[European Commission](https://commission.europa.eu/index_en)

November 21, 2025

€7,500–€60,000 per project (50% co-financing) | Total call budget: €1,970,000 | Projects up to 12 months

Supports Croatian SMEs in strengthening cybersecurity through compliance, education, and security testing activities.

Applicants must combine activities from at least two different groups (certification, education, security testing).

--- ## Description This funding opportunity, managed by the European Commission under the Digital Europe Programme, aims to enhance the cybersecurity posture of micro, small, and medium-sized enterprises (SMEs) in Croatia. The grant supports a mix of activities including certification and compliance with security standards, staff education and training, and security testing such as penetration tests and incident response exercises. Applicants are required to design projects that combine at least one activity from two of the three eligible groups to ensure a comprehensive improvement in cybersecurity resilience. --- ## Due Dates - **Full application deadline:** November 21, 2025 (by 17:00 CET/Brussels time) --- ## Funding Amount - **Total available funding:** €1,970,000 - **Grant per project:** €7,500–€60,000 (represents 50% of eligible project costs) - Minimum project size: €15,000 (with €7,500 grant) - Maximum project size: €120,000 (with €60,000 grant) - **Co-financing:** 50% of eligible project costs covered by the grant; the remainder must be financed by the applicant - **Project duration:** Up to 12 months - **Pre-financing:** Up to 50% of the grant upon contract signature --- ## Eligibility - **Eligible applicants:** - Micro, small, and medium-sized enterprises (SMEs) with a registered business in Croatia - SMEs as defined by EU Regulation 651/2014: fewer than 250 employees, turnover ≤ €50 million and/or balance sheet ≤ €43 million - Entities must be under the control of EU or EEA (Norway, Iceland, Liechtenstein) nationals/entities - Applicants must be registered at least one year prior to application - All legal forms performing economic activity are eligible (incl. companies, sole traders, crafts, associations with economic activity) - **Ineligible applicants:** - Entities controlled by third countries (e.g., non-EU/EEA ownership, such as Swiss-controlled companies) - Public enterprises (≥25% public ownership), large enterprises (≥250 employees), or those in excluded sectors (primary agriculture, fisheries, coal, etc.) - Consortia are not allowed; only individual applicants - **Other requirements:** - Only one application per entity - Must demonstrate financial viability (based on 2024 financials) --- ## Application Process - **Submission portal:** [projekti.nks.hr](https://projekti.nks.hr/) - **Registration:** Applicants must register in the EU Funding & Tenders Participant Register and obtain a PIC number - **Application language:** Croatian (with certified translations if using foreign documents) - **Required documentation:** - Project proposal (forms provided) - Ownership and control declaration - Financial statements - Declarations regarding de minimis aid, VAT, and other eligibility confirmations - **Project requirements:** - Must combine at least one activity from two different groups: 1. **Certification and compliance** (e.g., ISO 27001/22301/27032, internal self-assessment, implementation of security measures) 2. **Education** (e.g., staff training, awareness, workshops, conference participation, certification exams) 3. **Security testing** (e.g., penetration testing, vulnerability assessments, incident response exercises) - **Evaluation:** Administrative check, eligibility check, and quality assessment; minimum score required for funding - **Reporting:** One interim and one final report required --- ## Additional Information - **Eligible costs:** External services for certification, compliance, testing, education; staff costs (up to 10%); indirect costs (7%); non-recoverable VAT; travel for training; costs must be incurred during the project period - **Ineligible costs:** Hardware/software purchase, costs not related to cybersecurity, costs before project start, double funding, maintenance of existing certificates, costs from related parties, formal degree education - **De minimis rule:** Total de minimis aid to a single undertaking must not exceed €300,000 over any three-year period - **Procurement:** Projects must follow procurement rules for non-public buyers; for contracts above €5,000, multiple offers are required --- ## External Links - [Official call page (EU Funding & Tenders Portal)](https://ec.europa.eu/info/funding-tenders/opportunities/portal/screen/opportunities/competitive-calls-cs/11581?isExactMatch=true&status=31094501,31094502&order=DESC&pageNumber=3&pageSize=50&sortBy=startDate) - [National Coordination Centre Croatia (detailed call info)](https://nks.hr/poziv) - [Participant Register (EU Funding & Tenders Portal)](https://ec.europa.eu/info/funding-tenders/opportunities/portal/screen/how-to-participate/participant-register) - [Full call documentation (PDF)](https://nks.hr/wp-content/uploads/2025/10/000_Poziv-na-dostavu-projektnih-prijedloga-NKS-DEP-0001_1.izmjena.pdf) - [EU SME definition (Regulation 651/2014)](https://eur-lex.europa.eu/legal-content/HR/TXT/PDF/?uri=CELEX:02014R0651-20230701) --- ## Contact Information | Purpose | Contact Details | |------------------------------|-------------------------------------------------------------| | General queries (NKS) | info@nks.hr | | European Commission | +32 2 299 11 11 | | EC general contact form | [Contact the European Commission](https://commission.europa.eu/about-european-commission/contact_en) | | Technical support (portal) | [EU Funding & Tenders IT Helpdesk](https://ec.europa.eu/info/funding-tenders/opportunities/portal/screen/support/helpdesk) | ---

Strengthening Cybersecurity of micro, small and medium-sized enterprises

Sign in to see full grant listing