Testare coordonată a pregătirii și alte acțiuni de pregătire în cibersecuritate

Programul Europa digitală

Pe scurt

Banii sunt pentru sprijinirea autorităților competente din statele membre, precum echipele CSIRT și autoritățile naționale de cibersecuritate, în testarea pregătirii împotriva amenințărilor cibernetice și în alte acțiuni de pregătire pentru entitățile care operează infrastructuri critice. Finanțarea acoperă servicii de testare a vulnerabilităților, evaluare a amenințărilor și riscurilor, monitorizare, exerciții și cursuri de instruire, și poate sprijini și industria, cu atenție la start-up-uri și IMM-uri, pentru oportunitățile create de Cyber Resilience Act. Se adresează în principal autorităților publice responsabile cu implementarea Directivei NIS 2, dar și organizațiilor publice și private din sectoare critice.

Grant per proiect

1.500.000 la 1.500.000 EUR

Buget total apel

15.000.000 EUR

Se deschide

01.09.2026

Tip de acțiune

DIGITAL JU Simple Grants

Eligibilitate România

Organizațiile din România pot aplica

Identificator apel

DIGITAL-ECCC-2027-DEPLOY-CYBER-11-COORDPREP

Sursă

Portalul UE pentru finanțări (apeluri tematice)

Expected Outcome:The types of deliverables are presented in two parts.The first part covers:Enhanced cooperation, preparedness and cybersecurity resilience in the EU; preparedness support services.Threat assessment and risk assessment services. The second part covers:Risk monitoring servicesBetter compliance, coordinated vulnerability disclosure and monitoringImproved skills, via exercises and training courses, organisation of events, workshops. Stakeholder consultations and white papers. Objective:This action covers two actions from the Cyber Solidarity Act, dedicated to the Cybersecurity Emergency Mechanism, namely (1) coordinated preparedness testing of entities operating in sectors of high criticality across the Union and (2) other preparedness actions for entities operating in sectors of high criticality and other critical sectors.ObjectivesThese actions aim to complement and not duplicate efforts by Member States and those at Union level to increase the level of protection and resilience to cyber threats, in particular for critical industrial installations and infrastructures, by assisting Member States in their efforts to improve their preparedness for cyber threats and incidents by providing them with knowledge and expertise.Proposals should contribute to achieving at least one of the following objectives:(part 1) Coordinated preparedness testing of entities operating in sectors of high criticality across the Union (including penetration testing and threat assessment) considering ICT as well as Operational Technology/Industrial Control Systems.(part 2) Other preparedness actions for entities operating in sectors of high criticality and other critical sectors (i.e. vulnerability monitoring, exercises and training courses). For details on the actions related to (part 1) and (part 2) covered under the current call for proposals, please consult the Call document accordingly.Scope:[Part 1 Coordinated preparedness testing]The provision of preparedness support services shall include the activities listed below, for entities in the sector or sub-sector as identified by the Commission in accordance with the Cyber Solidarity Act, from the Sectors of High Criticality listed in Annex I to Directive (EU) 2022/2555 and specified in the call for proposal document for each of the calls under this topic:Support for testing for potential vulnerabilities:Development of penetration testing scenarios. The proposed scenarios may cover Networks, Applications, Virtualisation solutions, Cloud solutions, Industrial Control systems, and IoT.Support for conducting testing of essential entities operating critical infrastructure for potential vulnerabilities.Support for the deployment of digital tools and infrastructures supporting the execution of testing scenarios and for conducting exercises such as the development of standardised cyber-ranges or other testing facilities, able to mimic features of critical sectors (e.g. energy sector, transport sector, etc.) or others affected by NIS 2 to facilitate the execution of cyber-exercises, in particular within cross-border scenarios where relevant.Evaluation and/or testing of cybersecurity capabilities of MS entities and MS sectors (including capabilities to prevent, detect and respond to incidents and stress test of the entire sectors), evaluation and compliance activities aimed at increasing maturity, e.g. on the basis of established maturity models and/or relevant evaluation and compliance schemes.Evaluation and/or testing of cybersecurity capabilities of entities in scope (including for the evaluation and management of risks concerning the supply chain).Consulting services, providing recommendations on how to improve infrastructure security and capabilities. Support for threat assessment and risk assessment, such as:Threat Assessment process implementation and life cycleCustomised risk scenarios analysis. The support will target the competent authorities in the Member States, which play a central role in the implementation of the NIS2 Directive, such as Computer Security Incident Response Teams (CSIRTs) and National Cybersecurity Authorities.[Part 2 other preparedness actions]For the second part, in addition to the services already listed for Part 1 (support for testing for potential vulnerabilities and support for threat assessment and risk management), the provision of preparedness support services included below addresses entities operating in highly critical and other critical sectors as referred to in Annex I and II of the NIS 2 Directive.Support for threat assessment and risk assessment:Supply chain risk management within the risk assessment services. Risk monitoring service:Specific continuous risk monitoring such as attack surface monitoring, risk monitoring of assets and vulnerabilities. Support coordinated vulnerability disclosure and management:Promote the adoption of national CVD Policies [1] and the EU Vulnerability Database.Coordinate the disclosure of vulnerabilities and timely dissemination of security patches. Standardisation of the way information is shared between different stakeholders in the vulnerability handling process.CVD applications that manage multiple sources of vulnerability information using open standards or technologies. (e.g. researchers, vendors, CSIRTs).Raise awareness on the adoption of vulnerability management best practices. Dedicated exercises and training courses:Develop [2] comprehensive training programmes and workshops, including international ones, for cybersecurity professionals that will cover the latest trends in cyber threats, attack methodologies, and best practices for pre-threat management and prevention. Maturity checks, evaluation of cybersecurity capabilities.Encourage the development of cybersecurity continuous learning activities [3] to keep up with all cybersecurity requirements driven by EU cybersecurity-related regulations and directives, including the NIS 2 Directive, CSA, CSoA, DORA, EECC, GDPR, CRA. The support will target the competent authorities in the Member States, which play a central role in the implementation of the NIS2 Directive, Computer Security Incident Response Teams (CSIRTs) including sectorial CSIRTs, Security Operation Centres (SOC)/Cyber Hubs, highly critical and other critical sectors, industry stakeholders (including Information Sharing and Analysis Centres- ISACs) and any other actors within the scope of the NIS 2 Directive, DORA, CSA, etc.Support may be provided, among others, for the on boarding to the CEF Cybersecurity Core Service Platforms of public and private organisations which are working on the implementation of the NIS 2 Directive and are potential users of the CEF Cybersecurity Core Service Platforms.The action may also support industry, with a particular focus on start-ups and SMEs, to seize the industrial and market uptake opportunities created by the Cyber Resilience Act and may support the implementation of the NIS 2 Directive.[1] Coordinated Vulnerability Disclosure Policies in the EU, ENISA, 2022, available at: https://www.enisa.europa.eu/publications/coordinated-vulnerability-disclosure-policies-in-the-eu[2] Based on the European Cybersecurity Skills Framework (ECSF)[3] Based on ECSF: https://www.enisa.europa.eu/topics/education/european-cybersecurity-skills-framework

Conditions1. Admissibility conditions: Proposal page limit and layoutdescribed in section 5 of the call document.Proposal page limits and layout: described in Part B of the Application Form available in the Submission System.2. Eligible countriesdescribed in section 6 of the call document.3. Other eligibility conditionsdescribed in section 6 of the call document.4. Financial and operational capacity and exclusiondescribed in section 7 of the call document.5a. Evaluation and award: Submission and evaluation processesdescribed section 8 of the call document and the Online Manual.5b. Evaluation and award: Award criteria, scoring and thresholdsdescribed in section 9 of the call document.5c. Evaluation and award: Indicative timeline for evaluation and grant agreementdescribed in section 4 of the call document.6. Legal and financial set-up of the grantsdescribed in section 10 of the call document. Call document and annexes: Call documentApplication form templatesStandard application form (DEP), the application form specific to this call is available in the Submission SystemOwnership control declarationModel Grant Agreements (MGA)DEP MGAAdditional documents: Digital Europe Cybersecurity Work Programme 2025-2027DEP Regulation 2021/964EU Financial Regulation 2024/2509Rules for Legal Entity Validation, LEAR Appointment and Financial Capacity AssessmentEU Grants AGA, Annotated Model Grant AgreementFunding & Tenders Portal Online ManualFunding & Tenders Portal Terms and ConditionsFunding & Tenders Portal Privacy Statement

• 46091

Apelul oficial

Condițiile din ghidul oficial sunt singurele care contează la depunere.

Program