Cyber Resilience and Hygiene of Private Sector, including SMEs

ENISA is supporting the EU Member States since 2012 to develop, implement and evaluate their National Cyber Security Strategies (NCSS). Since 2017, all EU Member States have published their own NCSS.

Cyber Resilience and Hygiene of Private Sector, including SMEs

There are different ways how governments can ensure that businesses implement appropriate security measures. One way is to make certain standards mandatory by law. However, governments can also apply softer steering measures, for example promoting and developing education and training on cybersecurity, cybersecurity skills, awareness raising and research and development initiatives, as well as guidance on good cyber hygiene practices and controls, stakeholders and entities. One key objective within the national strategy is to strengthen the resilience of small and medium-sized enterprises (SMEs), in particular those excluded from the scope of the NIS2 Directive, by providing easily accessible guidance and assistance for their specific needs.

Austria flag
Austria
Belgium flag
Belgium
Bulgaria flag
Bulgaria
Croatia flag
Croatia
Cyprus flag
Cyprus
Czech Republic flag
Czech Republic
Denmark flag
Denmark
Estonia flag
Estonia
Finland flag
Finland
France flag
France
Germany flag
Germany
Greece flag
Greece
Hungary flag
Hungary
Iceland flag
Iceland
Ireland flag
Ireland
Italy flag
Italy
Latvia flag
Latvia
Liechtenstein flag
Liechtenstein
Lithuania flag
Lithuania
Luxembourg flag
Luxembourg
Malta flag
Malta
Netherlands flag
Netherlands
Norway flag
Norway
Poland flag
Poland
Portugal flag
Portugal
Romania flag
Romania
Slovakia flag
Slovakia
Slovenia flag
Slovenia
Spain flag
Spain
Sweden flag
Sweden
Switzerland flag
Switzerland
Belgium flag
Belgium

CyFun 'Small' & Safeonweb@Work SME Support: The CCB provides micro and small organisations with the free CyFun 'Small' assurance level (a prioritised set of basic controls) and practical awareness material via Safeonweb@Work. This package includes starter kits, checklists, and toolkits specifically designed to lower the barrier to entry for basic cyber hygiene and resilience in the SME sector.

Sources: https://atwork.safeonweb.be/tools-resources/cyberfundamentals-framework
https://atwork.safeonweb.be/sites/default/files/2025-10/CCB_CyFun2023_Booklet-SMALL_E%20%5BLR-web%5D.pdf

The SECURE Project: At the beginning of 2025, the CCB joined the EU-funded SECURE project, an initiative funded under the Digital Europe Programme aiming to help SMEs across Europe improve their cybersecurity maturity and comply with the requirements of the Cyber Resilience Act. 

Sources: https://ccb.belgium.be/ncc/secure-project

Croatia flag
Croatia

SME Cybersecurity Grant - "Improving the cybersecurity of micro, small and medium enterprises" (NCC-HR / Digital Europe): Croatia's first national grant scheme dedicated to SME cybersecurity, published by CARNET as the National Coordination Centre (NKS/NCC-HR) under the DEP-funded "Deploying NCC-HR" project. Total allocation EUR 1.97m; grants of EUR 7,500–60,000 per project at 50% co-financing (project value EUR 15,000–120,000). Funds internal cybersecurity self-assessment under the Cybersecurity Act (NN 14/24), implementation of measures, certifications, employee training and security/penetration testing. 

Sources: https://nks.hr/carnet-dodjeljuje-197-milijuna-eura-bespovratnih-sredstava-za-unapredenje-kiberneticke-sigurnosti-mikro-malih-i-srednjih-poduzeca-msp/ 
https://eufondovi.gov.hr/objavljen-poziv-za-unaprjedenje-kiberneticke-sigurnosti-mikro-malih-i-srednjih-poduzeca/ 

European Digital Innovation Hubs: Croatia's network of four EU/nationally co-funded Digital Innovation Hubs delivering free digital-transformation and cybersecurity services to SMEs and the public sector. CROBOHUB++ (coordinated by UNIZG-FER) is specialised in AI, cybersecurity and HPC and acts as a one-stop shop offering test-before-invest, skills/training, funding support and networking; EDIH Adria and others cover other regions. During the SME grant call the EDIHs provided free cyber self-assessments and help preparing documentation and implementing a cybersecurity management system. Co-funded by Digital Europe Programme (50%) + the National Recovery and Resilience Plan / state budget (50%). 

Sources: https://www.hgk.hr/centar-za-eu-projekte/edih-crobohub 
https://crobohub.fer.hr/ 

Denmark flag
Denmark

Cyber Security and Business Continuity: Research and capacity-building project aimed at increasing the level of cyber security in Danish small and medium-sized manufacturing companies by identifying and addressing vulnerabilities in their supply chains and the capabilities required to handle them. Carried out by the University of Southern Denmark and the Royal Danish Defence College with funding from the Danish Industry Foundation, the project worked with 50 case companies and concluded in 2026 with a final report presenting 30 practical tools for SMEs.

Sources: https://cyber-smv.dk/en/companies/[TF1] [RB2] 

SME:Digital: SME:Digital assists small and medium-sized enterprises (SMEs) in digitally enhancing their operations. It includes calls to apply for advisory grants specifically for cybersecurity and risk assessments. 

Sources:https://digst.dk/digital-transformation/smvdigital/
https://en.digst.dk/digital-transformation/smedigital/
https://smvdigital.dk/content/

Digital Security in Danish SMEs: National report examining the cybersecurity posture of Danish SMEs. The publication provides insight into cybersecurity practices, adoption of security measures, challenges faced by SMEs, and areas requiring improvement. It serves as a practical resource for understanding and strengthening cyber resilience and cyber hygiene within the Danish SME sector.

Sources: https://samsik.dk/publikation/digital-sikkerhed-i-danske-smver-2024/
https://samsik.dk/wp-content/uploads/2025/03/Digital-sikkerhed-i-danske-SMVer-2024.pdf

SME-CERT / Cybersecure Company:Denmark's Strategy for Cyber and Information Security 2026-2029 includes the establishment of an SME-CERT (aka. Cybersikker Virksomhed / Cybersecure Company) through public-private cooperation. The initiative is intended to strengthen cybersecurity support, cooperation and information sharing for small and medium-sized enterprises.

Sources: https://mssb.dk/nyheder/nyhedsarkiv/2026/januar/aftale-ny-strategi-for-cyber-og-informationssikkerhed/
https://mssb.dk/media/4ifhls3a/aftaletekst-strategi-for-cyber-og-informationssikkerhed-2026-2029.pdf
https://cybersikkervirksomhed.dk/

The Cybersecurity Pact: The Cybersecurity Pact is a public-private partnership to help strengthen cybersecurity in small and medium-sized enterprises (SMEs).

Sources:https://www.sikkerdigital.dk/virksomhed/cybersikkerhedspagten

Estonia flag
Estonia

SME cybersecurity support grant: Estonia supports SME cybersecurity through two linked funding streams. In practice, the first, managed by EIS with RIA assessing the proposed security work, helps SMEs hire external specialists to map and improve their cybersecurity level. A 2026 innovation grant complements this by funding cybersecurity companies that develop new solutions with research institutions. Together, these measures raise SME resilience directly and expand the market of cybersecurity products and expertise available to them.

Sources: https://eis.ee/en/services/grant-for-innovation-and-development-in-cybersecurity/
https://www.ria.ee/en/cyber-innovation-funding

NIS2 implementation support and primary security measures for small and micro-enterprises: JDM and RIA are supporting NIS2 implementation through entity registration, implementing regulations, guidance, a primary-security-measures framework for small and micro-enterprises, and the KüberTase support measure and roadmap methodology for newly regulated organisations. 

Sources: Cybersecurity Act – Riigi Teataja
KüberTase support measure – EIS

RIA cybersecurity accelerator: RIA and Tehnopol operate an accelerator for early-stage cybersecurity companies. In practice, the programme provides mentoring, business support and funding of up to €60,000 over approximately seven months. The 2026 edition focuses on solutions for fraud and social engineering. By helping young companies develop and bring these tools to market, the accelerator expands the practical cybersecurity support available to businesses.

Sources: 

https://www.ria.ee/en/cyber-security/business-development

Finland flag
Finland

NCSC-FI gives guidance and services for small and medium-sized organisations: The NCSC-FI provides free advice, guides and alerts tailored to smaller organisations to raise their baseline cyber-hygiene, alongside the incident-reporting channel that any organisation can use. This helps SMEs, which often lack dedicated security staff, to detect and respond to common threats such as account compromise and phishing. Supervision of NIS2 organisations is done by sectors, and by different authorities. 

Sources: https://kyberturvallisuuskeskus.fi/en/instructions-and-guides/instructions-and-guides-organisations-and-companies
Kyberturvallisuuslaki | 124/2025 | Suomen säädöskokoelma | Finlex  (Cybersecurity Act, published in Finnish and Swedish only) 

Financial support will be granted for SMEs for implementing new cybersecurity legislation, as well as for the implementation and dissemination of modern cybersecurity solutions: The National Coordination Centre was granted a new project under the Digital Europe Programme, which from the The Finnish Transport and Communications Agency Traficom will distribute financial support to third parties in 2025–2029. Minimum of three call rounds will be held with total budget of 3,7 million euros. Financial support will be granted for SMEs for implementing new cybersecurity legislation, as well as for the implementation and dissemination of modern cybersecurity solutions. The dates and other details of the call rounds for financial support are announced on the European Commission’s Funding & Tenders Portal, haeavustuksia.fi/en website and on this website in Finnish and in Swedish

Sources: https://www.kyberturvallisuuskeskus.fi/en/our-activities/national-coordination-centre/nationally-granted-financial-support

Germany flag
Germany

Transferstelle Cybersicherheit im Mittelstand: A federally funded nationwide transfer hub for supporting SMEs, craft businesses and start-ups to raise their cybersecurity level and comply with regulatory requirements. It offers free of charge various awareness and qualification formats, events, and practical tools such as the CYBERsicher Check (self-assessment), CYBERDialoge (expert consultations) and the CYBERsicher Notfallhilfe (emergency-help platform) that helps with incident response and steers affected companies to qualified support after an incident.

Sources: https://transferstelle-cybersicherheit.de/

Focus projects on cybersecurity for SMEs: The range of services offered by the Cybersecurity Transfer Centre is complemented by various standalone focus projects. These address different areas of IT and cybersecurity topics through a combination of online tools and qualification formats, e.g.: Compliance with regulatory requirements, game-based approaches to staff training or protection of critical sectors/operational technologies.

Overview: https://www.mittelstand-digital.de/MD/Redaktion/DE/Dossiers/A-Z/ITSicherheitInDerWirtschaft/itsicherheitinderwirtschaft.html 

Compliance: FitNIS2-Navigator, Easy.CRA, LegalTrustNavigator, KMU.kompetent.sicher 

Game based approaches: Elite 2.0, BAKSecure, ReACD

OT-protection: EvaSecur, OT-Craft

Alliance for Cyber Security (Allianz für Cyber-Sicherheit, ACS):A public-private initiative led by the Federal Office for Information Security (BSI) since 2012 that strengthens the cyber-resilience of organisations, including SMEs. It provides practical recommendations, background information, warnings and a members' network for the exchange of experience, and organises the annual ACS congress and regional events.

Sources: https://www.allianz-fuer-cybersicherheit.de/ 

Greece flag
Greece

Cybersecurity Countermeasures for Businesses and Public Organisations: The National Cybersecurity Authority (NCSA) of Greece provides an online resource with practical measures that businesses can apply to protect their information infrastructure against cyberattacks. 

Sources: https://cyber.gov.gr/antimetopisi-apeilon/systaseis-gia-antimetra-epicheiriseon-dimosion-foreon/ 

Cybersecurity Handbook: Best Practices for the Protection and Resilience of Information Systems: The handbook provides technical and organisational practices for improving the protection and resilience of information systems. 

Sources: https://cyber.gov.gr/wp-content/uploads/2024/12/%CE%95%CE%B3%CF%87%CE%B5%CE%B9%CF%81%CE%AF%CE%B4%CE%B9%CE%BF-%CE%9A%CF%85%CE%B2%CE%B5%CF%81%CE%BD%CE%BF%CE%B1%CF%83%CF%86%CE%AC%CE%BB%CE%B5%CE%B9%CE%B1%CF%82-%CE%95%CE%BB%CE%BB%CE%B7%CE%BD%CE%B9%CE%BA%CE%AE-%CE%AD%CE%BA%CE%B4%CE%BF%CF%83%CE%B7.pdf 

https://cyber.gov.gr/wp-content/uploads/2025/04/Cybersecurity-Handbook-English-version-1.pdf 

SOC4SME: SOC4SME aims to reinforce the cybersecurity landscape for Greek SMEs through the establishment of a sectoral Security Operations Center (SOC). Οur EU-funded initiative brings together top experts to deliver high-performance, easy-to-deploy tools for real-time monitoring, threat detection, prediction, and response.  Leveraging cutting-edge AI and ML technologies, SOC4SME enhances data analysis capabilities, enabling proactive attack categorisation, prioritisation, and recommendations. Our state-of-the-art endpoint detectors, including network firewalls and anti-malware systems, ensure continuous monitoring and protection of SME systems and networks. 

Sources: https://soc4sme.eu/about/ 
https://cyber.gov.gr/soc4sme-to-eyropaiko-programma-enischysis-tis-kyvernoasfaleias-mikromesaion-epicheiriseon/ 

Hungary flag
Hungary

DigitalTech EDIH - cybersecurity services for SMEs and public sector: Hungary's reference Digital Innovation Hub for cybersecurity and digital competencies, co-funded by the EU Digital Europe Programme and the Hungarian state, providing free services nationwide to start-ups, SMEs, mid-caps (under 499 staff, under €100M turnover) and public bodies. Cybersecurity is one of its core pillars: it delivers awareness and skills training, expert advisory, and test-before-invest activities to help organisations find and implement the right security solutions and build resilience against cyberattacks. Since autumn 2022 over 2,000 Hungarian companies and 5,000 staff have taken part in its training and personalised consultancy. The project succeeded and continues from December 2025 as DigitalTech EDIH 2.0 (three more years, adding AI competencies), with HUF 860.4M in state budget support.

Source: https://digitaltechedih.hu/

Liechtenstein flag
Liechtenstein

Cybercheck.li: The Cyber Security Liechtenstein campaign provides practical cybersecurity support for businesses through the Cybercheck.li platform. SMEs can complete a free and anonymous online self-assessment covering organisational, technical and physical security measures and receive an initial assessment and recommended improvements. The platform also provides specialist articles, video interviews, an SME information-security factsheet, an internet-provider checklist, access to advisory organisations and a cyber-risk calculator.

Sources: https://www.cybercheck.li/

Cybersecurity Capacity-Building Activities for SMEs: Digital-Liechtenstein.li organises cybersecurity workshops and events for businesses, particularly SMEs, in cooperation with cybersecurity experts and the National Cyber Security Unit. The activities address current cybersecurity challenges, resilience strategies and practical implementation measures to improve organisational cybersecurity and cyber hygiene.

Sources: https://digital-liechtenstein.li/cyber-security-workshop-praxisnahe-strategien-fuer-kmu-und-enterprises/

Measures for Implementing the National Cyber Security Strategy 2025: The 2026 measures catalogue includes operational-development measures directly relevant to private-sector and SME resilience.

Sources: https://www.llv.li/de/landesverwaltung/stabsstelle-cybersicherheit/nationale-cyber-strategie/massnahmen
https://www.llv.li/serviceportal2/amtsstellen/stabstelle-cyber-sicherheit/nis-strategie/20260610_massnahmen-zur-umsetzung-der-nationalen-cybersicherheitsstrategie-2025.pdf
https://www.llv.li/serviceportal2/amtsstellen/stabstelle-cyber-sicherheit/nis-strategie/20260730_massnahmen-zur-umsetzung-der-nationalen-cybersicherheitsstrategie-2025-en-.pdf

Malta flag
Malta

Cyber Assess Scheme: The Cyber Assess Scheme aims to strengthen businesses' security and resilience by providing specialised cybersecurity services including vulnerability assessments, penetration testing, security architecture reviews, risk assessments, and audits. The scheme is designed to help enterprises proactively manage cyber threats and reduce supply chain risks. Specific allocations are provided for SMEs. 

Sources: https://ncc-mita.gov.mt/cyber-assess/ 

CYBER+ALT – Agħżel Li Tipproteġi: MITA through the National Cybersecurity Coordination Centre (NCC-MT) has launched CYBER+ALT – Agħżel Li Tipproteġi, a Grant Scheme specifically targeted to locally established SMEs. This incentive seeks to assist SMEs through non-repayable grants to part-finance investment that will enhance their overall level of security and resilience in order to be in a better position to handle cyber threats and be proactive to meet future challenges. This will improve the capacity of the local organisations whilst increasing the level of investment made in cybersecurity locally. 

Sources: https://ncc-mita.gov.mt/cyber-alt/?fbclid=IwAR0hQb6pcCMy_t4Buhpc0hoHyQmAyOB8mhmoCMG_WBsj7sfyBakCXO3-2Gs 

Mind the Gap: Mind the Gap is an initiative by the Malta Digital Innovation Authority (MDIA), in collaboration with Tech.mt and the Malta Communications Authority (MCA), designed to empower e-commerce businesses in Malta to understand and improve their levels of cybersecurity maturity. It comprises two schemes. The Cybersecurity Self-Assessment, led by MDIA, is a free self-assessment tool through which applicants answer a set of questions on cybersecurity issues, receive a cybersecurity score and MDIA guidance on the findings, and may obtain an acknowledgement from a national authority that can be shared publicly. The Cybersecurity Improvement Scheme, led by Tech.mt, provides financial assistance to e-commerce businesses that have completed the self-assessment to improve their cybersecurity maturity levels. The self-assessment is derived from level 0 of MDIA’s Technology Assurance Assessment Framework (TAAF). 

Sources: https://mdia.gov.mt/services/mind-the-gap/ 

B SECURE Scheme: Through the B SECURE Scheme, private industry could apply for assistance in assessing the posture of their digital assets against the latest cyber security threats. The scheme also provided further education to employees through training, giving participants the possibility to earn internationally recognised certifications in the cyber security domain. The scheme is now closed. 

Sources: https://ncc-mita.gov.mt/events/13-06-19-the-b-secure-scheme-launch/ 

https://ncc-mita.gov.mt/national-schemes/ 

Netherlands flag
Netherlands

Strengthened NCSC single contact point for businesses (former Digital Trust Center): 

Since 1 January 2026 the Digital Trust Center (DTC) has merged into the strengthened NCSC-NL, giving roughly 2.4 million Dutch organisations (from sole traders to multinationals) a single contact point for digital resilience. Businesses access practical security tips, self-scans and tools, and a peer network, through the renewed NCSC website, the MijnNCSC portal and the DTC Community, with 24/7 availability. 

Source: https://www.ncsc.nl/over-ons/versterkt-ncsc 

Poland flag
Poland

Cybersecurity guidance and preventive support for businesses: CERT Polska provides businesses and institutions with free guidance, warnings and preventive information services that support cyber hygiene and early remediation. These services lower the access barrier to practical cybersecurity support, including for smaller organisations with limited internal capacity.

Sources: https://cert.pl/en/
https://cert.pl/en/n6/

CERT Polska Artemis scanning and tools for entities: CERT Polska operates Artemis and related preventive services to identify exposed vulnerabilities in participating organisations’ internet-facing systems. Findings are communicated to affected entities so weaknesses can be corrected before they are exploited.

Sources: https://cert.pl/en/posts/2026/04/annual-report-2025/

Portugal flag
Portugal

Business Competitiveness Incentive System – SME Qualification (Sistema de Incentivos à Competitividade Empresarial – Qualificação das PME): The programme provides funding to support the qualification and digitalisation of SMEs. Eligible activities include cybersecurity and data protection, implementation of tools and practices to secure information, and solutions for detecting and responding to cyber threats. Both individual SME projects and joint operations involving SME support organisations are covered. 

Sources: https://www.compete2030.gov.pt/avisos/sice-qualificacao-das-pme-operacoes-em-conjunto_mpr-2025-2/ 
https://compete2030.gov.pt/avisos/sice-qualificacao-das-pme-operacoes-individuais-mpr-2024-4/ 

Alliance for Cybersecurity SME: The Alliance for Cybersecurity is a cooperation platform through which public and private members undertake joint initiatives intended to improve national cybersecurity culture and organisational resilience. 

Sources: https://aliancaciberseguranca.pt/ 
https://aliancaciberseguranca.pt/wp-content/uploads/2024/04/PME_Ciberseguranca_2023_CNCS_Alianca.pdf 

C-Network: The Cybersecurity Competence Centres Network (C-Network) is a project driven by the National Cybersecurity Centre (CNCS). The centres identify organisational cybersecurity needs and support entities in improving their cybersecurity maturity, resilience, knowledge transfer and innovation capacity. 

Sources: https://www.cncs.gov.pt/pt/c-network/ 

Cybersecurity Digital Stamp: The Cybersecurity Digital Stamp reflects the commitment of all organisations to adopting a roadmap for cybersecurity capacity building. This is one of the four Digital Maturity Certification Stamps and assesses compliance with cybersecurity best practices. To obtain this certification, organisations must meet the standards and requirements established for certification in this area. These requirements are assessed according to three maturity levels: Bronze, Silver, and Gold. 

Sources: https://selosmaturidadedigital.incm.pt/Cybersecurity  

Slovakia flag
Slovakia

Financial Support for Cybersecurity Audits for SMEs: Grant programme supporting cybersecurity audits for SMEs operating in sectors covered by the Act on Cybersecurity No. 69/2018, as amended by Act No. 366/2024 Coll. (hereinafter referred to as the “National Cybersecurity Act”). The programme aims to strengthen the cybersecurity resilience of SME infrastructure in sectors covered by the national cybersecurity framework.

Sources: https://ncca.nbu.gov.sk/vyzva-na-predkladanie-ziadosti-o-nenavratny-financny-prispevok-nfp-na-podporu-auditov-kybernetickej-bezpecnosti/

Financial Support for Increasing Cyber Resilience of Products (CRA Readiness Programme): Grant programme supporting Slovak SMEs, manufacturers, importers and distributors in increasing the cybersecurity resilience of products and preparing for compliance with the Cyber Resilience Act (CRA). The programme is funded through the Digital Europe Programme under the TestCert-SK project.

Sources: https://ncca.nbu.gov.sk/vyzva-na-predkladanie-ziadosti-o-nenavratny-financny-prispevok-nfp-na-podporu-zvysovania-kybernetickej-odolnosti-produktov-v-ramci-financnej-podpory-tretim-stranam/

Cybersecurity for Small and Medium-Sized Enterprises (12 Steps to Protect Your Business): Practical cybersecurity guidance for SMEs covering governance, training, audits, backups, cloud security, website security and information sharing. Developed as a practical awareness and cyber hygiene resource for small and medium-sized enterprises.

Sources: https://cybercompetence.sk/wp-content/uploads/dokumenty/na_stiahnutie/letak_kyberneticka_bezpecnost-male_a_stredne_podniky_A4.pdf

Slovenia flag
Slovenia

Model Security Documentation for Organisations (Vzorčna varnostna dokumentacija za organizacije): URSIV provides practical security documentation templates intended particularly for small and medium sized organisations. The package includes cybersecurity policies, risk assessment methodologies, risk registers, business continuity plans, recovery plans, incident response plans and security measures plans. Organisations can adapt the templates to improve cybersecurity governance and resilience. 

Sources: https://www.gov.si/novice/2025-12-12-vzorcna-varnostna-dokumentacija-za-organizacije/ 

Strengthening the Cybersecurity Ecosystem in Slovenia (SECIS) (Krepitev ekosistema kibernetske varnosti v Sloveniji – SECIS): SECIS supports cybersecurity capacity building and resilience improvement, with a specific focus on micro, small and medium sized enterprises. The project provides training, workshops, practical tools, tailored support and funding mechanisms to help companies implement cybersecurity measures and improve resilience against cyber threats. The project also foresees a central digital platform for cybersecurity resources and best practices. 

Sources: https://www.gov.si/zbirke/projekti-in-programi/krepitev-ekosistema-kibernetske-varnosti-v-sloveniji-secis/ 

SI-CERT Cybersecurity Webinar Programme for Organisations (Serija spletnih seminarjev): SI-CERT provides free online seminars addressing practical cybersecurity challenges faced by Slovenian organisations. Topics include advanced attacks against companies, phishing, cyber incident reporting, personal data breaches, cyber fraud and cyber hygiene. Webinar recordings remain publicly available, allowing businesses to access training resources on demand. 

Sources: https://www.cert.si/serija-spletnih-seminarjev/ 

Safe Online Programme (Varni na internetu): SI-CERT operates the national "Safe Online" awareness programme for the Slovenian public, with a dedicated content stream for small companies, entrepreneurs and sole traders. The programme provides practical guidance on cyber threats, online fraud, online banking security, identity protection and safe use of digital services. 

Sources: https://www.varninainternetu.si/ 

Cybersecurity Risk Management and Compliance Framework under the Information Security Act (ZInfV-1): Slovenia's Information Security Act requires covered organisations to implement cybersecurity risk management measures, maintain security documentation, carry out risk assessments, implement security controls and undergo supervisory review. The framework supports improved resilience by requiring organisations to systematically manage cyber risks and implement preventive measures. 

Sources: https://www.gov.si/teme/informacijska-in-kibernetska-varnost/ 

Spain flag
Spain

INCIBE business cybersecurity guidance and 017 advisory service: INCIBE provides businesses, professionals and SMEs with a national package of practical cybersecurity support. Its business portal offers incident guidance, ransomware and compromised-email assistance, anti-botnet services, GDPR guidance for SMEs, risk self-assessment, security policies, awareness materials and online training. The free and confidential 017 service complements these resources with technical, legal and psychosocial advice and directs businesses to the appropriate incident-reporting or enforcement channel when necessary. 

Sources: https://www.incibe.es/en/empresas/te-ayudamos 
https://www.incibe.es/en/linea-de-ayuda-en-ciberseguridad 

Kit Digital cybersecurity vouchers for SMEs and self-employed workers: Kit Digital provided publicly funded digital vouchers that eligible SMEs, microenterprises and self-employed workers could use to acquire approved digital solutions. Cybersecurity-related categories included secure communications, cybersecurity services, managed cybersecurity for medium-sized firms and secure workplace solutions, enabling beneficiaries to finance practical protection measures through authorised digitalising agents. 

Sources: https://www.acelerapyme.gob.es/en/kit-digital/digital-solutions 
https://www.acelerapyme.gob.es/kit-digital 

Joint situational assessments for the publication of cybersecurity guidelines: Promotion of joint situational assessments between the agencies of the Ministry of the Interior, the LEAs and other public bodies or private organisations and associations resulting in the publication of documents or guidelines that help to enhance cybersecurity 

Sources: https://occ.ses.mir.es/publico/occ/dam/jcr:ccbfd6ae-b17d-492c-8a0b-fddc87c943f9/Plan%20estrat%C3%A9gico%20MIR%20cibercrimen,%20ciberseguridad%20y%20desinformaci%C3%B3n%20-%20PEICCD%202026.pdf  

Sweden flag
Sweden

Cybersäkerhetskollen (Cybersecurity Check): Cybersäkerhetskollen is a national assessment tool that enables organisations to measure the maturity of their systematic cybersecurity work and identify areas for improvement. The tool includes Information Security Check, IT Security Check, OT Security Check and Supply Chain Check. It is available to organisations across Sweden and is particularly relevant for operators covered by the Cybersecurity Act.

Sources: https://www.ncsc.se/sv/radgivning-och-stod/arbeta-systematiskt-med-informationssakerhet-och-cybersakerhet/cybersakerhetskollen/
https://rib.msb.se/filer/pdf/31260.pdf

CERT-SE ANTS (Automatic Notifications of Technical Vulnerabilities): ANTS is a free service operated by CERT-SE that monitors organisations' internet facing infrastructure and alerts participants when technical vulnerabilities or signs of compromise are identified. The service is intended to help organisations detect weaknesses and improve cyber hygiene before incidents occur.

Sources: https://www.ncc-se.se/en/

NCC-SE Financial Support to SMEs for Cybersecurity Capacity Building: Sweden's National Coordination Centre for Cybersecurity Research and Innovation provides funding opportunities for SMEs to strengthen cybersecurity capabilities and preparedness. The programme supports projects that improve cybersecurity capacity, resilience, innovation and preparedness in Swedish organisations.

Sources: https://www.ncc-se.se/en/

Cybersecurity Advisory Material for Businesses: Sweden provides businesses with practical guidance on information security, cybersecurity, continuity planning and resilience through the National Cybersecurity Centre and the Swedish Civil Defence and Resilience Agency. Guidance is intended to help organisations implement systematic cybersecurity practices and meet increasing regulatory requirements.

Sources: https://www.mcf.se/en/%20;/
https://www.ncsc.se/