New advanced tools and processes for Operational Cybersecurity

Proposals should deliver at least two of the following outcomes:

• Enhanced Situational Awareness via advanced Cyber Threat Intelligence frameworks, tools and services and cybersecurity risk assessments of EU critical supply chains;

• Frameworks, tools and services for preparedness against cyber and hybrid threats in ICT and OT, including cybersecurity exercises;

• Expanded SOC/CSIRT functionality with advanced detection, analysis, incident handling (response, reporting, remediation) tools and services;

• Testing and experimentation facilities for operational cybersecurity, including digital twins for critical infrastructures and NIS 2 essential and important entities;

• Cross-sector and/or cross-border cyber crisis management frameworks, services and tools;

• Frameworks, services and tools for enhanced operational cooperation among public sector CSIRTs (CSIRT network, EU-CyCLONe), with optional extension to NIS 2 essential and important entities.

• Demonstrate all developed frameworks, tools, services and processes through pilot implementations involving relevant national cybersecurity authorities and/or NIS 2 essential and important entities;

• Address at least two of the specified expected outcomes;

• Ensure real-world applicability and usability of the solutions;

• Take into account forthcoming legislation (Cyber Resilience Act, Cyber Solidarity Act, NIS 2, EU Cybersecurity Strategy) and comply with privacy, fundamental rights and ethical requirements;

• Follow Horizon Europe lump-sum grant rules, proposal page limits and submission procedures;

• Actively involve leading European cybersecurity industry and encourage the participation of innovative EU cybersecurity start-ups and SMEs with proven track records in EU projects, operational cooperation with national authorities or VC-backing in key roles (coordination, technical leadership, pilot implementation).