Enhancing Cybersecurity for Small and Medium Enterprises in the Republic of Cyprus 2025

Opened

Programme Category

Co-Financed Programmes

Programme Name

Research and Innovation Programme

Programme Description

In this section you can find information on all the approved Co-Financed programmes – projects announced by the Research and Innovation Foundation.

Programme Details

Identifier Code

NCC-CY-ENTERPRISES/0925

Call

Enhancing Cybersecurity for Small and Medium Enterprises in the Republic of Cyprus 2025

Summary

The Programme aims to ensure that SMEs reach a basic level of cybersecurity in order to protect their infrastructures, systems and information. This will be achieved through the purchase of solutions and services to maintain and strengthen the level of security and resilience of small and medium enterprises (SMEs), as well as through the evaluation and identification of challenges and weaknesses.

Additionally, the Programme seeks to achieve their compliance of SMES with European and internationally accepted measures and standards through a certification scheme, the Cyber-Hygiene Framework for Small and Medium Enterprises (SME) of the NCC-CY.

Detailed Call Description

Through the Programme, SMEs 1 will have the opportunity to obtain a Cybersecurity Certification. The Certification is issued by Certification Bodies, which have been accredited according to ISO 17021 and ISO 27006, hence are competent to carry out inspections and certifications for information security management systems according to ISO/IEC 27001:2013 and/or ISO/IEC 27001:2022.

Following acquirement of the Certification, enterprises will be able to assess their current level of maturity, identify vulnerabilities and mitigate risk, while strengthening their cybersecurity practices. It will also allow them to invest in the protection of information and data, based on specific specifications and minimum requirements set out in the NCC-CY Cyber-Hygiene Framework for SMEs.

The Programme has a simple procedure for submitting proposals, short time for the evaluation and announcement of results and ensures timely implementation of projects in the pre-defined maximum implementation period for resolving problems faced by enterprises in cybersecurity matters.

For the purposes of participating in the Programme and submitting a Proposal, a gap analysis is required. The gap analysis will determine an SMEs’ current cybersecurity situation in real time, at a technical, operational and strategic level in relation to the set of rules, control measures and procedures set out for establishing a basic level of cybersecurity as defined in the NCC-CY Cyber-Hygiene for SMEs framework and which are summarized as follows:

  1. Security Policy
  2. Awareness and Training
  3. Software Update
  4. Protection from Malicious Software
  5. Network Security
  6. Backups
  7. Access Control
  8. Security Incidents
  9. Physical Security Measures
  10. Data Protection
  11. Operational Impact Analysis

Call Total Budget

€1.500.000

Financing percentage by EU or other bodies / Level of Subsidy or Loan

70%

MINIMUM – MAXIMUM FUNDING PER PROJECΤ
€20.000 – €65.000 or €75.000 in cases where the ENISA AR-in-a-Box tool is adopted

If, upon completion of the projects, the total eligible expenses based on approved costs (total amount of eligible expenses taking into account the aid intensity – 70%) are less than the minimum project funding, the funding will not be granted to the beneficiary.

* With reference to Point 2 of the NCC-CY Cyber Hygiene Framework (Awareness and Training), companies that choose to adopt ENISA’s AR-in-a-Box tool may be eligible to apply for  additional funding of up to €10.000.

Thematic Categories

  • Information and Communication Technologies
  • Information Technology
  • Public Administration
  • Research, Technological Development and Innovation
  • Small-Medium Enterprises and Competitiveness

Eligibility for Participation

  • Educational Institutions
  • Legal Entities
  • Other Beneficiaries
  • Private Bodies
  • Researchers/Research Centers/Institutions
  • Services Providers
  • Small and Medium Enterprises (SMEs)
  • Training Centres

Eligibility For Participation Notes

All expenditures necessary for the purposes of securing the Cybersecurity Certification, in accordance with the requirements of the NCC-CY through the Cyber-Hygiene Framework for SMEs, which will fall under the categories «Costs for external services» and/or «Costs for Instruments and Equipment».

Call Opening Date

12/09/2025

Call Closing Date

18/11/2025

National Contact Point(s)

RIF Support Service

Email:
support@research.org.cy
Telephone:+357 22 20 50 00