Портал на ЕС за финансиране и търгове · EOI-ECCC-2027-DIGITAL-DEPLOY-CYBER-12-CEI-NATCH

National Cyber Hubs

Код

EOI-ECCC-2027-DIGITAL-DEPLOY-CYBER-12-CEI-NATCH

Програма

52395851

Статус

Отворена

Начало

15.10.2026

Краен срок

16.03.2027 (остават 148 дни; часът – на официалната страница)

Бюджет

3 000 000 €

Ключови дати

1. 15.10.2026Начало
2. 16.03.2027Краен срок

Проверка на допустимостта

За тази покана още няма проверени правила за допустимост. Вижте официалните условия за кандидатстване.

Описание

Objective:

The general objective of “National Cyber Hubs” is to act as reference points and gateways to other public and private organisations at national level for participation in the European Cybersecurity Alert System and to ensure that cyber threat information from public and private entities is shared and collected at national level in an effective and streamlined manner.

National Cyber Hubs are public entities given the role at national level to act as clearinghouses for detecting, gathering, aggregating and storing data on cybersecurity threats, analysing this data, and sharing and reporting cyber threat intelligence (CTI), reviews and analyses. They provide a central operational capacity and support other SOCs at national level (e.g., by offering guidance or training, making available data or analysis of this data, coordinating joint detection and monitoring actions, providing incident response services methodologies towards the mitigation of identified threats, vulnerabilities and/or misconfiguration weaknesses). They will play a central role at national level and can act as a hub within a context of SOCs in the different countries.

The platforms should act as a central national point allowing for broader pooling of relevant data and CTI, enable the large scale dissemination of threat information on a large scale and among a large and diverse set of actors (e.g., CERTs/CSIRTs, ISACs, operators of critical infrastructures).

National Cyber Hubs will contribute to enhancing and consolidating collective situational awareness and capabilities in detection and CTI. They will support the development of better performing data analytics, detection, and response tools, through the pooling of larger amounts of data.

The National Cyber Hubs should achieve this general objective through the following specific objectives:

Producing high quality, actionable information and CTI through the use of state-of-the art tools and advanced tools and technologies (for example artificial intelligence (AI), including machine learning (ML) tools) on the large data sets of collected CTI. Contributing to better detection and response to threats. They should support quicker detection of cyber threats and incidents and more effective action plans and responses by relevant entities.

Contributing to collective situational awareness. The platforms should contribute to the strengthening of the EU’s common situational awareness and enhanced coordinated detection capabilities by sharing information at three levels: At national level. Close and coordinated cooperation between public and private entities is central to strengthening the EU’s resilience in the cybersecurity sphere. National Cyber Hubs could strengthen cooperation and information sharing between public and private entities and, as part of this, request and receive specific information where appropriate and in accordance with national and EU law. Different levels of sharing and integration of data and tools can be envisaged, ranging from the exchange of intelligence feeds and indicators of compromise (IoC) to more contextualised or sophisticated information on threats, incidents, and vulnerabilities.

Between National Cyber Hubs. National Cyber Hubs must share information with other National Cyber Hubs and commit to applying to participate in a cross-border Cyber Hub within the next 2 years. Conditions for exchanging information with other platforms are to be established. As per de political agreement on the Cyber Solidarity Act to be published in autumn 2024, entities participating in the European Cybersecurity Alert System should ensure a high-level of interoperability among themselves including, as appropriate, as regards data formats, taxonomy, data handling and data analysis tools, and secure communications channels, a minimum level of application layer security, situational awareness dashboard and indicators.

With relevant EU entities and networks. Platforms should provide an adequate level of information to responsible networks and entities at EU level, in defined situations (such as in case of major incidents) and subject to appropriate conditions, in order to support common situational awareness and effective crisis management and response. In particular, platforms should support the exchange of relevant data and information with relevant sectoral and cross-sectoral communities, including relevant industry information sharing and analysis centers (‘ISACs’). If the National Cyber Hub is not the competent authority designated or established by the relevant Member State under Directive (EU) 2022/2555, it is crucial that it coordinates with that competent authority in respect of such data requests and receipt.

Improving EU technological sovereignty. The platforms should enhance the EU’s cyber-threat knowledge base, support the development and improvement of EU tools, and help create and structure a European ecosystem for sharing CTI.

Providing other services and activities. Such services and activities could include the sharing of tools (including commonly procured tools), the creation of one or more data lakes, the provision of cyber range services, and/or the training of cybersecurity analysts. These services could be offered, for example, to the SOC network at national level, national critical infrastructures in the public and private sectors, CSIRTs, ISACs and where possible, to the wider EU cybersecurity community, including EU industry and research and academia.

Contribution to the surveillance and protection of critical undersea infrastructure: Cross Border Cyber Hubs could also deploy solutions for the surveillance and protection of critical undersea infrastructure, such as submarine cables, and the detection of malicious activities around them, to improve the resilience and security of this infrastructure, which is critical for global communications. The response to such hybrid threats could also include situational awareness performed through the collection and analysis of in-situ, sea-based sensor data as well as relevant satellite imagery. For this activity, operational synergies with the EU Copernicus Space Programme and in particular with its Security Service are required.

Scope:

The purpose of this call for expressions of interest (CfEI) is to select entities in EU Member States and other eligible countries1, intending to participate in the European Cybersecurity Alert System and willing to deploy and manage National Cyber Hubs.

The single entity, designated or established as the National Cyber Hub, selected following this CfEI will engage in and manage a joint procurement with the ECCC to purchase the necessary tools, infrastructures and services to create or strengthen the National Cyber Hub. For each joint procurement the EU will contribute up to 50% of the purchasing costs. The number of joint procurements to be conducted will depend on the number of successful applications from National Cyber Hubs selected following evaluation of this CfEI.

Separately, a platform has to apply to receive a grant to complement the joint procurement(s)2. The related grant will be awarded if the relevant requirements in the separate call for proposals are met and only if the application in response to this call for expressions of interest is successful. The EU will contribute up to 50% of eligible costs, such as staff costs or other eligible costs for enhancing existing or setting up and running the National Cyber Hub, its interaction and cooperation with other stakeholders, with the exception of those tools, infrastructures and services that will be purchased through the joint procurement(s). The grant funding for the eligible costs of the National Cyber Hubs will come from the call for proposals on National Cyber Hubs.

The deployment of these national platforms is a pivotal component in a wider strategy and set of actions aimed at the stepping – up of monitoring and detection capabilities and the improvement

Текстът е от официалния източник. Правно обвързващи са само официалните документи.

Официални данни · Портал на ЕС за финансиране и търгове · синхронизирано 19.10.2026 15:15 · официален запис · Лиценз: © European Union. Reuse with attribution (Commission Decision 2011/833/EU).