Guides
All articles
Cloud and cybersecurity voucher: eligible costs, case by case
What the cloud and cybersecurity voucher can buy, case by case: servers, ERP and CRM, SaaS, e-learning, artificial intelligence, professional service…
NIS 2 amendments: what the Commission proposes
There is no NIS 3. On 20 January 2026 the Commission proposed targeted amendments to NIS 2 (COM(2026) 13): a small mid-cap category that would make m…
CRA Article 14: reporting duties for manufacturers
Since 11 September 2026, manufacturers of products with digital elements must report actively exploited vulnerabilities and severe incidents under Ar…
ACN supervision under NIS 2: inspections, orders and fines
For entities placed on the NIS list in April 2025, ACN gives October 2026 as the deadline for the baseline measures. How ACN supervises after that: m…
NIS 2 assessment: a self-assessment checklist for SMEs
Your company has just found out it falls under NIS 2. A self-assessment to run before an ACN review or an external audit: confirm scope, find the mea…
NIS 2 vs ISO 27001: what certification covers and the gaps
Your company holds or plans ISO/IEC 27001 and falls under NIS 2. What the certification already covers, the obligations D.Lgs. 138/2024 adds (registr…
Catastrophe insurance and the cloud and cybersecurity voucher: the self-declaration to attach
For the Cloud & Cybersecurity Voucher, the business declares in its application that it complies with the catastrophe insurance obligation and attach…
Cloud and cybersecurity voucher: the supplier's offer, section by section
The supplier's offer is a mandatory attachment to the application. This guide follows the template the Ministry published on 8 October 2026: the part…
ECCC Dual-Use Cybersecurity Funding 2027: From Civilian-Defence Cooperation to Deployment
The DUALUSE topic funds working prototypes, market-ready products and operational infrastructure with credible civilian and defence use. The fit test…
ECCC Regional Cable Hubs 2027: Funding for Cross-Border Undersea Cable Security
The REGCABH topic funds Regional Cable Hubs that pool maritime, cyber and operator data to detect threats to undersea cables. The mandatory authority…
ECCC NCC Network Funding 2027: How National Coordination Centres Support Cyber Ecosystems
The NCC topic funds the operating capacity of National Coordination Centres and their communities, including financial support to third parties. Who …
ECCC COORDPREP 2027: Funding for Coordinated Cyber Preparedness Testing
The COORDPREP topic funds coordinated preparedness testing and wider preparedness services, led by designated public cybersecurity bodies with privat…
ECCC CYBERAI Funding 2027: Secure AI for European Cyber Operations
The CYBERAI topic funds secure, trustworthy AI for detection, threat intelligence, response and self-healing in European cyber operations. How it dif…
ECCC EULEG Funding 2027: From Cybersecurity Law to Shared Capability
The EULEG topic funds shared capacity to implement EU cybersecurity law, from NIS 2 reporting to CRA testing and certification. What it pays for, wha…
ECCC AI4SME Funding 2027: Guide for SMEs and Cybersecurity Providers
The AI4SME topic funds AI-enabled cybersecurity tools and services that European SMEs actually adopt. Budget, the 75% SME funding rate, eligible acti…
ECCC Cybersecurity Call 2027: Eligibility and Application Guide
A step-by-step check of the common rules of DIGITAL-ECCC-2027-DEPLOY-CYBER-11: legal eligibility, establishment and control restrictions, consortium …
NIS Supply Chain Security: What ACN's FAQs MSB.13 to MSB.19 Clarify
On 24 July 2026 ACN published seven FAQs on NIS supply chain security. The four-phase process, the five minimum criteria for supply risk, why not eve…
Digital Europe Cybersecurity Call 2027: €96 Million Across Seven ECCC Topics
The ECCC opened a €96 million Digital Europe call across seven cybersecurity topics, with a single-stage deadline of 14 January 2027 at 17:00 CET. Ho…
ACN NIS Vademecum 2026: Compliance Calendar and Operational Checklist
ACN's NIS Vademecum 1.0 (September 2026) puts the NIS obligations on one calendar: six obligation families, three recurring annual windows and differ…
Cloud and cybersecurity voucher: disbursement, variations and controls
The grant is not paid in advance: it is disbursed against completion of the plan and its documentation. This guide covers the assessment deadline, th…