Strengthening EU cybersecurity capacities & capabilities in line with legislative requirements

¿De qué trata esta convocatoria?

The topic funds tools, platforms, training and cooperation that help authorities, certification bodies and businesses, especially SMEs, implement EU cybersecurity legislation such as the CRA and NIS 2.

¿Qué financia esta convocatoria?

Scope

The topic supports the European ecosystem in strengthening cybersecurity capacities and in implementing EU legislation such as the Cyber Resilience Act (CRA), the NIS 2 Directive, the GDPR, DORA, the Cybersecurity Act and specific requirements of the AI Act. Applications should address at least one of the eligible pieces of legislation. The topic also promotes cybersecurity skills, cross-border collaboration and diversity in the cybersecurity workforce.

Main areas

• Building the capacity of national certification authorities, conformity assessment bodies and certification laboratories, including a "Certification and Evaluation as a Service" platform and expert hubs.
• Support for SMEs to meet legal requirements, with guidelines and user-friendly compliance tools; pilot projects to test CRA compliance.
• Reporting platforms for NIS 2 incidents and CRA vulnerabilities, common tools for audits and notifications, and cyber threat intelligence sharing at national, sectoral and EU level.
• Training programmes, benchmarking, peer exchange and fellowships, onboarding programmes for young people and support for pan-European teams in cybersecurity competitions.
• Security and privacy by design, and support for organisations, including SMEs, in assessing and commercialising privacy-enhancing technologies.

Expected outcomes

Projects should cover one or more outcomes such as guidelines and standardised processes for challenging legal issues, tools and awareness for CRA conformity assessment with a focus on SMEs, mechanisms reducing administrative burden (for example a single entry point for incident notification), secure communication channels, training courses and certification materials, and stronger cooperation along the privacy-enhancing technology value chain.

¿Cuándo termina el plazo?

14 de enero de 2027 (70 días)

14 January 2027