Cybersecurity as eligible expenditure is a topic that appears increasingly often in digitalisation calls, since deploying new systems without security increases risk. Solutions directly related to the project tend to be eligible – securing newly procured systems, data backup and recovery, monitoring and access management, a security audit and the associated employee training. Conversely, routine operation and the renewal of existing infrastructure with no link to the project is generally not eligible. Particular care is needed with subscriptions and licences that extend beyond the project's implementation period, since usually only the proportional part is eligible. For companies subject to specific security obligations under sector-specific regulations, it is advisable to plan the project so that it also helps meet these requirements.
See also: Purchasing software through a grant, Cloud services in a project, Eligible expenditure.
