Loading…
Strategic Analysis
A winning proposal must position the National Coordination Centre (NCC) as an indispensable national hub seamlessly interconnected with the European Cybersecurity Competence Centre (ECCC) and the pan-European NCC Network. Success hinges on demonstrating concrete operational mechanisms to accelerate SME cybersecurity uptake, orchestrate financial support to third parties (FSTP), and actively bridge national capacity with the European Cyber Skills Academy.
TRL 6 → 8
Based on programme defaults
Acting as contact points at the national level for the Cybersecurity Competence Community to support the ECCC in achieving its objectives and missions.
Providing expertise and actively contributing to the strategic tasks of the ECCC, taking into account relevant national and regional challenges for cybersecurity in different sectors and deliver tasks supporting the implementation of the Cyber skills Academy.
Promoting, encouraging and facilitating the participation of civil society and industry, in particular start-ups and SMEs, academic and research communities and other actors at Member State level in cross-border projects and cybersecurity actions funded through all relevant Union programmes.
Providing technical assistance to stakeholders by supporting stakeholders in their application phase for projects managed by the ECCC, and in full compliance with the rules of sound financial management, especially on conflicts of interests. This should be done in close coordination with the relevant NCPs set up by the Member States.
Seeking to establish synergies with relevant activities at national, regional and local levels, such as addressing cybersecurity in national policies on research, development and innovation in the area of those policies stated in the national cybersecurity strategies. Where relevant, implementing specific actions for which grants have been awarded by the ECCC, including through the provision of financial support to third parties in accordance with Article 204 of the Financial Regulation under the conditions specified in the grant agreements concerned, in particular aimed at strengthening the uptake and dissemination of state-of-the-art cybersecurity solutions (notably by SMEs).
Supporting the scaling-up of start-ups by finding other funding to implement existing projects.
Promoting and disseminating the relevant outcomes of the work of the Network and the ECCC at national, regional or local level.
Assessing requests for becoming part of the Cybersecurity Competence Community by entities established in the same Member State as the NCC.
Advocating and promoting involvement by relevant entities in the activities arising from the ECCC, the Network of National Coordination Centres, and the Cybersecurity Competence Community, and monitoring, as appropriate, the level of engagement with actions awarded for cybersecurity research, developments and deployments.
Supporting the Cybersecurity Competence Community registration (on platforms such as ATLAS) and contributing to the development of suitable community management tools.
Provide support to innovative ideas towards market-readiness.
Promote cybersecurity awareness, best practices, and careers in schools, universities, and community events (for instance by launching a pan-European programme where young individuals will be trained as ambassadors to promote cybersecurity.)
Strengthen collaboration between institutions for higher education, e.g. by jointly organising events, by teaching students and working together on cutting-edge research. Support activities in primary and secondary levels of education to increase cybersecurity awareness and hygiene, through educating the teachers and educators.
Build stronger partnerships with established SMEs, tech companies, and government agencies to develop and distribute software tools and services that assist in early threat detection, actor identification, and threat evolution monitoring. These collaborations can ensure that cybersecurity professionals have access to the latest tools and technologies for effective threat management.
In collaboration with other entities, as needed, organise periodic cybersecurity boot camps, challenges, awareness campaigns and training courses across Europe, specifically for SMEs or students (e.g. focusing on equipping participants with hands on skills to manage prevalent cyber threats through training sessions, workshops, and simulation activities tailored to their industry). Organise periodic awareness raising campaigns, at national and regional level, to increase cybersecurity awareness and hygiene aimed at different demographics. Organise national and regional cyber exercises to enhance the security and resilience of critical sectors as well as SMEs.
Foster a community of cybersecurity professionals who can share their experiences, challenges, and solutions.
Support and encourage the uptake of cybersecurity educational policy goals in national (cybersecurity) strategies.
Promote safer digital behaviours and more youth considering cybersecurity careers.
Support the adoption of market-ready innovative cybersecurity solutions, including solutions developed in the framework of EU-supported research and innovation projects.
Provide and deploy up to date tools and services to organisations (in particular SMEs) to prepare, protect (e.g. network security, advanced two-factor or passwordless authentication) and respond to cybersecurity threats.
Network of national initiatives to accelerate the cybersecurity industry and facilitate Access-to-Market.
European frameworks for establishing cybersecurity incubators and accelerators.
Cybersecurity Community Observatory to inform subsequent policy interventions by the ECCC and NCCs.
Matchmaking events to create connections and build trust; platforms and events for Access-to-Finance and Access-to-Market including in the area of dual-use technologies.
Strengthened Cybersecurity Community to support the European Cybersecurity Industrial, Technology and Research Competence Centre; Maintained technical registration possibilities for candidates for the Cybersecurity Competence Community; Technical assistance for potential applicants for ECCC calls.
Uptake of cybersecurity solutions.
Strengthened cybersecurity capacities of stakeholders.
Synergetic activities that strengthen the role of NCC.
Centralised the many initiatives focusing on raising awareness and work together with other NCCs to support a cross European approach covering education, studies, training courses and awareness campaigns [1] Share and provide best practices related to the awareness topic.
Support the transfer of best practices related to cybersecurity teaching for primary and secondary school and other activities for children and youngsters (including camps, materials, games, etc.).
Support for teachers and professors to have access to best practices available in the EU and facilitate dialogue.
Support the development of cross-over educational solutions for SMEs, for example by gamification.
Cyber campaign material focused on young professionals and students of all ages and gender to pursue and advance in cybersecurity careers, where the NCCs can build on in view of regional differences.
Cyber campaign material focused on parents and teachers of future students of all ages and gender to raise the number of cybersecurity students.
Platform supporting a network of young cybersecurity ambassadors spreading awareness and fostering a culture of cybersecurity among Europe's youth.
Common services to be provided within national cyber campuses.
Hybrid events for the cybersecurity competence community to increase awareness of cybersecurity threats, threat actor modus operandi and potential impact, potentially in collaboration with existing initiatives and platforms.
Deliverables supporting the implementation of the Cyber skills Academy.
Support for activities dedicated to the EU Cybersecurity Challenges.
Establish and maintain a marketplace for cybersecurity products and services.
Allow the retrieval of information on entities adhering to the 27 NCC communities.
No expected impacts identified for this destination.
Regulation (EU) 2021/887
highRegulation (EU) 2021/887 establishes the European Cybersecurity Industrial, Technology and Research Competence Centre (ECCC) and the Network of National Coordination Centres (NCCs). It sets the framework for pooling cybersecurity research and industrial capacities across the EU.
Evaluators expect proposals to directly operationalise coordination mechanisms among NCCs, align with ECCC governance structures, and demonstrate how cross-border cooperation and capacity-building will be enhanced in line with the mandate of the Regulation.
Directive (EU) 2022/2555 (NIS 2 Directive)
highDirective (EU) 2022/2555 (NIS 2) establishes modernised cybersecurity risk-management requirements and reporting obligations across critical and essential sectors in the EU. It aims to achieve a high common level of cybersecurity across Member States.
Evaluators expect proposals to explain how network activities assist national stakeholders and critical entities in achieving NIS 2 compliance, strengthening incident reporting pipelines, and fostering operational resilience.
Regulation (EU) 2021/694 (DEP Regulation)
highRegulation (EU) 2021/694 establishes the Digital Europe Programme (DEP), funding the deployment and uptake of critical digital capacities such as cybersecurity, supercomputing, and artificial intelligence across the EU.
Evaluators expect proposals to demonstrate how network operations contribute to the core objectives and Key Performance Indicators of the Digital Europe Programme, particularly in building strategic digital capacities and uptake in Member States.
Cyber Resilience Act
mediumThe Cyber Resilience Act (CRA) introduces mandatory cybersecurity requirements for products with digital elements throughout their entire lifecycle. It aims to ensure hardware and software placed on the EU single market meet rigorous security standards.
Evaluators expect to see strategies for supporting industry and SMEs in complying with CRA standards, promoting secure-by-design practices, and facilitating vulnerability handling across national ecosystems.
Cybersecurity Act
mediumThe Cybersecurity Act (Regulation (EU) 2019/881) establishes a permanent mandate for the EU Agency for Cybersecurity (ENISA) and creates the EU-wide cybersecurity certification framework for ICT products, services, and processes.
Evaluators expect proposals to leverage or support European cybersecurity certification schemes, align with ENISA guidelines, and demonstrate coherent cooperation across national authorities and testing facilities.
EU Financial Regulation 2024/2509
lowThis regulation governs the financial management of EU funds, ensuring transparency, accountability, and efficient use of resources. It is relevant for proposals involving large-scale piloting and validation of AI systems in healthcare.
Evaluators will look for clear financial planning, cost-efficiency analysis, and compliance with EU financial rules, particularly in demonstrating the economic viability and sustainability of the proposed AI solutions.
">
described in section 5 of the call document.
Proposal page limits and layout: described in Part B of the Application Form available in the Submission System.
described in section 6 of the call document.
described in section 6 of the call document.
described in section 7 of the call document.
described section 8 of the call document and the Online Manual.
described in section 9 of the call document.
described in section 4 of the call document.
described in section 10 of the call document.
Application form templates
Standard application form (DEP) — the application form specific to this call is available in the Submission System
Model Grant Agreements (MGA)
Digital Europe Cybersecurity Work Programme 2025-2027
EU Financial Regulation 2024/2509
Rules for Legal Entity Validation, LEAR Appointment and Financial Capacity Assessment
EU Grants AGA — Annotated Model Grant Agreement
Funding & Tenders Portal Online Manual
Evaluators will prioritize actionable cross-border collaboration and measurable national ecosystem activation over generic networking activities. Key review factors include robust governance for Community management (including ATLAS integration), proven capacity to channel cascading grants (FSTP) under Article 204 to SMEs/start-ups, and concrete synergies bridging local education/industrial roadmaps with EU-wide initiatives like the Cyber Skills Academy and NIS2 compliance.
Everything the call asks for, seen from the call's point of view. Each line shows what answers it, and which partner carries it.
This matrix lists everything the call asks for: outcomes, impacts, scope, the requirements buried in the call text, and policy alignment. Sign up free and GrantForge tracks each line against the concept you build.
| Requirement | Covered by | Carried | Status |
|---|---|---|---|
| Scope activities | |||
| SC1Acting as contact points at the national level for the Cybersecurity Competence Community to support the ECCC in achieving its objectives and missions. | · | · | Sign up to track |
| SC2Providing expertise and actively contributing to the strategic tasks of the ECCC, taking into account relevant national and regional challenges for cybersecurity in different sectors and deliver tasks supporting the implementation of the Cyber skills Academy. | · | · | Sign up to track |
| SC3Promoting, encouraging and facilitating the participation of civil society and industry, in particular start-ups and SMEs, academic and research communities and other actors at Member State level in cross-border projects and cybersecurity actions funded through all relevant Union programmes. | · | · | Sign up to track |
| SC4Providing technical assistance to stakeholders by supporting stakeholders in their application phase for projects managed by the ECCC, and in full compliance with the rules of sound financial management, especially on conflicts of interests. This should be done in close coordination with the relevant NCPs set up by the Member States. | · | · | Sign up to track |
| SC5Seeking to establish synergies with relevant activities at national, regional and local levels, such as addressing cybersecurity in national policies on research, development and innovation in the area of those policies stated in the national cybersecurity strategies. Where relevant, implementing specific actions for which grants have been awarded by the ECCC, including through the provision of financial support to third parties in accordance with Article 204 of the Financial Regulation under the conditions specified in the grant agreements concerned, in particular aimed at strengthening the uptake and dissemination of state-of-the-art cybersecurity solutions (notably by SMEs). | · | · | Sign up to track |
| SC6Supporting the scaling-up of start-ups by finding other funding to implement existing projects. | · | · | Sign up to track |
| SC7Promoting and disseminating the relevant outcomes of the work of the Network and the ECCC at national, regional or local level. | · | · | Sign up to track |
| SC8Assessing requests for becoming part of the Cybersecurity Competence Community by entities established in the same Member State as the NCC. | · | · | Sign up to track |
| SC9Advocating and promoting involvement by relevant entities in the activities arising from the ECCC, the Network of National Coordination Centres, and the Cybersecurity Competence Community, and monitoring, as appropriate, the level of engagement with actions awarded for cybersecurity research, developments and deployments. | · | · | Sign up to track |
| SC10Supporting the Cybersecurity Competence Community registration (on platforms such as ATLAS) and contributing to the development of suitable community management tools. | · | · | Sign up to track |
| SC11Provide support to innovative ideas towards market-readiness. | · | · | Sign up to track |
| SC12Promote cybersecurity awareness, best practices, and careers in schools, universities, and community events (for instance by launching a pan-European programme where young individuals will be trained as ambassadors to promote cybersecurity.) | · | · | Sign up to track |
| SC13Strengthen collaboration between institutions for higher education, e.g. by jointly organising events, by teaching students and working together on cutting-edge research. Support activities in primary and secondary levels of education to increase cybersecurity awareness and hygiene, through educating the teachers and educators. | · | · | Sign up to track |
| SC14Build stronger partnerships with established SMEs, tech companies, and government agencies to develop and distribute software tools and services that assist in early threat detection, actor identification, and threat evolution monitoring. These collaborations can ensure that cybersecurity professionals have access to the latest tools and technologies for effective threat management. | · | · | Sign up to track |
| SC15In collaboration with other entities, as needed, organise periodic cybersecurity boot camps, challenges, awareness campaigns and training courses across Europe, specifically for SMEs or students (e.g. focusing on equipping participants with hands on skills to manage prevalent cyber threats through training sessions, workshops, and simulation activities tailored to their industry). Organise periodic awareness raising campaigns, at national and regional level, to increase cybersecurity awareness and hygiene aimed at different demographics. Organise national and regional cyber exercises to enhance the security and resilience of critical sectors as well as SMEs. | · | · | Sign up to track |
| SC16Foster a community of cybersecurity professionals who can share their experiences, challenges, and solutions. | · | · | Sign up to track |
| SC17Support and encourage the uptake of cybersecurity educational policy goals in national (cybersecurity) strategies. | · | · | Sign up to track |
| SC18Promote safer digital behaviours and more youth considering cybersecurity careers. | · | · | Sign up to track |
| SC19Support the adoption of market-ready innovative cybersecurity solutions, including solutions developed in the framework of EU-supported research and innovation projects. | · | · | Sign up to track |
| SC20Provide and deploy up to date tools and services to organisations (in particular SMEs) to prepare, protect (e.g. network security, advanced two-factor or passwordless authentication) and respond to cybersecurity threats. | · | · | Sign up to track |
| Expected outcomes | |||
| EO1Network of national initiatives to accelerate the cybersecurity industry and facilitate Access-to-Market. | · | · | Sign up to track |
| EO2European frameworks for establishing cybersecurity incubators and accelerators. | · | · | Sign up to track |
| EO3Cybersecurity Community Observatory to inform subsequent policy interventions by the ECCC and NCCs. | · | · | Sign up to track |
| EO4Matchmaking events to create connections and build trust; platforms and events for Access-to-Finance and Access-to-Market including in the area of dual-use technologies. | · | · | Sign up to track |
| EO5Strengthened Cybersecurity Community to support the European Cybersecurity Industrial, Technology and Research Competence Centre; Maintained technical registration possibilities for candidates for the Cybersecurity Competence Community; Technical assistance for potential applicants for ECCC calls. | · | · | Sign up to track |
| EO6Uptake of cybersecurity solutions. | · | · | Sign up to track |
| EO7Strengthened cybersecurity capacities of stakeholders. | · | · | Sign up to track |
| EO8Synergetic activities that strengthen the role of NCC. | · | · | Sign up to track |
| EO9Centralised the many initiatives focusing on raising awareness and work together with other NCCs to support a cross European approach covering education, studies, training courses and awareness campaigns [1] Share and provide best practices related to the awareness topic. | · | · | Sign up to track |
| EO10Support the transfer of best practices related to cybersecurity teaching for primary and secondary school and other activities for children and youngsters (including camps, materials, games, etc.). | · | · | Sign up to track |
| EO11Support for teachers and professors to have access to best practices available in the EU and facilitate dialogue. | · | · | Sign up to track |
| EO12Support the development of cross-over educational solutions for SMEs, for example by gamification. | · | · | Sign up to track |
| EO13Cyber campaign material focused on young professionals and students of all ages and gender to pursue and advance in cybersecurity careers, where the NCCs can build on in view of regional differences. | · | · | Sign up to track |
| EO14Cyber campaign material focused on parents and teachers of future students of all ages and gender to raise the number of cybersecurity students. | · | · | Sign up to track |
| EO15Platform supporting a network of young cybersecurity ambassadors spreading awareness and fostering a culture of cybersecurity among Europe's youth. | · | · | Sign up to track |
| EO16Common services to be provided within national cyber campuses. | · | · | Sign up to track |
| EO17Hybrid events for the cybersecurity competence community to increase awareness of cybersecurity threats, threat actor modus operandi and potential impact, potentially in collaboration with existing initiatives and platforms. | · | · | Sign up to track |
| EO18Deliverables supporting the implementation of the Cyber skills Academy. | · | · | Sign up to track |
| EO19Support for activities dedicated to the EU Cybersecurity Challenges. | · | · | Sign up to track |
| EO20Establish and maintain a marketplace for cybersecurity products and services. | · | · | Sign up to track |
| EO21Allow the retrieval of information on entities adhering to the 27 NCC communities. | · | · | Sign up to track |
| Other requirements | |||
| REQ1DEP Article 12(5) security restrictions and non-EU entity risksActions are subject to Article 12(5) of the DEP Regulation (2021/694) to protect against foreign influence and control, preventing non-EU entities from disclosing sensitive cybersecurity infrastructure, risk, and incident data to foreign governments. | · | · | Sign up to track |
| REQ2Synergies with ENISA and ongoing EU/national initiativesActivities must consider ongoing projects, campaigns, and the mandate of ENISA and other EU or national bodies to ensure EU-level synergies and avoid duplicating efforts. | · | · | Sign up to track |
| REQ3Coordination with European Cyber Skills AcademyNCCs are required to actively bridge national capacity with the European Cyber Skills Academy and deliver tasks supporting its implementation. | · | · | Sign up to track |
| REQ4Coordination with National Contact Points (NCPs)Technical assistance provided to stakeholders applying for ECCC-managed projects must be executed in close coordination with relevant NCPs set up by Member States. | · | · | Sign up to track |
| REQ5Multi-stakeholder engagement across industry, academia, and civil societyApplicants must promote and facilitate the involvement of civil society, industry (particularly SMEs and start-ups), academic and research communities, and government agencies in cross-border cybersecurity projects. | · | · | Sign up to track |
| REQ6Collaboration across the pan-European NCC Network and ECCCThe NCC must work seamlessly interconnected with the ECCC and the pan-European NCC network, supporting cross-European collaboration and community management tools like ATLAS. | · | · | Sign up to track |
| Expected impacts | |||
| No expected impacts in this call. | |||
| Underlying policies | |||
| POL1regulation (eu) 2021/887Regulation (EU) 2021/887 establishes the European Cybersecurity Industrial, Technology and Research Competence Centre (ECCC) and the Network of National Coordination Centres (NCCs). It sets the framework for pooling cybersecurity research and industrial capacities across the EU. | · | · | Sign up to track |
| POL2nis 2 directiveDirective (EU) 2022/2555 (NIS 2) establishes modernised cybersecurity risk-management requirements and reporting obligations across critical and essential sectors in the EU. It aims to achieve a high common level of cybersecurity across Member States. | · | · | Sign up to track |
| POL3digital europe programme regulationRegulation (EU) 2021/694 establishes the Digital Europe Programme (DEP), funding the deployment and uptake of critical digital capacities such as cybersecurity, supercomputing, and artificial intelligence across the EU. | · | · | Sign up to track |
The binding rules of this call. Items marked auto are verified by GrantForge from the call and the template. The others are yours to confirm.
5 key insights you must internalise before writing. Each is grounded in the call text and tells you what evaluators will actually look for. Share these with your consortium before drafting.
This call targets exclusively National Coordination Centres already recognised by the Commission. Furthermore, the action is subject to Article 12(5) of the DEP Regulation, meaning the participation of non-EU entities is strictly restricted due to the risk of highly sensitive security information disclosure.
Source: Scope
Evaluators will penalize generic networking activities in favor of measurable ecosystem activation. A critical scoring driver is the proposal's proven capacity to channel cascading grants (FSTP) under Article 204 directly to SMEs and start-ups to accelerate market readiness.
Source: Evaluation_pre_award
Community management cannot be treated as a standard communication task. The evaluation explicitly requires robust governance structures that include concrete mechanisms for ATLAS platform integration to handle ECCC community vetting and registration.
Source: Evaluation_pre_award
Proposals must explicitly connect national capacities to European frameworks. Evaluators expect concrete operational mechanisms demonstrating how the NCC will support the European Cyber Skills Academy and assist local stakeholders in achieving NIS 2 compliance.
Source: Evaluation_pre_award
There is no obligation to execute all actions listed in the call text. Applicants must strategically select tasks and deliverables that align with their specific national mandate and previous financing, focusing on deep execution rather than superficial coverage of the entire list.
Source: Scope
Nothing to show for this call yet.