Priorities for investment range from new technologies for cybersecurity, including on AI and post-quantum transition, to actions for improving EU cyber resilience and supporting SMEs.

The adoption of the DEP WP 2025-2027 constitutes a fundamental instrument for the implementation and advancement of the mission of the ECCC. The Centre aims to pool investment in cybersecurity research, technology, and industrial development, and ensure the efficient implementation of projects and initiatives in coordination with the Network of National Coordination Centres (NCCs).

During 2025-2027, the ECCC will continue to finance uptake and deployment actions in cybersecurity by the means of calls for proposals. The programme is structured as follows:

New technologies, AI and post-quantum transition

Dedicated actions will support entities in developing and deploying systems and tools for cybersecurity based on AI (including GenAI based technologies), reliable, secure and resilient AI models and algorithms or build the European testing infrastructure for the post quantum transition.

These enabling technologies should allow more effective creation and analysis of Cyber Threat Intelligence (CTI), automation of large-scale processes, as well as faster and scalable processing of CTI and identification of patterns that allow for rapid detection and decision making.

It will also include actions aimed at improving industrial and market readiness for the cybersecurity requirements for SMEs as specified in relevant EU cybersecurity legislation and  to ensure the development and use of more secure hardware and software products.

Cyber Solidarity Act Implementation

The ECCC will contribute to the creation of the European Cybersecurity Alert System (ECAS) foreseen in the Cyber Solidarity Act, to build and enhance coordinated detection and common situational awareness capabilities at European level. In this regard, a pan-European network of national and cross-border Cyber Hubs will be established. The ECCC will support preparedness activities, part of the Cybersecurity Emergency Mechanism and the mutual assistance mechanisms foreseen in the Cyber Solidarity Act.

Additional actions improving EU cyber resilience

The ECCC will support the integration of relevant cybersecurity requirements deriving from several regulations and directives: NIS 2 directive, Cyber Resilience Act, CSA, DORA, GDPR, AI Act as required. It will contribute to the EC priorities, including to support the cybersecurity of hospitals and healthcare providers in alignment with the Action Plan. In addition, it is envisaged to provide support to improve the resilience and security of the infrastructure critical for global communications and solutions to cover the surveillance and protection of critical undersea infrastructure, such as submarine cables, as well as the detection of malicious activities around them.

ECCC Executive Director Luca Tagliaretti said: “The first ECCC Cybersecurity Work Programme is an important milestone in our establishment as key player in the EU cybersecurity landscape. The funding available will support innovation and deployment of technologies in Europe and contribute to the common goal of building a cyber resilient EU.”

Background

The ECCC implements the ‘Specific Objective 3: Cybersecurity and Trust’ from the DEP Regulation (EU) 2021/694. This is the first DEP Work Programme developed by ECCC following its financial autonomy reached in 2024. The Cybersecurity WP is meant to complement the main DEP WP and was written in close consultation with the ECCC Governing Board and the European Commission.

This document includes inputs from the ECCC strategic agenda and considers all the legal obligations stemming from the ECCC regulation, DEP regulation, Cyber Solidarity act, while supporting the implementation of other key legislative files including the Cyber Resilience Act, the Cybersecurity Act and NIS 2 Directive.

For more information: Digital Europe Cybersecurity Work Programme 2025-2027

Contact for media: communicationeccc [dot] europa [dot] eu (communication[at]eccc[dot]europa[dot]eu)