National Coordination Centre (NCC-EE) and cyber innovation funding: RIA serves as Estonia's National Coordination Centre in the European Cybersecurity Competence Centre network. It directs European funding towards Estonian cybersecurity companies and promotes cooperation between businesses and research institutions. A grant introduced in 2026 supports joint innovation projects, while RIA, CR14 and the NATO DIANA accelerator support research and testing in emerging technologies.
Sources: https://www.ria.ee/en/cyber-security/national-coordination-centre-ncc-ee
https://www.ria.ee/en/cyber-security/national-coordination-centre-ncc-ee/cybersecurity-future-technologies
Support for Strengthening National Cybersecurity (KüberToetus): A support measure financed from the Estonian state budget (the Government of the Republic’s earmarked reserve) since 2023. The measure’s annual budget is slightly over EUR 2 million, divided between two application rounds: the crisis round (the application round for resolving extraordinary and critical cyber incidents) and the prevention round (the application round for preventing disruptions to essential societal functions).
The purpose of the support is to rapidly mitigate extraordinary and critical cyber incidents and threats affecting network and information systems that are essential to the functioning of Estonian society, to minimise their harmful effects, and to prevent them. The Ministry of Justice and Digital Affairs decides on granting the support, and the Ministry of Finance disburses it.
Sources: Conditions and procedure for granting and using the support – Riigi Teataja
Support for Raising the Level of Cybersecurity (KüberTase): A support measure established to support the transposition of the NIS2 Directive, help new entities subject to cybersecurity requirements achieve a higher level of cybersecurity, and alleviate the costs associated with meeting the new requirements. The measure is financed from the Estonian state budget (the Government of the Republic’s earmarked reserve). As of 31 August 2026, an application round with a budget of EUR 2.64 million is open. Applications may be submitted on a rolling basis through the e-support environment, and applicants are advised by the Estonian Business and Innovation Agency.
Applications may be submitted by legal persons that filed the notification arising from § 41 of the Cybersecurity Act with the Estonian Information System Authority after 1 January 2026 and, as a result of the transposition of the NIS2 Directive, are newly subject to cybersecurity requirements in Estonia.
Sources: Support for Raising the Level of Cybersecurity (NIS2) – Estonian Business and Innovation Agency
https://eis.ee/teenused/kuberturbe-tostmine-nis2/
Recovery and Resilience Facility (RRF): Financed support measure “Restructuring the Core Services of the Digital State and Secure Transition to Cloud Infrastructure” had the cybersecurity-related objective of enabling the secure restructuring of the digital state’s core services and transition to cloud infrastructure through the following activities:
- Establishing security testing capability within the Estonian Information System Authority and conducting comprehensive security tests of public-sector information systems, enabling the security of those systems to be improved based on the results;
- Conducting and systematising analyses and studies in areas necessary for raising the level of cybersecurity, including support for the secure adoption of new technologies and the development of cybersecurity policy.
Sources: Estonia's Recovery and Resilience Plan / RRF measure documentation on restructuring core digital-state services and secure cloud transition
Norway and EEA Grants programme: Funding from the Fund for Bilateral Relations for the project “Preparation and implementation of cybersecurity teaching materials for general schoolteachers – assessment of digital and cybersecurity competences”, with a budget of EUR 559,554 and an implementation period from 1 January 2026 to 30 September 2028.
The project comprises three activities: 1) mapping existing cybersecurity teaching materials in Estonia and Norway and exchanging the countries’ experience to date; 2) conducting an Estonia- and Norway-wide study to assess the current state of teachers’ and students’ digital competences and cybersecurity skills; 3) developing new teaching materials for future use in both Estonia and Norway.
Sources: EEA and Norway Grants – Bilateral Fund initiatives
