SECURE
Strengthening EU SMEs Cyber Resilience

About the project Cascade Funding

SECURE supports and enhances EU SMEs cyber resilience capabilities, protecting them from cyber threats and thus contributing to maintaining the integrity of the EU’s digital single market.

About the project

The implementation of the Cyber Resilience Act (CRA) marks a significant milestone in the European Union’s commitment to enhance the cyber resilience of its digital market.

Support to SMEs in CRA compliance is essential for:

Closing the Cybersecurity Knowledge Gap
Fostering a Security-by-Design Culture
Mitigating Supply Chain Risks
Promoting Regulatory Compliance
Safeguarding Economic and Social Well-being
Promoting Sustainable Cybersecurity Efforts

SECURE supports and enhances EU SMEs cyber resilience capabilities, protecting them from cyber threats and thus contributing to maintaining the integrity of the EU’s digital single market.

Targeted assistance, resources, and guidance are vital for empowering SMEs to effectively navigate the regulatory landscape, ensuring their prosperity and a safer, more resilient digital Europe.

By directly bringing together National (Cybersecurity) Coordination Centres (NCCs) and European Digital Innovation Hubs (EDIHs), the Strengthening EU SMEs Cyber Resilience SECURE Project Consortium aims to reach the largest possible number of interested stakeholders and boost resilience of SMEs across the whole European Union.

Download PDF Presentation

Cascade Funding

SECURE will ensure that EU financial support reaches SMEs under the scope of the CRA to enhance their capacity to comply with upcoming requirements.

At least 2 calls for proposals will be issued. During the call periods, SMEs will be able to submit their project proposals via an online platform to be developed and maintained by SECURE. Following an initial eligibility check, eligible projects will undergo evaluation by impartial committees, formed from various members of the consortium, to avoid potential conflicts of interest. Successful proposals will receive 50% co-financing, with transparency in fund allocation and evaluation criteria published on the platform.

SECURE will adopt ad-hoc criteria guaranteeing funding for high quality proposals presented by SMEs. Leveraging open call application guidelines, funds will be distributed fairly, fostering a community of applicants through interactive support and collaboration on the platform. Moreover, when deemed appropriate by NCCs or designated authorities, national funding may integrate EU contributions.

Total funding	€ 16.5 million
Funding per grant	Up to € 30,000
Target applicants	50%
Co-financing	Micro, small and medium-sized enterprises (SMEs)
Opening first call	September 2025

Why a company should apply?

Cyber Resilience Act (CRA) will impact micro, small and medium-sized enterprises (SMEs) that operate within sectors mandated to comply with the CRA such as:

Manufacturers of Products with Digital Components
Providers of Tools and Solutions for CRA Compliance
Other Well-Justified Categories in Line with CRA

Given the pivotal role of SMEs in the EU’s economy and their vulnerabilities, targeted support is crucial for their CRA compliance and overall resilience.

Challenges for SMEs include limited cybersecurity expertise and resources, making them prime targets for cyber threats, particularly when part of essential service providers’ supply chains or serving a broad audience.

The sectors under the CRA are critical to the digital ecosystem, where breaches can have widespread impacts.

Central Repository

SECURE will provide an openly available website serving as a central repository of CRA-compliance-related resources, ensuring easy access to essential guidelines, support tools, training materials, and free/open-source code implementations, essential for SMEs to ensure their compliance with the CRA.

The aim is to provide users with a comprehensive collection of CRA-related resources to support knowledge sharing and upskilling initiatives within the CRA domain.