Support for the Implementation of a Cybersecurity Monitoring Solution (Security Information and Event Management) for SMEs

This cascade funding call under NCC-SK 2.0 supports Slovak legal-entity SMEs to implement a Security Information and Event Management (SIEM) solution by financing implementation services only, not the purchase of the SIEM product. Grants range from €10,000 to €40,000 (total call budget €1,000,000) with an aid intensity of 90%, reimbursement-based payments, and possible pre-financing up to 50% subject to financial assessment. Projects must deliver analysis, infrastructure and log-source preparation, rule design and configuration, deployment and integration, testing and transition to operation (optional post-deployment cybersecurity audit) and maintain the implemented SIEM for three years after financial completion. The call opens 17 August 2026 and closes 19 October 2026 at 23:59 Brussels time; applications are submitted via granty.kcckb.sk with a signed PDF sent through the Slovak e-government mailbox within five working days of portal submission.

What it funds

Scope

Co‑funding for projects that implement a Security Information and Event Management (SIEM) monitoring solution in a single small or medium-sized enterprise. Purchase of the SIEM software or licence is not an eligible cost. The measurable output is one enterprise with an implemented SIEM; the result must be maintained for 3 years after project completion.

Mandatory project phases:Analysis; preparation of infrastructure and log sources; rules design and configuration; deployment and integration; testing; transition to operation, adoption and training. Cybersecurity audit post-deployment is optional ¹.

1. 1Eligible applicants: legal entities registered in the Slovak Republic that qualify as SMEs (microenterprises and sole traders excluded).
2. 2Aid intensity: up to 90% of eligible costs.
3. 3Grant size: minimum €10,000, maximum €40,000 per project.
4. 4Total call budget: €1,000,000 (cascade funding via NCC-SK 2.0).
5. 5Project period: projects must start and finish between 17 August 2026 and 31 March 2027; maintain results 3 years post-financial completion.

Application and selection:single-stage digital submission via the national portal (register at granty.kcckb.sk) plus signed PDF sent via Slovak e-government mailbox within 5 working days of submission. Selection uses exclusion and scored criteria; notification on fulfilment sent within 40 working days after call closure.

Deadlines and key dates:Opening date 17 August 2026. Deadline for applications 19 October 2026 23:59 Brussels time.

Apply and find full call documentation at the national cascade funding page Call documents and submission details and the EU portal listing Opportunity page.

Footnotes

1. 1Full eligibility rules, scoring and required annexes are in the call documentation at the national portal Call documents and submission details.

Basic Call Metadata

Call title:Support for the Implementation of a Cybersecurity Monitoring Solution (Security Information and Event Management) for SMEs. Associated project / programme: NCC-SK development and operations 2025-29 (project acronym NCC-SK 2.0). Grant agreement number: 101194984. Call identifier: DIGITAL-ECCC. Opening date: 17 August 2026. Deadline (single-stage): 19 October 2026, 23:59 Brussels time. Eligible implementation period: projects may be implemented between 17 August 2026 and 31 March 2027, with the applicant defining start and end dates within that window. Project objective maintenance requirement: 3 years after financial completion of the project.

Total budget and individual grant sizes:Total funding available for this cascade call: €1,000,000. Individual grants range from a minimum of €10,000 to a maximum of €40,000. Aid intensity: 90% of total eligible project costs.

Scope, Mandatory Activities and Output Requirements

Objective:Provide support to a small or medium-sized enterprise (SME) to implement a Security Information and Event Management (SIEM) cybersecurity monitoring solution. The grant supports implementation-related services and activities only; the direct purchase (procurement) of the SIEM software or hardware itself is explicitly not an eligible cost.

1. 1Mandatory project phases that must be included in each proposal: Analysis; Preparation of infrastructure, information systems and log sources; Design and configuration of detection rules; Deployment and integration of the SIEM solution in the applicant’s environment; Testing.
2. 2Mandatory phase continued: Transition to operation, adoption and training for staff and operational teams.
3. 3Optional phase: Cybersecurity audit under Act No. 69/2018 Coll. On Cybersecurity following SIEM deployment (optional).
4. 4Measurable required output: One enterprise with an implemented SIEM (per supported project).
5. 5Sustainability requirement: The implemented SIEM and project objectives must be maintained for at least three years after financial completion of the project.

Eligibility and Beneficiary Details

Eligible beneficiaries:legal entities registered in the Slovak Republic that qualify as small or medium-sized enterprises. Natural persons-entrepreneurs and microenterprises are not eligible. The call is implemented as a national cascade funding action under the NCC-SK 2.0 project and targets SMEs operating in Slovakia.

De minimis and national share treatment:For de minimis aid ceilings only the national 50% share of the grant is counted towards the €300,000 de minimis ceiling. Detailed national/regulatory treatment should be checked in the call documentation.

Financial Rules, Payment Modalities and Pre-financing

Aid intensity is 90% of eligible costs. The basic payment model is reimbursement. The grant can be paid after completion of an activity or as one final payment at the end of the project. The NCC may provide pre-financing up to 50% of the approved grant only when the beneficiary is assessed as having a good financial and economic situation.

Selection, Evaluation and Administrative Procedures

Submission and administrative steps:submission is fully digital via the national grant portal (applicants must register on granty.kcckb.sk). Applicants complete an online application form and upload required annexes. After portal submission the system generates a PDF (excluding annexes) which must be signed by the statutory representative or authorised person using a qualified electronic signature, qualified electronic signature with mandate certificate, or qualified electronic seal. The signed PDF must then be sent to the NCC-SK via the official Slovak e-government mailbox on slovensko.sk using the General Agenda service within 5 working days of portal submission. Failure to complete this second step leads to exclusion from the evaluation process.

Eligibility checks and selection:the NCC first verifies whether the application fulfils all grant conditions, including applicant eligibility, timely and proper submission, completeness, project and cost eligibility, and other conditions listed in call documentation. Exclusion criteria are applied first; if an exclusion criterion is not met the application is rejected. If available allocation does not cover all eligible applications, scored selection criteria are used to rank applications. Scored criteria examine project relevance, project maturity, project impact, enterprise size category and the applicant’s financial situation. A project must score at least 11 points and must not receive 0 points in any scored criterion except enterprise size. Tie-break rule: priority is given to membership in the cybersecurity competence community, then by earliest submission time of the complete application. After selection the provider notifies applicants on fulfilment of grant conditions within 40 working days from the call closure; this notification does not create a legal entitlement to the grant.

Eligible and Ineligible Costs

Eligible costs:costs directly related to implementation activities defined in the mandatory phases (analysis, infrastructure/log source preparation, design/configuration of detection rules, deployment and integration, testing, transition to operation, adoption and training). Costs for conducting the optional cybersecurity audit may be eligible if proposed and in line with national rules. Ineligible costs: the purchase (procurement) of the SIEM solution itself (software licences, appliances or cloud subscription fees for the SIEM product) is explicitly not eligible under this call. Applicants must consult the call documentation for full lists of eligible and non-eligible costs.

Application Process and Templates

Application is via a national digital portal and requires both online submission and secured signed PDF delivery through the Slovak e-government mailbox. All call documentation and manuals are provided at the cascade funding information page of the national cyber community portal Call documents and manuals ¹.

1. 1Step 1: Register an account on the national grant portal granty.kcckb.sk and complete applicant profile details.
2. 2Step 2: Complete the online application form on the portal and upload all required annexes (project plan, budget, legal attachments, proof of SME status, statutory representative details, bank details, etc.).
3. 3Step 3: Submit the application through the portal. The system will generate an application PDF (excluding annexes).
4. 4Step 4: Sign the generated application PDF using a qualified electronic signature, qualified signature with mandate certificate, or qualified electronic seal by the statutory representative or authorised person.
5. 5Step 5: Send the signed PDF (without annexes) to NCC-SK via the official Slovak e-government mailbox on slovensko.sk using the General Agenda service within 5 working days after online submission. Failure to do so invalidates the submission.
6. 6Step 6: Wait for administrative eligibility verification and, if applicable, full evaluation and ranking. Expect a notification within 40 working days after call closure regarding fulfilment of grant conditions.

Scoring and Award Conditions

Scored criteria and thresholds:projects are ranked using scored criteria covering project relevance, maturity, expected impact, enterprise size, and financial situation. Minimum score threshold: 11 points; no scored criterion (except enterprise size) may score 0. Tie-breakers: membership in the cybersecurity competence community, then chronological submission time of the complete application.

Detailed Categorization and Structured Answers

Eligible Applicant Types:Legal entities registered in the Slovak Republic that qualify as small or medium-sized enterprises. Microenterprises and natural person entrepreneurs are not eligible. Therefore, eligible applicant types: SME (legal entity). Nonprofits, universities, research organisations, large enterprises, startups outside SME classification, individuals and microenterprises are not eligible under this call unless they meet the SME legal entity registration and size criteria stated in Slovak law and the call documentation.

Funding Type:Grant (cascade funding as part of an EU-funded project). Financial mechanism: reimbursement-based grants with possible pre-financing up to 50%.

Consortium Requirement:Single applicant is expected. The call description targets support for a single enterprise implementation; consortium formation is not indicated as required. Projects appear to be single-beneficiary proposals addressing one SME per supported project.

Beneficiary Scope (Geographic Eligibility):Geographic eligibility is national to the Slovak Republic. Only legal entities registered in Slovakia and qualifying as SMEs may apply.

Target Sector:Cybersecurity and ICT: the call specifically targets cybersecurity monitoring (SIEM) implementation for SMEs, including technical infrastructure, log collection and detection rules, integration and operational adoption. Applicable sectors include any SME sectors requiring cybersecurity monitoring (IT services, manufacturing, finance, critical services, etc.), but the thematic focus is cybersecurity/ICT.

Mentioned Countries:Slovakia (Slovak Republic) is explicitly mentioned as the only eligible country for beneficiary registration and participation.

Project Stage:Targeted project maturity: implementation and operational transition. The call expects projects at development/implementation and demonstration/operational readiness stages (not basic research or early idea stage). Projects must include analysis, design, deployment, testing and transition to operation, and may include a post-deployment audit.

Funding Amount:Individual grant size: €10,000 to €40,000. Total call budget: €1,000,000. Aid intensity: 90% of eligible costs.

Application Type:Open competitive single-stage cascade funding call with digital submission via the national portal. Applicants submit an open call application; the process is not by invitation only.

Nature of Support:Monetary support (grant funding) to reimburse eligible project implementation costs and potentially pre-financing up to 50% under conditions. Non-financial support (guidance, documentation, membership/prioritisation for cybersecurity competence community) may indirectly be available but the call primarily delivers monetary grants.

Application Stages:Single-stage submission followed by administrative eligibility check and scored evaluation. Practically two administrative stages: (1) online submission plus signed PDF delivery for formal submission, and (2) eligibility verification and scored evaluation leading to award decision. From an applicant workflow perspective: one application stage with subsequent administrative and evaluation steps.

Success Rates:Not specified in the call documentation. Success rate will depend on the number of eligible applications relative to the €1,000,000 allocation and distribution of requested amounts (€10,000–40,000) and scoring results. Applicants should assume competitive selection.

Co-funding Requirement:Yes. Because the aid intensity is 90% of eligible costs, beneficiaries must co-finance the remaining 10% of eligible project costs from their own or third-party sources. Additionally, the SIEM product purchase is not eligible, so applicants must cover procurement costs of SIEM solutions outside of the grant or arrange separate financing.

Templates and Application Form Structure (Outline to Guide Applicants)

While exact form fields must be taken from the national portal, applicants should prepare the following documents and information in advance and upload them as annexes when prompted by the online form. The portal will generate a PDF application (excluding annexes) which must be signed and sent via the national e-government mailbox.

1. 1Administrative information: applicant legal name, company registration number, VAT number (if applicable), registered address, statutory representative details and contact person.
2. 2Proof of SME status: document demonstrating employee headcount and turnover or balance sheet thresholds per EU SME definition or national verification.
3. 3Project summary: concise description of the SME environment to be protected, objectives, expected outcomes (one enterprise with implemented SIEM), and alignment with mandatory phases.
4. 4Workplan and timeline: a phase-by-phase schedule covering analysis, infrastructure/log source preparation, rules design, deployment/integration, testing, transition-to-operation/adoption and training, and optional cybersecurity audit if proposed. Dates must fall inside the eligible period (17 Aug 2026–31 Mar 2027).
5. 5Detailed budget: breakdown of eligible costs per phase, justification for each cost item, total eligible costs, requested grant amount (max 90% of eligible costs), and applicant co-financing share (at least 10%).
6. 6Deliverables and measurable indicators: deliverable list (analysis report, prepared infrastructure and logs, rules library and configuration, deployment and integration evidence, testing report, training materials and attendance records, optional audit report), and indicators to demonstrate one operational SIEM instance.
7. 7Risk assessment and mitigation: identification of technical, organisational and timeline risks and proposed mitigation measures.
8. 8Financial information: recent financial statements, bank details, declaration of financial situation to enable assessment for pre-financing eligibility.
9. 9Declarations and legal annexes: signed statutory representative declaration, proof of no conflict of interest, declarations on de minimis aid where applicable, and any other national legal attachments.
10. 10Optional: statement/documentation of membership in the cybersecurity competence community (used as a tie-breaker in scoring).

Key Compliance Notes and Practical Advice

1) Ensure the SIEM product procurement cost is excluded from the budget of eligible costs because purchases of the SIEM solution itself are not eligible under this call. 2) Plan the timeline so that all mandatory phases and deliverables are completed within the eligible implementation window. 3) Prepare the signed application PDF and ensure timely delivery via the official Slovak e-government mailbox within 5 working days after online submission; failure to deliver this signed PDF invalidates the submission. 4) If you seek pre-financing, ensure your financial statements and bank data allow NCC-SK to assess you as having a good financial and economic situation. 5) Keep records and evidence demonstrating that the SIEM remains operational and the project objective is maintained for the required three-year retention period following financial completion.

Reference and full call documentation are available from the national cascade funding information page; applicants must consult the full call documentation and Annexes (including Annex 4 selection criteria) before applying Call documents and manuals ¹.

General summary

This cascade funding call provides financial support to Slovak-registered SMEs to implement a Security Information and Event Management (SIEM) cybersecurity monitoring solution. Grants range between €10,000 and €40,000 and cover up to 90% of eligible implementation costs; the direct purchase of the SIEM product is excluded. Applicants must include mandatory phases spanning analysis through deployment, testing and transition to operation; an optional post-deployment cybersecurity audit may be proposed. Submission is digital via the national portal with a mandatory signed PDF delivered through the Slovak e-government mailbox within five working days. Projects must be implemented between 17 August 2026 and 31 March 2027 and the SIEM implementation must be maintained for three years after project financial closure. Selection is competitive and based on scored criteria; membership in the national cybersecurity competence community can serve as a tie-breaker. Applicants should prepare a detailed phase-by-phase plan, budget excluding SIEM procurement, evidence of SME status, financial documentation for potential pre-financing, and all legal declarations as required by the call documentation ¹.

Footnotes

1. 1All call documents, manuals and the application portal information are published at the cascade funding page of the Cyber Community Slovakia portal: kyberkomunita.sk.

This cascade funding call under NCC-SK 2.0 supports Slovak SMEs in implementing a Security Information and Event Management solution, a system that centralizes, aggregates and analyzes security logs for better monitoring and incident response[1]. The grant finances the implementation work around the solution, not the purchase of the SIEM software itself.

What the funding is about

Eligible projects must deliver one enterprise with an implemented SIEM and cover all mandatory phases: analysis, preparation of infrastructure, information systems and log sources, design and configuration of rules, deployment and integration in the applicant environment, testing, and transition to operation with adoption and training. An optional cybersecurity audit under Act No. 69/2018 Coll. may be included after deployment. The project objective must be maintained for three years after financial completion.

Who can apply

The target beneficiaries are legal entities registered in the Slovak Republic that qualify as small or medium sized enterprises. Natural persons entrepreneurs and microenterprises are not eligible. The call is therefore aimed at Slovak SME applicants that can implement and operate the solution within their own environment.

Funding size and key financial conditions

Timeline and implementation period

Application process and evaluation

1. 1Register on the grant portal granty.kcckb.sk and complete the online application with all annexes.
2. 2After submission, download the generated PDF, sign it with a qualified electronic signature, qualified electronic signature with mandate certificate, or qualified electronic seal.
3. 3Send the signed PDF to the NCC-SK through the Slovak e-government mailbox using General Agenda within five working days of portal submission.
4. 4If the second step is missed, the application is treated as not submitted and is excluded from evaluation.

The call documents and manuals are available on the Kyberkomunita cascade funding site Kyberkomunita cascade funding. Evaluation starts with eligibility and exclusion checks, then scored criteria if funds are insufficient. The scored criteria assess relevance, maturity, impact, enterprise size category and financial situation, with a minimum score of 11 points and no zero score allowed in any scored criterion except enterprise size. Tie breaks use membership in the cybersecurity competence community and then the time of submission of the complete application.

What applicants should plan for

• Budget for integration, configuration, testing, training and any required audit services, because the SIEM purchase itself is not an eligible cost.
• Plan for project delivery between the opening date and 31 March 2027, with start and end dates chosen by the applicant inside that window.
• Expect reimbursement after completion of an activity or as one final payment at project end, so cash flow planning matters.
• Prepare evidence of SME status, Slovak registration and financial soundness if seeking pre financing.

The provider is expected to issue a notification on fulfilment of grant conditions within 40 working days after the call closes, but that notification does not itself create a legal entitlement to the grant.