Open calls › Digital Europe Programme
Strengthening EU cybersecurity capacities & capabilities in line with legislative requirements
Digital Europe Programme · DIGITAL-ECCC-2027-DEPLOY-CYBER-11-EULEG
Funding for tools, platforms and training that help authorities and businesses, especially SMEs, comply with EU cybersecurity laws such as the CRA and NIS 2.
What is this call about?
The topic funds tools, platforms, training and cooperation that help authorities, certification bodies and businesses, especially SMEs, implement EU cybersecurity legislation such as the CRA and NIS 2.
What does this call fund?
Scope
The topic supports the European ecosystem in strengthening cybersecurity capacities and in implementing EU legislation such as the Cyber Resilience Act (CRA), the NIS 2 Directive, the GDPR, DORA, the Cybersecurity Act and specific requirements of the AI Act. Applications should address at least one of the eligible pieces of legislation. The topic also promotes cybersecurity skills, cross-border collaboration and diversity in the cybersecurity workforce.
Main areas
- Building the capacity of national certification authorities, conformity assessment bodies and certification laboratories, including a "Certification and Evaluation as a Service" platform and expert hubs.
- Support for SMEs to meet legal requirements, with guidelines and user-friendly compliance tools; pilot projects to test CRA compliance.
- Reporting platforms for NIS 2 incidents and CRA vulnerabilities, common tools for audits and notifications, and cyber threat intelligence sharing at national, sectoral and EU level.
- Training programmes, benchmarking, peer exchange and fellowships, onboarding programmes for young people and support for pan-European teams in cybersecurity competitions.
- Security and privacy by design, and support for organisations, including SMEs, in assessing and commercialising privacy-enhancing technologies.
Expected outcomes
Projects should cover one or more outcomes such as guidelines and standardised processes for challenging legal issues, tools and awareness for CRA conformity assessment with a focus on SMEs, mechanisms reducing administrative burden (for example a single entry point for incident notification), secure communication channels, training courses and certification materials, and stronger cooperation along the privacy-enhancing technology value chain.
What are the key facts?
- Topic budget
- €20,000,000
- Minimum amount per project
- €3,000,000
- Maximum amount per project
- €5,000,000
- Call code
- DIGITAL-ECCC-2027-DEPLOY-CYBER-11-EULEG
- Programme
- Digital Europe Programme
- Expected number of projects
- 5
Who can apply for this call?
- Applications should address at least one of the eligible pieces of EU cybersecurity legislation and may address several.
- For privacy-enhancing technology activities, consortia should consider including at least one representative of each of: technology researchers, technology providers, developers of ICT products and services integrating these technologies, and user organisations.
Check your eligibility and how your project fits
In your free account, we check the eligibility conditions against the call documents for your organisation and assess how well your project fits this call.
When is the deadline?
14 January 2027 (70 days)
Interested in this call? Summary written with AI from the official call documents. Details can differ, so check the official call page before you apply. Read the official call documents before you decide. The official text is always binding.
Source: EU Funding & Tenders Portal and the official call documents. Official call page Last updated 6 October 2026.