Coordinated preparedness testing and other preparedness actions

As part of the ECCC Work Programme 2025-2027, this grant supports coordinated preparedness testing of entities in sectors of high criticality across the EU, as well as other preparedness actions aimed at enhancing cybersecurity resilience. The objectives include supporting the preparedness of critical and highly critical sectors through testing for potential vulnerabilities, threat and risk assessment services, risk monitoring, improved compliance, coordinated vulnerability disclosure, and comprehensive training courses. The grant aims to assist Member States in improving preparedness and resilience to cyber threats, supporting the implementation of EU directives such as the NIS 2 Directive, and fostering skills development and cooperation across stakeholders.

Check your compatibility

Agency	DIGITAL (EU)
Region	EU
Country	N/A
Legal form	Company, NGO, Government organization, Other
Start date	28 Oct 2025
End date	31 Mar 2026
Max funding	Up to EUR 1,500,000 per grant
Budget	EUR 10,000,000 for this topic in 2025
Coverage	Varies by proposal and eligibility; please refer to call documents for details.

Grant application conditions

Admissibility Conditions	Proposal page limit and layout as described in section 5 of the call document and Part B of the Application Form.
Eligible Countries	As described in section 6 of the call document. Typically EU Member States and eligible associated countries.
Other Eligible Conditions	See section 6 of the call document.
Financial and operational capacity	Assessment of applicants' financial and operational capacity in line with section 7 of the call document.
Legal and financial set-up	Applicants must comply with the legal and financial requirements described in section 10 of the call document.
Target Entities	Competent authorities in EU Member States (e.g. CSIRTs, National Cybersecurity Authorities), entities operating critical infrastructure in high and other critical sectors, Security Operation Centres (SOC), cybersecurity industry stakeholders (including SMEs and start-ups), and organizations implementing NIS 2 Directive requirements.
Grant Objective	Proposals must contribute to actions such as: coordinated preparedness testing, penetration testing, threat and risk assessment, consulting on infrastructure security, risk monitoring, coordinated vulnerability disclosure and management, and developing and delivering cybersecurity training.
Documentation	https://ec.europa.eu/info/funding-tenders/opportunities/portal/screen/opportunities/topic-details/DIGITAL-ECCC-2025-DEPLOY-CYBER-09-COORDPREP

Eligible expenses

Support for testing for potential vulnerabilities (e.g. penetration testing scenario development and execution)

Development and deployment of digital tools and infrastructures for the execution of testing scenarios and cyber exercises

Threat and risk assessment process implementation and analysis

Consulting and recommendations for improving infrastructure security

Risk monitoring services (e.g. attack surface monitoring, asset and vulnerability monitoring)

Support for the adoption of coordinated vulnerability disclosure and management processes

Development and delivery of cybersecurity training, workshops, and exercises

Support for maturity evaluation and compliance activities

Evaluation criteria

Business exclusions

Reporting

Application process

Application requirements