The measure helps new subjects of the Cybersecurity Act raise their cyber-defence level and meet the NIS2 requirements, reducing the potential damage of cyber incidents.
Raise the cybersecurity level and meet NIS2 requirements.
New subjects of the Cybersecurity Act — organisations added under NIS2.
De minimis aid — voluntary, non-repayable grant.
EIS — applications via the e-toetus environment.
Preparing the cybersecurity uplift roadmap using the EIS methodology. Grant rate 100%.
Implementing the improvements and security controls set out in the roadmap. Grant rate 50%.
Auditing the work delivered under the roadmap — separately or combined with development. Grant rate 50%.
An application may cover only the roadmap, or — if a methodology-compliant roadmap already exists — the development and/or audit activities.
Servers, firewalls, licences, cloud services and configuration.
Security monitoring (SOC), penetration testing, audits (ISO, E-ITS).
Management and staff training, phishing simulations.
Roadmap and audit services purchased externally.
Eligible up to 20% of the eligible cost of the project's core activities.
Interest, late fees, penalties, recoverable VAT, real-estate purchases, cash payments, and costs already covered by other public-sector support.
Fixed amount · 1 application
Depending on scope and complexity
Per project
Grant share of the eligible cost of development and audit projects — with at least 50% co-financing from the applicant.
The grant period is up to 6 months for building the roadmap and up to 12 months for development activities and auditing.
The applicant must meet all of the following conditions.
No liquidation, compulsory winding-up or bankruptcy proceedings (including for any controlling person).
Tax debt including late interest is up to €100, or has been rescheduled and is being paid on schedule.
Tax returns and annual and management reports have been filed on time.
Repayment obligations from earlier grants have been duly fulfilled.
The applicant and its representatives have no active conviction for fraud, money laundering or economic crime.
The activity is not directly or indirectly controlled or influenced by a country outside the EU or EEA.
Applications are submitted digitally signed via the e-toetus environment.
The application is completed and submitted in the Structural Funds e-toetus environment: e-toetus environment
Confirmation of the roadmap author's experience and independence (on the EIS form).
Price quote for building the roadmap.
Confirmation that the author is not an authorised representative of the applicant.
Roadmap preparation methodology.A methodology-compliant cybersecurity uplift roadmap.
Project team competence description and CVs (on the EIS form).
At least one prior project per expert.
Service provider's independence confirmation and budget on the EIS form with rationale.
Invest in cybersecurity today — for a safer, more resilient digital future. EIS runs info days ahead of the application round and offers pre-consultations on request.
Check whether you are a subject and complete registration with RIA.
Map the current state of your cyber-defence against the EIS methodology — together with Primend.
Submit the application to EIS via e-toetus and start the development work.
Quick answers about the EIS cybersecurity support grant and Primend's role.
Start applyingLeave your details and we'll get in touch to discuss how Primend can help with the application and the roadmap.
