DIGITAL-ECCC-2024-DEPLOY-CYBER-06-COMPLIANCECRA
Tools for compliance with CRA requirements and obligations -
Related topics
Drag to rearrange · hover a topic or connection to preview why it's linked, click to pin that panel open
Connected via , not directly to the current topic
No motivation recorded.
Center graph on this topic →Topics in this graph
-
DIGITAL-ECCC-2024-DEPLOY-CYBER-07-CYBERSEC-02 — Support for Implementation of EU Legislation on Cybersecurity and National Cybersecurity Strategies (2024)
These call topics belong to a number of topics supporting the implementation of EU legislation related to cybersecurity.
-
DIGITAL-ECCC-2022-CYBER-03-NIS-DIRECTIVE — Supporting The NIS Directive Implementation And National Cybersecurity Strategies
Connected via DIGITAL-ECCC-2024-DEPLOY-CYBER-07-CYBERSEC-02, not directly to the current topic.
These call topics belong to a number of topics supporting the implementation of EU legislation related to cybersecurity.
-
DIGITAL-ECCC-2023-DEPLOY-CYBER-04-EULEGISLATION — Support for implementation of EU legislation on cybersecurity and national cybersecurity strategies
Connected via DIGITAL-ECCC-2024-DEPLOY-CYBER-07-CYBERSEC-02, not directly to the current topic.
These call topics belong to a number of topics supporting the implementation of EU legislation related to cybersecurity.
-
DIGITAL-ECCC-2024-DEPLOY-CYBER-06-STRENGTHENCRA — Strengthen Cybersecurity capacities of European SMEs in line with CRA requirements and obligations
Connected via DIGITAL-ECCC-2024-DEPLOY-CYBER-07-CYBERSEC-02, not directly to the current topic.
These call topics belong to a number of topics supporting the implementation of EU legislation related to cybersecurity.
Bold node = current topic · node color = call status · hover for details, click to pin · smaller, lighter topics are two steps away
Call text (as on F&T portal)
View on F&T portalDeliverables:
- Tools to simplify and automate CRA compliance, with particular focus towards automated compliance tools that would ensure alignment with the CRA cybersecurity essential requirements.
- Tools to simplify and automate CRA compliance documentation obligations.
The objective of this topic is to support the implementation of the proposed Cyber Resilience Act (CRA) through tools that support, and where possible automate, internal compliance procedures, including testing and specification drafting with focus towards European SMEs, in particular micro and small enterprises.
Scope:This action aims at the design and development of tools to facilitate, and where possible automate, CRA compliance, with particular focus towards automated compliance tools that would ensure alignment with the CRA cybersecurity essential requirements and documentation obligations.
CRA compliance solutions are foreseen based on technical specifications, training modules, and other relevant material. Tools for penetration testing, testing facilities and other cybersecurity practices, aligning with CRA requirements, are also in the scope.
Tools should be tailored towards needs of European SMEs, with a focus on micro and small enterprises, though also usable by broader stakeholder categories, such as:
- Manufacturers of relevant product categories falling within the scope of the CRA, including software developers.
- Others, such as distributors, importers, open-source community, etc.
CRA compliance tools should be made widely available on fair and reasonable terms and also take into consideration the specific needs of different stakeholders such as the behaviour of consumers, business users, and other relevant factors.
Priority should be given to solutions available to use free of charge or free and open-source software (FOSS) solutions.
These activities should be carried out in close coordination and, where possible collaboration, with the Network of National Coordination Centres (NCCs), the European Digital Innovation Hubs (EDIHs) network, the EU Cybersecurity Skills Academy, other relevant European and National cybersecurity entities, and other projects of this work programme.
This action aims at the creation of tools that, amongst others, do penetration testing or document technical specifications with relation to cybersecurity, including for entities that are providers of essential services and critical infrastructures. As such tools and information could be exploited by malicious actors, they must be protected against possible dependencies and vulnerabilities in cybersecurity to pre-empt foreign influence and control. As previously noted, participation of non-EU entities entails the risk of highly sensitive information about security infrastructure, risks and incidents being subject to legislation or pressure that obliges those non-EU entities to disclose this information to non-EU governments, with an unpredictable security risk. Therefore, based on the outlined security reasons, the actions relating to these technologies are subject to Article 12(5) of Regulation (EU) 2021/694.
News flashes
For information on the evaluations results of this call we invite you to consult the Flash call info (evaluation results) in the following link.
For information on the evaluations results of this call we invite you to consult the Flash call info (evaluation results) in the following link.
Opening date: 2024-01-16 (2 years ago)
Closing date: 2024-03-26 (2 years ago)
Procedure: single-stage
Budget: 8,000,000
Expected grants: 0
This call topic has been appended 4 times by the EC with news.
-
2024-07-17
for information on the evaluations resul... -
2024-07-17
for information on the evaluations resul... -
2024-01-16
the submission session is now available... -
2024-01-16
the submission session is now available...
DIGITAL-ECCC-2024-DEPLOY-CYBER-06
Call topics are often grouped together in a call. Sometimes this is for a thematic reason, but often it is also for practical reasons.
There are 5 other topics in this call:
Showing the latest information. Found 6 versions of this call topic in the F&T portal.
Information from
- 2025-07-01_03-20-20
- 2025-01-29_03-20-06
- 2024-11-23_03-20-12
- 2024-11-04_17-26-59
- 2024-09-30_21-21-11
- 2024-03-30_14-27-10
Check the differences between the versions.
Annotations
Events
Hand-picked events relevant to this call topic.
No events yet
There are currently no events linked to this call topic.
Timeline
Grant agreement signed · 26 Nov 2024 (1 year ago)
All expected milestones for this call have passed.
Call opens
16 Jan 2024
Call closes
26 Mar 2024
Outcome expected
26 Aug 2024 · est.
Work programme published
30 Sep 2024
Call published
30 Sep 2024
Grant agreement signed
26 Nov 2024 · est.
-
Call opens
16 Jan 2024 · 2 years ago
Submissions can be made from this date.
-
Call closes
26 Mar 2024 · 2 years ago
Deadline to submit a proposal.
-
Outcome expected Estimated
26 Aug 2024 · 2 years ago
The maximum time to inform applicants of the evaluation outcome is five months after the call closes.
-
Work programme published
30 Sep 2024 · 2 years ago
Topics are listed in the Work Programme before the call opens. Spotting this early gives you a head start on partner search and proposal planning.
-
Call published
30 Sep 2024 · 2 years ago
This topic was first published in TopicTree.
-
Grant agreement signed Estimated
26 Nov 2024 · 1 year ago
The maximum time to sign the grant agreement is three months after applicants are informed of the outcome.
Funded Projects
Loading...
Project information comes from CORDIS (for Horizon 2020 and Horizon Europe) and will be sourced from F&T Portal (for Digital Europe projects)
Ecosystem bubbles
This call topic is part of the following thematic bubbles.