Strengthening Cybersecurity of micro, small and medium-sized enterprises
ClosedDescription
Applicants may apply for support for the implementation of activities that contribute to improving the cybersecurity of their enterprise. Applicants are required to combine activities, i.e. to select at least one activity from a minimum of two different groups of activities listed below: Group 1: Certification and compliance - activities to achieve and demonstrate compliance with applicable security standards and regulatory requirements (e.g., internal cybersecurity self-assessment under the Cybersecurity Act; implementation of measures based on the self-assessment; preparation and/or implementation of a cybersecurity management system aligned to ISO 27001/27002/27005/22301/27032 or similar; certification of the management system by an accredited body). Group 2: Education - activities that strengthen staff competencies through specialized trainings, workshops, and awareness-raising (e.g., trainings on implementing measures based on a self-assessment or completed security testing; trainings related to the introduction and/or certification of a cybersecurity management system per internationally recognized standards; general cybersecurity trainings). Group 3: Security testing - activities such as penetration testing and other assessments to evaluate and improve security (e.g., internal/external/application penetration testing; vulnerability scanning and assessments; social-engineering exercises; risk assessments; development and exercising of incident response and recovery plans).
Beneficiary & submission
Applications must be submitted within the deadline specified in the Call. Proposals are evaluated after the call closure based on eligibility and quality criteria. The evaluation process includes an administrative check, eligibility check, and assessment against predefined award criteria. Only proposals meeting the eligibility requirements and achieving the minimum score may be recommended for funding. Applicants will be notified of the results and invited to sign the grant agreement.
Project submissions must be made through the IT portal at projekti.nks.hr
Further information
NCC-HR project, co-funded by the European Union under the Digital Europe Programme (DIGITAL) grant agreement No 101195170, foresees as an eligible activity the provision of financial support to third parties, with the objective of strengthening the cybersecurity of micro, small and medium-sized enterprises (SMEs).
Detailed information about the call, including eligibility criteria, application procedures and supporting documents, is available on the official website of the National Coordination Centre - Croatia (NCC-HR) at nks.hr/poziv