Standardisation in the area of Cybersecurity

Call updates

Jan 11, 2024 2:32:48 PM

The call evaluations results are herein published and can be consulted in this Flash call Info (see ocuments)

May 25, 2023 12:00:04 AM

The submission session is now available for: DIGITAL-ECCC-2023-DEPLOY-CYBER-04-STANDARDISATION(DIGITAL-JU-CSA)

Standardisation in the area of Cybersecurity

TOPIC ID: DIGITAL-ECCC-2023-DEPLOY-CYBER-04-STANDARDISATION

Programme: Digital Europe Programme (DIGITAL)
Call: Deployment actions in the area of cybersecurity (DIGITAL-ECCC-2023-DEPLOY-CYBER-04)
Type of action: DIGITAL-JU-CSA DIGITAL JU Coordination and Support Actions
Type of MGA: DIGITAL Action Grant Budget-Based [DIGITAL-AG]
Deadline model: single-stage
Planned opening date: 25 May 2023
Deadline date: 26 September 2023 17:00:00 Brussels time

ExpectedOutcome:
Organization of events, workshops, stakeholder consultations, and production of white papers, all fostering the development of harmonised standards and conformity with requirements stemming from above mentioned legislative framework.
Support for participation of relevant European experts in European and international cybersecurity standardization fora.
Objective:
The objective of this topic is to support further standardisation in the area of cybersecurity, notably in view of the implementation of the proposed Regulation on the Cyber Resilience Act (CRA), in particular with a view to improving the awareness and engage stakeholders in such standardisation work.

Scope:
The aim is to ensure wide stakeholder participation in standardisation activities in the area of cybersecurity, and in particular in relation to development of harmonized standards facilitating the implementation of the Cyber Resilience Act. This can be in the form of meetings, workshops and collaborative activities, involving the private as well as the public sector.

The Cyber Resilience Act (CRA) proposal aims to improve the internal market’s functioning by mandating that all products with digital elements (hardware and software) will only be made available on the market if they meet specific essential cybersecurity requirements. In order to facilitate the implementation of the CRA, harmonised standards would be developed, which, if followed, would trigger the presumption of conformity with the CRA essential cybersecurity requirements to which they correspond. This will be complementary to actions by the National Coordination Centres, which will play a key role in reducing negative cross-border spillovers and subsequent costs to society to mitigate the risks associated with non-secure products.