Enhancing Cybersecurity for Small and Medium Enterprises (SMEs) designated as Important Entities Falling Within the Scope of the NIS2 Directive
Enhancing Cybersecurity for Small and Medium Enterprises (SMEs) designated as Important Entities Falling Within the Scope of the NIS2 Directive funds Cyprus SMEs’ cybersecurity measures to improve resilience.
Funder: European Commission
Due Dates: August 28, 2026 (Opening) | November 10, 2026, 13:00 (Proposal deadline)
Funding Amounts: €20,000–€100,000 per project for up to 12 months; 70% of eligible costs; €1,530,000 total budget
Summary: Supports Cyprus SMEs designated as NIS2 Important Entities to implement and verify baseline cybersecurity measures.
Key Information: Funding is paid only for full compliance with all 34 CYFUN Basic cybersecurity measures; partial implementation is ineligible.
Description
The NCC-CY – NIS2 programme supports small and medium-sized enterprises designated as Important Entities under the NIS2 Directive. The Research and Innovation Foundation (RIF) runs the programme with the Digital Security Authority (DSA), Cyprus’s National Cybersecurity Coordination Centre, through the European Commission-supported N4CY2 project. It aims to protect business infrastructure, systems and information while preparing enterprises for NIS2 compliance.
Funding supports cybersecurity solutions and services, organisational and technical measures, information security policies and procedures, staff training, and verification audits. Projects must implement the 34 measures in the 2025 Belgian CyberFundamentals (CYFUN) framework at Basic assurance level and obtain DSA verification. The programme seeks to improve business resilience, risk management and preparedness against cyber threats.
