CyberCertification Boost: Supporting the development of certification capacity in cybersecurity

Description

The main objective of this call is to support through projects the development of testing and certification capacities in the field of cyber security and to strengthen the capabilities of Czech and European entities to perform certifications according to the EUCC IA and the EUCC certification scheme. The call focuses on the following activities: Building and accrediting Conformity Assessment Bodies (CABs), i.e. CB certification bodies and ITSEF testing laboratories): o Building and accreditation of Certification Bodies (CBs): the objective is to support the establishment and accreditation of CBs that will be able to certify ICT products and services according to European cybersecurity standards - in line with the EUCC/EUCC IA. This will contribute to the development of the necessary certification infrastructure at national and European level. o Building and Accreditation of Testing Laboratories (ITSEF): The aim is to build and accredit testing laboratories that will provide independent testing of the security functions of ICT products in line with the IA EUCC/EUCC. These labs will become a key tool to support certification processes and increase trust in cyber products and services. The projects must clearly describe how they contribute to achieving the objectives of the Challenge and strengthening certification capabilities in the Czech Republic and in the EU (in the context of the IA EUCC/EUCC). Further information available on Národní úřad pro kybernetickou a informační bezpečnost - Výzvy

Beneficiary & submission

The project proposal will be submitted by the applicant via the application form attached to this call for proposals. The proposal will include the mandatory annexes and any other annexes that the applicants decide to attach in order to demonstrate the eligibility, quality and applicability of the results, the suitability of the proposed mechanism for their application in the context of sustainability, or other parameters of the project. For each project, a member of the NCC-CZ Council will be appointed by the NCC-CZ Council to manage the evaluation process, based on the submission and the sectoral focus of the project. As part of the evaluation, the NCC-CZ administrators will assess the formal compliance of the submitted project proposal with the requirements of the call and will carry out an assessment of the acceptability of the project in terms of the substantive requirements for projects. An independent evaluators will assess the quality and compliance with the material requirements of the projects in accordance with the Terms of Reference of the NCC-CZ and this call. Further information available on Národní úřad pro kybernetickou a informační bezpečnost - Výzvy

Further information

The maximum amount of financial support (in the form of a grant) is EUR 100,000. The projects will be financed at 50% of the eligible costs, which means that the beneficiary will receive support equal to one half of the eligible costs incurred in the implementation of the project and demonstrated according to the established rules. Projects implemented under this call will be funded on the basis of actual costs. The financial support awarded to the project may be less than the amount requested in the application. The decision on the final amount of support to be granted will depend on the quality of the project application, the consistency of the expected results with the proposed budget and the structure of the individual costs planned. Beneficiaries will be required to regularly document the actual expenditure associated with the implementation of the project. Details of the frequency and form of reporting will be specified in the grant agreement. Applicants must ensure that the project proposal complies with conditions that prevent the financing of the project from giving rise to unlawful indirect State aid within the meaning of the relevant European legislation or to double funding. The following types of organisations are eligible to participate in this call and meet the criteria set out in the EU Digital Europe programme: - Small and medium-sized enterprises engaged in (or interested in) providing services in the field of cyber security, ICT product testing or certification processes. Eligible enterprises are those interested in developing and accrediting a conformity assessment body (CAB), i.e. a certification body or testing laboratories in accordance with European standards, or in providing training for professionals involved in certification processes. Also eligible are enterprises that focus on education or training in the field of cyber security, especially in the context of certification and testing of ICT products. In other words, enterprises that provide, or are interested in providing, training to auditors, testers and other professionals involved in certification processes under the IA EUCC/EUCC. - (Future) Conformity Assessment Bodies (CABs): Eligible are bodies that have an interest in developing and accrediting conformity assessment bodies (CABs), i.e. certification bodies or testing laboratories in accordance with European standards, or in providing training for professionals involved in certification processes. Institutions seeking to have laboratory capacity that can be used for testing processes in the EU Common Criteria scheme. - Accreditation body - Consortia and Partnerships: Groups of organisations, which may include combinations of the above entities, working together on joint projects. These consortia should be able to effectively coordinate activities and resources to achieve the objectives of the call. The Applicant must be established in one of the eligible countries, i.e. an EU Member State (including overseas countries and territories) or an EEA country (Norway, Iceland and Liechtenstein). The controlling person of the Applicant, whether a commercial corporation or a natural person, must also be established or resident in one of the eligible countries. Eligibility to apply is subject to the Applicant's ability to meet the objectives and requirements set out in the Digital Europe Programme, including financial and operational stability and the ability to implement and manage projects supported by EU funds. Applicants will also be assessed on their professional capacity on the basis of their application for support in accordance with the evaluation criteria. Further information available on Národní úřad pro kybernetickou a informační bezpečnost - Výzvy