Enhancing the NCC Network

This call under the Digital Europe Programme (Strengthening European Cybersecurity Technologies, Capacities and Preparedness) funds National Coordination Centres to strengthen national cybersecurity ecosystems, support SMEs, skills, market access and community building. The topic DIGITAL-ECCC has an indicative budget of €11,000,000, expects around four grants with an EU contribution of €2–€3 millionper project and funds 50% of eligible costs. Single-stage submissions open on 1 September 2026 and close on 14 January 2027 at 17:00 Brussels time via the EU Funding & Tenders Portal. Only Commission-recognised National Coordination Centres may apply, activities may include financial support to third parties where permitted and must build on and avoid duplicating ENISA or other EU/national initiatives.

Call: Strengthening European Cybersecurity Technologies, Capacities and Preparedness

Short overview

Supports the operation and networked activities of National Coordination Centres (NCCs) to boost cybersecurity capacity, uptake of EU cybersecurity solutions, industry scale-up, incubators/accelerators, awareness and education (including Cyber skills Academy), matchmaking/access-to-market and finance, community observatory and technical assistance for applicants. Activities may include Financial Support to Third Parties where allowed. Proposals must avoid duplicating ENISA or other EU/national initiatives and address security restrictions for non-EU participation ¹.

Who can apply:Only National Coordination Centres (NCCs) that have been recognised by the Commission and can manage funding under Regulation (EU) 2021/887; covers one national centre per Member State (plus Iceland and Norway where relevant).

1. 1What it funds: NCC operation and network activities (incubators/accelerators frameworks, marketplaces, observatory, events, awareness, education, cyber campuses, support to SMEs/start-ups, scale-up and access-to-finance).
2. 2Scope: NCCs choose one or more tasks from the topic list; work must respect EU security, ownership/control and non-duplication rules.

Deadline and procedure:single-stage submission opens 01 September 2026; deadline 14 January 2027 (Brussels time). Use the EU Funding & Tenders Portal submission channels and templates; follow admissibility, eligibility, financial capacity and evaluation rules in the call document ¹.

Footnotes

1. 1See official topic page and call documents for full conditions, templates and submission: DIGITAL-ECCC-2027-DEPLOY-CYBER-11-NCC.

Call summary

Call title:Strengthening European Cybersecurity Technologies, Capacities and Preparedness. Topic identifier: DIGITAL-ECCC. Programme: Digital Europe Programme (DIGITAL). Type of action: DIGITAL JU Simple Grants. Type of Model Grant Agreement: DIGITAL Action Grant Budget-Based (DIGITAL-AG). Opening date: 01 September 2026. Deadline (single-stage): 14 January 2027, 17:00 Brussels time. Submission channel: EU Funding & Tenders Portal (electronic submission).

Primary objective:Support the operation and role of National Coordination Centres (NCCs) as established by Regulation (EU) 2021/887 to: strengthen the Cybersecurity Competence Community at Member State level; facilitate uptake and dissemination of state-of-the-art cybersecurity solutions (with emphasis on SMEs and start-ups); enable access-to-market and access-to-finance activities; develop frameworks for cybersecurity incubators and accelerators; support education, awareness, skills development and the Cyber skills Academy; provide technical assistance to potential applicants for ECCC calls; host marketplaces/platforms integrating existing platforms under the .eu domain; and deliver synergetic national/regional activities that do not duplicate ENISA or other EU/national initiatives ¹.

Expected outcomes and scope of activities

Each recognised NCC may select one or more activities from the scope below according to its mandate and national priorities. No obligation to implement all actions. Examples of expected outcomes and activities: network of national initiatives and matchmaking events; European frameworks for incubators and accelerators; Cybersecurity Community Observatory; platforms and events for Access-to-Finance and Access-to-Market (including dual-use technologies); technical registration and onboarding support for Cybersecurity Competence Community; Financial Support for Third Parties (FSTP) implementation where appropriate; centralised awareness and education actions (primary, secondary, higher education and teachers); youth ambassador networks; Cyber skills Academy deliverables; cyber boot camps, exercises and challenges; marketplace for market-ready cybersecurity products and retrieval of NCC community membership data; support for scale-ups via procurement and private investment facilitation; deployment of up-to-date tools/services for SMEs for protection and response (e.g. network security, advanced 2FA, passwordless authentication); and hybrid events to increase community awareness.

Priority alignment and constraints:Actions must build on and avoid duplicating existing EU and national activities (including ENISA mandates). Proposals should consider NIS2, Cyber Resilience Act, Cybersecurity Act and Directive (EU) 2022/2555 where relevant. Due to security considerations and Article 12(5) of the DEP Regulation (2021/694), participation of non-EU entities is restricted in line with the call document and ownership/control declaration obligations ¹.

1. 1Eligible applicant: exclusively National Coordination Centres recognised by the Commission under Regulation (EU) 2021/887 (i.e. the NCCs that have been validated as having the capacity to manage funds).
2. 2Funding type: grant (budget-based action grant).
3. 3Consortium requirement: single beneficiary submission expected (the topic targets each NCC as beneficiary).
4. 4Geographic eligibility: EU Member States (27) and the Network includes Iceland and Norway in the NCC Network context; actions are targeted at EU/EEA scope and implementation must respect country restrictions noted in the call document where applicable.
5. 5Target sectors: cybersecurity (primary), education and training, SME/start-up ecosystem support, innovation/incubation/acceleration, digital security tools and services, AI in cybersecurity (where relevant), dual-use technologies, public procurement, and capacity building.
6. 6Project maturity expected: operation, deployment, uptake, demonstration and scale-up phases including capacity building and market-readiness support.
7. 7Indicative funding range for this topic: the NCC topic action budget is €11,000,000 (budget year 2026) with indicative individual grant contributions of €2,000,000 to €3,000,000 per grant and an indicative number of grants of 4.
8. 8Application type and process: open call, single-stage submission via the Funding & Tenders Portal; use the Standard Application Form (DEP) Part A and Part B templates found in the submission system.
9. 9Nature of support offered: monetary grants (budget-based), possibly combined with non-monetary services such as technical assistance, matchmaking and community management tools; Financial Support to Third Parties (FSTPs) is allowed where specified.
10. 10Application stages: single-stage evaluation (one step).
11. 11Success rate and number of awards: the call publishes an indicative number of grants (4) for the NCC topic; the exact success rate (applicants vs awards) is not published in the topic text and depends on the number of valid submissions – applicants should not assume a guaranteed award.
12. 12Co-funding: not explicitly mandated in the topic summary; applicants must consult the call document for funding rate and co-funding rules. Standard Digital Europe practice may apply regarding eligible costs and flat-rate indirect costs; check the call document and the DEP Model Grant Agreement provisions for final rules.

Eligibility and applicant requirements

Primary eligible applicants:only National Coordination Centres that have been recognised by the European Commission as NCCs with capacity to manage EU funds and to carry out the mission set out in Regulation (EU) 2021/887. The topic explicitly targets these NCC entities; other organisation types cannot apply as lead beneficiaries for this specific topic. NCCs must be able to handle sensitive information and protect against dependencies and vulnerabilities that could expose systems to undue foreign influence. Applicants must comply with all eligibility sections of the call document (sections 6 and 7) including legal entity validation, capacity, exclusion grounds and ownership/control rules.

Ownership and control requirements:Applicants must complete the Ownership Control Declaration (template provided). Beneficiaries and affiliated entities must provide the declaration; associated partners and subcontractors must provide it only if required by the call conditions. Public bodies validated in the Central Validation Service may be exempt. The declaration documents the entity ownership, control, commercial/financial links and confirms EU-control or lists non-EU controlling entities with potential mitigations; false declarations may lead to rejection or sanctions ¹.

What to include in a strong application

Applications should be concise and highly practical. They must:demonstrate the NCC’s mandate and operational capacity; set out clear work packages with deliverables, milestones and measurable indicators; explain how activities align with ECCC strategic tasks and national/regional cybersecurity strategies; detail use of Financial Support to Third Parties if planned (objectives, selection, caps per third party, eligibility criteria, governance and conflict-of-interest prevention); show synergies with ENISA, national programmes and other EU projects; demonstrate protection for sensitive information and adherence to security requirements; present a feasible budget and value-for-money explanation; and include a communication/dissemination plan tied to the Cyber skills Academy and community engagement actions.

1. 1Technical and operational capacity: evidence of staff, procedures, experience handling sensitive information and managing grants (including FSTP if planned).
2. 2Legal and financial compliance: up-to-date Participant Register data, LEAR appointment, ownership/control declaration, and proof of financial capacity where required.
3. 3Workplan and deliverables: clear work packages, timelines (months from project start), WP leaders, deliverables, milestones and measurable indicators.
4. 4FSTP design (if used): maximum per third party, closed list of eligible activities, objective selection criteria and payment modalities, conflict-of-interest safeguards.
5. 5Security and ethics: security self-assessment, handling of classified/SI material if relevant, and ethics considerations (e.g., minors in education activities).
6. 6Education and outreach: description of curricula, teacher training, gamification approaches for SMEs, youth ambassador network and recruitment/retention targets for cybersecurity students and professionals.
7. 7Market and scale-up measures: marketplace design, access-to-market and access-to-finance events, support to procureable market-ready solutions and links to procurement pipelines and investors.
8. 8Monitoring and evaluation: KPIs, indicators, data collection and reporting processes consistent with Digital Europe continuous reporting and periodic reporting requirements.

Budget, award and administrative details

Budget overview in the Digital Europe call cluster (2026 budget year) lists the NCC topic with an indicative envelope of €11,000,000 and an indicative number of grants of 4. Indicative contribution per grant is €2,000,000 to €3,000,000. The call is single-stage and uses the DIGITAL Action Grant Budget-Based Model Grant Agreement. Other related topics in the cluster have separate budgets and award ranges.

Eligible cost categories and funding modalities:Grants are budget-based. Eligible costs generally include personnel costs (employees, seconded staff, certain natural persons and SME owners under conditions), subcontracting, purchases (travel, equipment, other goods/services), other categories such as financial support to third parties and internally invoiced goods and services, and indirect costs (flat-rate). Specific eligibility rules, depreciation vs full-cost options for equipment, and any country restrictions are set in the call document and the DEP MGA. Applicants must follow the Standard Application Form (DEP) Part A and Part B for budgets and narrative descriptions; page limits and layout rules apply (Part B normally up to 70 pages) ¹.

Application process and templates

Submission is via the EU Funding & Tenders Portal electronic submission system. Applicants must select the correct action type (DIGITAL-JU-SIMPLE / DIGITAL-AG) and cannot change this choice once confirmed in the Submission System. Part A is completed online in the Portal; Part B (technical description) must be downloaded from the system, completed and re-uploaded as PDF. The DEP application form templates and the Ownership Control Declaration are mandatory attachments. The call document and the DEP Model Grant Agreement (MGA) and additional documents (Digital Europe Cybersecurity Work Programme 2025-2027, DEP Regulation, EU Financial Regulation, guidance on LEAR and financial capacity etc.) must be consulted during proposal preparation ¹.

1. 1Prepare and validate Participant Register data and appoint LEAR.
2. 2Complete Ownership Control Declaration and be ready to provide supporting documents on request.
3. 3Choose the correct action model in the Portal (DIGITAL-JU-SIMPLE / DIGITAL-AG).
4. 4Complete Part A in the Portal (administrative forms) and prepare Part B (technical description) using DEP template; adhere to page limits and formatting (A4, Arial >= 9, margins >= 15 mm).
5. 5Attach required annexes (detailed budget, CVs if requested, list of previous projects, certificates if needed at final reporting stage).
6. 6Upload all documents and submit before the deadline; download signed PDF confirmation after submission.

Evaluation, award criteria and timelines

Evaluation and award processes follow the call document (sections 8 and 9) and the Online Manual. The call is single-stage: proposals will be evaluated against the published award criteria, scoring and thresholds given in the call document. Indicative timelines for evaluation, grant agreement preparation and signature are described in the call document and section 4 of the call document provides the indicative timeline for evaluation and grant agreement. Applicants should consult the Online Manual for submission and evaluation details ¹.

Stages to obtain funding:Single-stage submission followed by evaluation. If selected, grant preparation and signature follow; additional steps may include requests for clarifications, negotiation of Annex 1 and administrative checks. For actions including Financial Support to Third Parties, additional annexes and operational procedures will be part of the grant agreement.

Success rates and competition

The topic declares an indicative number of grants (4) and an indicative budget for the NCC line (€11,000,000). The call does not publish an explicit success rate. Applicants should assume competition and prepare fully compliant and high-quality applications. Exact success probability depends on the number and quality of eligible submissions and is not provided by the call documents.

Co-funding and financial rules

The call document and the DEP Model Grant Agreement (MGA) set out detailed rules on eligible costs, funding rates, pre-financing, interim and final payments, certificates on financial statements (CFS) threshold rules, rejection and reduction of costs, recoveries, obligations for record-keeping and audits, and ownership/control declarations. Applicants must consult the call document and the DEP MGA for exact co-funding rules and the definition of eligible direct and indirect costs. Where applicable, Financial Support to Third Parties must comply with Article 204 of the Financial Regulation and conditions in the grant agreement ¹.

Application form structure (templates and expectations)

Use the EU Grants:Application Form (DEP) Part A (administrative forms filled in the Portal) and Part B (technical description uploaded as PDF). Part B is structured and tagged. Typical structure and elements to include:

1. 1Cover page and project summary (abstract).
2. 21. Relevance: objectives, contribution to policy objectives, synergies, digital supply chain and financial obstacles.
3. 32. Implementation: maturity, implementation plan, management, quality assurance, financial management, risk management and capacity to deliver.
4. 43. Impact: expected outcomes/deliverables, dissemination and communication, competitiveness and societal benefits, environmental sustainability.
5. 54. Work plan: work packages, tasks, milestones, deliverables, Gantt/timeline, staff effort by person-months, subcontracting justification, purchases and equipment, other cost categories (including FSTP design).
6. 65. Other: ethics and security self-assessments where applicable.
7. 7Annexes: detailed budget table/calculator (if applicable), CVs, list of previous projects, ownership/control declaration, etc.

Part B page limit:normally up to 70 pages (unless otherwise provided). Follow formatting rules (A4, Arial >=9, margins >= 15 mm). Supporting documents included as annexes do not count towards page limit but must be uploaded in the Submission System as specified.

Evaluation and contract stage notes

Award criteria, scoring and thresholds are in the call document. Successful proposals will enter grant preparation phase and sign the DEP MGA. If Financial Support to Third Parties is part of the proposal, the grant agreement will specify operational rules, maximum amounts per recipient and selection procedures. Certificates (CFS) may be required at final payment depending on thresholds. Grant reporting follows the Portal continuous reporting and periodic reporting rules and timings specified in the DEP MGA and the call document ¹.

Mentioned countries and National Coordination Centres (NCCs list)

The call and related NCC Network pages explicitly reference the Network of NCCs which includes one national centre from each of the 27 EU Member States plus Iceland and Norway. The NCC list published on the ECCC site (examples shown in the topic materials) includes the following Member State entities or national centres (as published): Austria, Belgium, Croatia, Cyprus (Ministry of Electronic Governance listed), Denmark (Digital Security Authority), Czechia (National Cyber and Information Security Agency), Estonia, Finland, France, Germany (Federal Office for Information Security), Greece, Hungary (Special Service for National Security), Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland (National Cyber Security Centre), Portugal, Romania (National Cybersecurity Coordination Centre Unit), Slovakia, Slovenia, Spain (INCIBE), Sweden, and other national centres as listed on the ECCC NCC webpage. Applicants should consult the official NCC list for the definitive current set of recognised NCCs and their contact points.

Contact and support:For guidance, contact your national NCC or the ECCC Applicants Direct Contact Centre at applicants@eccc.europa.eu. Use the Funding & Tenders Portal Online Manual and IT Helpdesk for submission technical support. Partner search announcements are allowed on the Portal for collaborative needs.

Key documents and links

1. 1Call document and topic text on Funding & Tenders Portal (topic page) — contains full eligibility, evaluation, administrative and legal requirements ¹.
2. 2Application form templates (Standard DEP application form Part B, Part A online sections) — available in the Submission System.
3. 3Ownership Control Declaration template — mandatory for beneficiaries and affiliated entities as required ¹.
4. 4DEP Model Grant Agreement (MGA) — sets contractual terms and cost eligibility rules.
5. 5Digital Europe Cybersecurity Work Programme 2025-2027 — policy context and priorities that feed the call.

Final summary

What is this opportunity about and how to explain it:This call topic finances the operational activities of recognised National Coordination Centres (NCCs) to strengthen the European cybersecurity ecosystem. It supports NCCs in coordinating national actors with the European Cybersecurity Industrial, Technology and Research Competence Centre (ECCC), increasing uptake of EU cybersecurity solutions, providing technical assistance and capacity building, and building market and financing pathways for cybersecurity SMEs and start-ups. The topic encourages education and awareness actions (from primary schools to higher education), creation of community observatories, incubator/accelerator frameworks, marketplace platforms for market-ready solutions and activities to scale-up cybersecurity companies. Only Commission-recognised NCCs may apply. The process is an open, competitive single-stage grant submission via the EU Funding & Tenders Portal using the DEP application templates. The NCC topic has an indicative envelope of €11 million for 2026 and expects to award a small number of grants in the €2–€3 millionrange. Applicants must follow the call document, DEP MGA rules and provide ownership and control declarations, security and ethics self-assessments as relevant, and a robust workplan, budget and risk management approach. Synergies with ENISA, national initiatives and other EU programmes must be demonstrated and duplication avoided. The activity can include Financial Support to Third Parties following strict rules. For full legal, financial and administrative details consult the call document and the DEP Model Grant Agreement in the Funding & Tenders Portal ¹.

Footnotes

1. 1Primary sources and mandatory documents for applicants: the call document and topic page on the EU Funding & Tenders Portal (topic DIGITAL-ECCC), the Application Form templates (DEP Part A and Part B), the Ownership Control Declaration template, the DEP Model Grant Agreement (MGA), the Digital Europe Cybersecurity Work Programme 2025-2027, and the EU Financial Regulation provisions referenced in the call. These documents are available on the Funding & Tenders Portal and the European Cybersecurity Competence Centre website. Applicants must read the call document in full and follow instructions in the Submission System.

This is a Digital Europe Programme call under Strengthening European Cybersecurity Technologies, Capacities and Preparedness, designed to finance National Coordination Centres that support the European cybersecurity ecosystem, especially SMEs, skills, awareness, market access and community building.[1][8] The topic is open for submission from 1 September 2026 and closes on 14 January 2027 at 17:00 Brussels time, with an indicative budget of €11,000,000 and around 4 grants expected.[1][8]

Funding at a glance

What the call is about

The call supports the operation of National Coordination Centres and enables them to strengthen the cybersecurity community, help SMEs adopt state of the art cybersecurity solutions, improve cybersecurity capacities, and foster synergies with EU and national initiatives.[1] The topic also supports market development for European cybersecurity products and services, including incubators, accelerators, access to finance, access to market, observatories, matchmaking events, community platforms and awareness actions.[1]

The expected activities are broad but optional, meaning each NCC can choose one or more tasks that match its mandate and national priorities, rather than implementing every possible action.[1] The call explicitly stresses that activities should build on existing EC, ENISA and national efforts and avoid duplication.[1]

Who can apply

This topic targets exclusively National Coordination Centres that have been recognised by the European Commission as having the capacity to manage funds under the Regulation establishing the European Cybersecurity Industrial, Technology and Research Competence Centre and the Network of National Coordination Centres.[1] The support information also notes that the NCC network includes one national centre from each EU Member State plus Iceland and Norway.[1]

The topic is therefore not a general open call for companies or research organisations. The direct applicant is the NCC, although the grant architecture may allow implementation support, third party funding or other cooperation arrangements where permitted by the grant agreement and call rules.[1]

Core activities in scope

• Act as a national contact point for the Cybersecurity Competence Community and support the ECCC in achieving its objectives and missions.[1]
• Provide expertise to the ECCC, contribute to strategic tasks, and support the implementation of the Cyber Skills Academy.[1]
• Promote participation by SMEs, start ups, industry, civil society, academia and research communities in cross border cybersecurity projects and Union funded actions.[1]
• Provide technical assistance to applicants for ECCC managed projects and support registration and community management tools such as ATLAS.[1]
• Support the uptake, dissemination and scale up of cybersecurity solutions, including through financial support to third parties where allowed.[1]
• Develop awareness, education, training and youth engagement actions, including campaigns, boot camps, exercises, ambassadors and school level initiatives.[1]
• Support incubators, accelerators, marketplaces, access to finance and access to market for European cybersecurity solutions.[1]
• Create synergies with national, regional and local initiatives and support implementation of relevant EU cybersecurity legislation such as NIS 2, the Cyber Resilience Act and the Cybersecurity Act.[1]

Key eligibility and compliance points

1. 1Proposal page limits and layout are described in the call document and the application form template in the submission system.[1]
2. 2Eligible countries, other eligibility conditions, financial and operational capacity, and exclusion criteria are all set out in the call document.[1]
3. 3Evaluation and award rules, including submission and evaluation processes, award criteria, scoring and thresholds, are also defined in the call document and the Online Manual.[1]
4. 4The legal and financial set up of the grants is specified in the call document and the model grant agreement.[1]
5. 5The action is subject to Article 12(5) of the DEP Regulation because of security concerns linked to sensitive cybersecurity information and the risk posed by certain non EU entities.[1]

What applicants will want to know

The most relevant practical point is that the Commission is funding NCC capability rather than a single narrow pilot. Applicants should therefore frame proposals as operational, ecosystem building and policy enabling actions with measurable value for the national and European cybersecurity community.[1]

A strong proposal will likely show how the NCC will generate EU added value, connect national actors to cross border initiatives, support SMEs and start ups, and translate the call into concrete outputs such as platforms, events, registries, observatories, training actions, community management services or market enabling services.[1]

From a financial perspective, the call is relatively concentrated, with €11 million available in total, expected project awards of €2 million to €3 million, and a 50 percent funding rate.[1][8] The indicative evaluation period points to February to March 2027, with information on results expected in April 2027.[1]

The call is especially relevant for NCCs that want to build national cyber ecosystems, support awareness and skills pipelines, or create practical services that help European cybersecurity companies reach wider markets.[1]