{"id":13372,"date":"2025-10-06T16:47:01","date_gmt":"2025-10-06T13:47:01","guid":{"rendered":"https:\/\/www.eurosc.eu\/news\/grant-scheme-to-strengthen-cybersecurity-in-cypriot-small-and-medium-sized-enterprises-2025-tourism-sector\/"},"modified":"2025-10-06T16:52:53","modified_gmt":"2025-10-06T13:52:53","slug":"scheme-to-strengthen-cybersecurity","status":"publish","type":"post","link":"https:\/\/www.eurosc.eu\/en\/schemes\/business-creation-and-development\/schemes-for-established-and-or-new-businesses\/closed-en-3\/scheme-to-strengthen-cybersecurity\/","title":{"rendered":"Grant Scheme to Strengthen Cybersecurity in Cypriot Small and Medium-sized Enterprises 2025 \u2013 Tourism Sector"},"content":{"rendered":"

Objectives of the Scheme<\/strong><\/h4>\n

Through the Scheme, businesses can enhance their level of security and resilience against cyber threats, assess their current situation, and obtain certification in cybersecurity (ISO\/IEC 27001:2013 or ISO\/IEC 27001:2022).<\/p>\n

The certification will be issued by accredited bodies and will confirm the business’s compliance with the NCC-CY Cybersecurity Framework for SMEs.<\/p>\n

 <\/p>\n

Beneficiaries<\/strong><\/h4>\n

The beneficiaries of the Scheme are Small and Medium-sized Enterprises (SMEs) active in the tourism sector, which have:<\/p>\n

    \n
  • A Hotel Business Operating License, or<\/li>\n
  • A Travel Agency Operating License, in accordance with applicable Cypriot legislation.<\/li>\n<\/ul>\n

    Businesses must be legally established and operating in areas controlled by the Republic of Cyprus.<\/p>\n

     <\/p>\n

    Grant<\/strong><\/h4>\n
      \n
    • Aid intensity: 70% of eligible costs<\/li>\n
    • Minimum funding per project: \u20ac20,000<\/li>\n
    • Maximum Funding: \u20ac65,000<\/li>\n<\/ul>\n

      (or \u20ac75,000 in case of using the ENISA AR-in-a-Box tool)<\/p>\n

        \n
      • Total Project Budget: \u20ac1,000,000<\/li>\n<\/ul>\n

        The duration of each project is up to 9 months.<\/p>\n

         <\/p>\n

        Eligible Expenses<\/strong><\/h4>\n

        Expenses must be related to obtaining cybersecurity certification and may include:<\/p>\n

          \n
        • Gap analysis<\/li>\n
        • Consulting services and staff training<\/li>\n
        • Firewall, WAF, SOC, antivirus, backup and disaster recovery solutions<\/li>\n
        • Access management and security incident management systems<\/li>\n
        • Cybersecurity and data protection policy design services<\/li>\n
        • Certification costs from accredited bodies<\/li>\n<\/ul>\n

           <\/p>\n

          Ineligible Expenses<\/strong><\/h4>\n

          Expenses not directly related to obtaining certification or strengthening the cybersecurity of the business are not considered eligible under the Scheme.<\/p>\n

          For example, the following categories are not eligible:<\/p>\n

            \n
          • Salaries or wages of the enterprise’s own staff or contractors.<\/li>\n
          • General operating expenses, such as rent, utilities, telecommunications, or transportation.<\/li>\n
          • Equipment costs not directly related to cybersecurity (e.g., general-purpose computers, printers, mobile phones).<\/li>\n
          • Expenses incurred prior to the date of submission and approval of the proposal.<\/li>\n
          • Expenses for non-accredited services or suppliers that do not meet the requirements of the Plan.<\/li>\n
          • Expenses incurred after the date of submission and approval<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"

            Objectives of the Scheme Through the Scheme, businesses can enhance their level of security and resilience against cyber threats, assess their current situation, and obtain certification in cybersecurity (ISO\/IEC 27001:2013 or ISO\/IEC 27001:2022). The certification will be issued by accredited bodies and will confirm the business’s compliance with the NCC-CY Cybersecurity Framework for SMEs.   […]<\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","footnotes":""},"categories":[75],"tags":[],"class_list":["post-13372","post","type-post","status-publish","format-standard","hentry","category-closed-en-3"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.eurosc.eu\/en\/wp-json\/wp\/v2\/posts\/13372","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.eurosc.eu\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.eurosc.eu\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.eurosc.eu\/en\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.eurosc.eu\/en\/wp-json\/wp\/v2\/comments?post=13372"}],"version-history":[{"count":1,"href":"https:\/\/www.eurosc.eu\/en\/wp-json\/wp\/v2\/posts\/13372\/revisions"}],"predecessor-version":[{"id":13373,"href":"https:\/\/www.eurosc.eu\/en\/wp-json\/wp\/v2\/posts\/13372\/revisions\/13373"}],"wp:attachment":[{"href":"https:\/\/www.eurosc.eu\/en\/wp-json\/wp\/v2\/media?parent=13372"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.eurosc.eu\/en\/wp-json\/wp\/v2\/categories?post=13372"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.eurosc.eu\/en\/wp-json\/wp\/v2\/tags?post=13372"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}