Do you need to improve cybersecurity in processes, products, and services?

Beneficiary entities

SMEs and Midcaps with at least one workplace in Castile and León.

Eligible projects

• Type A projects: Individual projects of cybersecurity innovation applied to business processes that rely on the collaboration of specialized professionals to address this cybersecurity challenge.

• Type B projects: Individual or collaborative projects for cybersecurity innovation applied to products and services, developed by the company itself, which allow it to ensure that its products and services are more secure and meet the cybersecurity standards required by European and national regulations.

Eligible costs and expenses

Type A projects

• Cybersecurity software and hardware (both in XaaS mode)

• Consulting and/or certification (external collaborations through a technology consultant).

  • External audits that assess the company’s security situation: ethical hacking, annual security audits, and follow-up audits.

  • Consulting services for designing cybersecurity policies and incident management procedures, as well as their implementation.

  • Consulting for the implementation of the measures and actions necessary to improve cybersecurity in the company and its processes.

  • Preparation for certifications/security seals.

  • Obtaining cybersecurity certifications.

  • Provision of cloud services (XaaS) related to cybersecurity.

  • Specialized consulting for the development of customized cybersecurity solutions (innovation).

  • Specialized consulting for the integration of emerging technologies and adaptation of cybersecurity (IA) projects.

  • Consulting for awareness, sensitization, training and capacity building.

  • Consulting for testing, experimentation, and validation of potential cybersecurity tools/solutions.

  • Consulting for the implementation and/or adaptation of cybersecurity monitoring systems.

  • Consulting for identity and access management.

  • Consulting for policies and implementation of business continuity/recovery plans, backup systems, and control systems for the use of digital certificates.

  • Technical consulting provided by business associations.

  • And any other consulting services needed to implement the company’s cybersecurity.

• Expenses for managing the aid file (external managing entity)

Type B projects

• Cybersecurity software and hardware (both in XaaS mode)

• Actual costs of personnel dedicated to the implementation of one or more of the following innovation concepts:

  • Risk assessment from the design stage.

  • Secure development tools and platforms.

  • Security in architecture.

  • Integrated security testing.

  • Privacy-focused design.

  • Initial validation of products/services with the client: high TRL product that can be validated and adapted to the market – innovation.

  • Business continuity in cybersecurity.

  • Control systems for the use of digital certificates.

  • Assessment and treatment of third-party risks.

  • Preparation and adaptation to obtain seals/recognition for any of the cybersecurity standards and regulations, NIS2, CRA, DORA (Digital Operational Resilience Act) for the financial and insurance sector, and CER (Critical Entity Resilience).

  • Development of Security Operations Centers (SOC).

• Expenses for managing the aid file (external managing entity)

• Expenses arising from the audit.

Financing

The non-repayable grant will be determined as a fixed percentage of a minimum of 70% up to a maximum of 80%.

The minimum and maximum eligible budgets for the different projects will be established as follows:

More information

• Official information

• Application