parties) is limited to entities established in and controlled from eligible countries
- project activities (included subcontracted work) must take place in eligible countries (see section geographic location below and section 10)
- the Grant Agreement may provide for IPR restrictions (see section 10).
Finally, for the topics DIGITAL-ECCC-2024-DEPLOY-CYBER-07-SOC and DIGITAL ECCC-2024-DEPLOY-CYBER-07-SOCPLAT grants will only be awarded to applicants that have succeeded the evaluation of the joint procurement action.
Financial support to third parties is mandatory in DIGITAL-ECCC-2024-DEPLOY-CYBER 07-LARGEOPER (Preparedness Support and Mutual Assistance, Targeting Larger Industrial Operations and Installations) for grants under the following conditions:
- the calls must be open, published widely and conform to EU standards concerning transparency, equal treatment, conflict of interest and confidentiality
- the calls must be published on the Funding & Tenders Portal, and on the participants’ websites
- the calls must remain open for at least two months
- if call deadlines are changed this must immediately be published on the Portal and all registered applicants must be informed of the change
- the outcome of the call must be published on the participants’ websites, including a description of the selected projects, award dates, project durations, and final recipient legal names and countries
- the calls must have a clear European dimension
- maximum amount per third party EUR 60 000, unless a higher amount is required because the objective of the action would otherwise be impossible or overly difficult to achieve and this is duly justified in the Application Form.
- In this instance, recipients of financial support to third parties have to co-finance the activity by minimum 50% of the total costs of the activity.
- A minimum of 50% of the grant has to be reserved for financial support to third parties. The Commission estimates that 70% of the grant for financial support to third parties would allow the topic to be addressed appropriately.
Additional information
Topics
Relevance for EU Macro-Region
EUSAIR - EU Strategy for the Adriatic and Ionian Region, EUSALP - EU Strategy for the Alpine Space, EUSBSR - EU Strategy for the Baltic Sea Region, EUSDR - EU Strategy for the Danube Region
UN Sustainable Development Goals (UN-SDGs)
project duration
36 months
Additional Information
Proposals must be submitted electronically via the Funding & Tenders Portal Electronic Submission System (accessible via the Topic page in the Search Funding & Tenders section. Paper submissions are NOT possible.
Proposals must be complete and contain all the requested information and all required annexes and supporting documents:
- Application Form Part A — contains administrative information about the participants (future coordinator, beneficiaries and affiliated entities) and the summarised budget for the project (to be filled in directly online)
- Application Form Part B — contains the technical description of the project (to be downloaded from the Portal Submission System, completed and then assembled and re-uploaded)
- Mandatory annexes and supporting documents (to be uploaded):
- detailed budget table/calculator:
Proposals must be submitted electronically via the Funding & Tenders Portal Electronic Submission System (accessible via the Topic page in the Search Funding & Tenders section. Paper submissions are NOT possible.
Proposals must be complete and contain all the requested information and all required annexes and supporting documents:
- Application Form Part A — contains administrative information about the participants (future coordinator, beneficiaries and affiliated entities) and the summarised budget for the project (to be filled in directly online)
- Application Form Part B — contains the technical description of the project (to be downloaded from the Portal Submission System, completed and then assembled and re-uploaded)
- Mandatory annexes and supporting documents (to be uploaded):
- detailed budget table/calculator: not applicable
- CVs of core project team: not applicable
- activity reports of last year: not applicable
- list of previous projetcts: not applicable
- ownership control declarations (including for associated partners and subcontractors): applicable
- Other annex: for Topic DIGITAL-ECCC-2024-DEPLOY-CYBER-07-SOC the appointment decision from the Member State designating the entity to act as National SOC: applicable
- detailed budget table/calculator:
Proposals are limited to maximum 70 pages (Part B).
Call documents
Cal document DIGITAL-ECCC-2024-DEPLOY-CYBER-07Cal document DIGITAL-ECCC-2024-DEPLOY-CYBER-07(665kB)
Contact
Website
To see more information about this call, you can register for free here
or log in with an existing account.
Log in
Register now