RFAs: Strengthening EU Cybersecurity Capacities and Capabilities in Line with Legislative Requirements

Deadline: 14-Jan-2027

The Strengthening EU Cybersecurity Capacities and Capabilities in Line with Legislative Requirements grant supports the European cybersecurity ecosystem in strengthening technical and institutional capabilities while helping organisations implement new EU cybersecurity legislation. The initiative responds to the rapidly evolving cybersecurity threat landscape and the increasing complexity of digital systems across Europe. It focuses on capacity building, workforce development, regulatory compliance, certification, and cross-border cooperation. The programme supports implementation of important EU regulatory frameworks, including the Cyber Resilience Act, NIS 2 Directive, General Data Protection Regulation (GDPR), Digital Operational Resilience Act (DORA), and Cybersecurity Act. The action has a total budget of €20 million, with individual project grants ranging from €3 million to €5 million. Eligible applicants are legal entities established in EU Member States or eligible EEA countries.

About the EU Cybersecurity Capacities and Capabilities Grant

The initiative aims to strengthen cybersecurity capabilities throughout the European Union and EEA by supporting organisations and professionals responsible for cybersecurity certification, compliance, assessment, and workforce development. As cyber threats become more sophisticated and digital systems increasingly interconnected, European organisations need both strong technical capabilities and the ability to comply with evolving regulatory requirements. The programme therefore supports activities that connect cybersecurity capacity building with the implementation of European legislation. It also seeks to create a more coordinated and resilient cybersecurity ecosystem by promoting collaboration between national authorities, conformity assessment bodies, cybersecurity professionals, training organisations, and other relevant stakeholders. Key EU Cybersecurity Legislation Covered The initiative supports capacity building and compliance related to several important EU regulatory frameworks, including: - Cyber Resilience Act - NIS 2 Directive - General Data Protection Regulation (GDPR) - Digital Operational Resilience Act (DORA) - Cybersecurity Act These legislative frameworks establish requirements and responsibilities related to cybersecurity, digital resilience, data protection, certification, and risk management. The programme aims to help the European cybersecurity ecosystem develop the capabilities needed to respond effectively to these regulatory and operational requirements. Main Objectives of the Programme The grant focuses on strengthening cybersecurity capacities and capabilities across Europe.

Key objectives include:

- Building national cybersecurity capacity. - Strengthening cybersecurity certification capabilities. - Supporting conformity assessment bodies. - Improving regulatory compliance. - Developing interoperable cybersecurity solutions. - Streamlining certification and evaluation processes. - Expanding cybersecurity workforce capabilities. - Providing practical cybersecurity training. - Encouraging diversity within the cybersecurity workforce. - Promoting cross-border cooperation. - Creating expert hubs for certification and compliance. - Connecting cybersecurity professionals across Europe. Strengthening National Cybersecurity Certification Authorities One important priority is strengthening capacity within national cybersecurity certification authorities. These authorities play an important role in implementing cybersecurity certification frameworks and ensuring that relevant processes operate effectively. Projects can support the development of tools, systems, training, and other capabilities that help national authorities improve certification-related activities. The programme also encourages greater interoperability between systems to make certification and evaluation processes more efficient. Supporting Conformity Assessment Bodies The programme also places emphasis on conformity assessment bodies. These organisations have an important role in assessing whether products, services, and systems meet relevant cybersecurity requirements. Supported activities can help strengthen their technical and operational capacity while improving the processes used for cybersecurity evaluation and certification. Development of Interoperable Solutions Interoperability is another important focus of the programme. Projects can support the development of interoperable systems and solutions designed to streamline cybersecurity certification and evaluation. Such solutions can help different stakeholders work more efficiently across organisational and national boundaries. Improved interoperability can also contribute to a more harmonised approach to cybersecurity compliance across Europe. Cybersecurity Workforce Development The initiative recognises that strong cybersecurity infrastructure depends on a skilled workforce. The programme therefore supports practical training, workforce development, and professional capacity building. Training activities can help cybersecurity professionals develop the technical and operational skills needed to address evolving cyber threats and meet new legislative requirements. The programme also seeks to create opportunities for young professionals entering the cybersecurity sector. Promoting Diversity in Cybersecurity The initiative places importance on increasing diversity within the European cybersecurity workforce.

Activities may seek to attract:

- Young professionals. - Underrepresented groups. - New cybersecurity talent. - Professionals seeking to develop cybersecurity skills. A broader and more diverse cybersecurity workforce can help strengthen the long-term capacity of Europe’s digital security ecosystem. Training and Capacity-Building Activities The grant can support practical training and educational activities designed to strengthen cybersecurity capabilities. Potential activit