The ECCC Governing Board adopted its first Cybersecurity Work Programme under Digital Europe Programme (DEP) for 2025-2027. Priorities for investment range from new technologies for cybersecurity, including on AI and post-quantum transition, to actions for improving EU cyber resilience and supporting SMEs.
The adoption of the DEP WP 2025-2027 constitutes a fundamental instrument for the implementation and advancement of the mission of the ECCC. The Centre aims to pool investment in cybersecurity research, technology, and industrial development, and ensure the efficient implementation of projects and initiatives in coordination with the Network of National Coordination Centres (NCCs).
During 2025-2027, the ECCC will continue to finance uptake and deployment actions in cybersecurity by the means of calls for proposals.
“The first ECCC Cybersecurity Work Programme is an important milestone in our establishment as key player in the EU cybersecurity landscape,” Luca Tagliaretti, ECCC executive director, said in a statement. “The funding available will support innovation and deployment of technologies in Europe and contribute to the common goal of building a cyber resilient EU.”
The programme is structured as follows:
New technologies, AI and post-quantum transition
Dedicated actions will support entities in developing and deploying systems and tools for cybersecurity based on AI (including GenAI based technologies), reliable, secure and resilient AI models and algorithms or build the European testing infrastructure for the post quantum transition.
These enabling technologies should allow more effective creation and analysis of Cyber Threat Intelligence (CTI), automation of large-scale processes, as well as faster and scalable processing of CTI and identification of patterns that allow for rapid detection and decision making.
It will also include actions aimed at improving industrial and market readiness for the cybersecurity requirements for SMEs as specified in relevant EU cybersecurity legislation and to ensure the development and use of more secure hardware and software products.
Cyber Solidarity Act Implementation
The ECCC will contribute to the creation of the European Cybersecurity Alert System (ECAS) foreseen in the Cyber Solidarity Act, to build and enhance coordinated detection and common situational awareness capabilities at European level. In this regard, a pan-European network of national and cross-border Cyber Hubs will be established. The ECCC will support preparedness activities, part of the Cybersecurity Emergency Mechanism and the mutual assistance mechanisms foreseen in the Cyber Solidarity Act.
Additional actions improving EU cyber resilience
The ECCC will support the integration of relevant cybersecurity requirements deriving from several regulations and directives: NIS 2 directive, Cyber Resilience Act, CSA, DORA, GDPR, AI Act as required. It will contribute to the EC priorities, including to support the cybersecurity of hospitals and healthcare providers in alignment with the Action Plan.
In addition, it is envisaged to provide support to improve the resilience and security of the infrastructure critical for global communications and solutions to cover the surveillance and protection of critical undersea infrastructure, such as submarine cables, as well as the detection of malicious activities around them.