NCC-IS Cybersecurity Grant

What is funded?

Eligible projects tasks must fall under the following categories related to cybersecurity:

• strengthening cybersecurity culture and awareness,

• efficient education, research and development,

• secure digital services and innovation,

• stronger law enforcement, defense and national security,

• effective response to incidents, and

• strong infrastructure, technology and legal framework.

Who can apply?

Small and medium-sized enterprises (SMEs) according to the EU definition:

• Medium-sized companies: Fewer than 250 employees and an annual turnover not exceeding 50 million euros or a balance sheet not exceeding 43 million euros.
• Small companies: Fewer than 50 employees and an annual turnover or balance sheet not exceeding 10 million euros.
• Micro-enterprises: Fewer than 10 employees and an annual turnover or balance sheet not exceeding 2 million euros.

How to apply?

Applications to the fund are submitted using Rannís' electronic application system.

The evaluation and allocation process

Rannís‘ expert panel evaluates applications and gives grades according to a rating scale. The NCC-IS Board is then given the ranking of the applications and makes a decision on grants. The Minister of Higher Education, Science and Innovation confirms the decision on allocation based on the list from the NCC-IS Board.

The following factors are used as a basis for evaluating applications:

1. Impact and novelty of the project.
2. Quality and efficiency.
3. Project management and collaboration.

All applicants will be notified whether or not they have received a grant. It is assumed that the notification of allocation is published on Rannís internal website no more than two months after the application deadline ends.

If a grant is awarded, a written agreement is made between Rannís and the beneficiary within one month of the grant being awarded. The grant is paid in two installments and is deposited into the bank account of the beneficiary concerned: The first payment process (80%) is initiated after signing the contract. The final payment process (20%) is initiated after the final report has been submitted and approved, and a presentation of the project has been delivered. However, it is possble for the grant to be paid out in one go if the total grant amount is less than one million ISK.

Eligibility:

In order for an application to be considered eligible for funding, the project's connection to the cybersecurity fund's goals must be clear. The project and its time schedule must be well defined.

Administration and reporting

The beneficiary must submit a final report to Rannís no later than August 20, 2025. A final report is a summary of the project's main results/outcome. The final report application form will be made available on the Rannis electronic application system.

The beneficiary will also need to present the project results for which he/she has received funding for in a presentation. It is also welcome to publish the results elsewhere, e.g. in a newspaper or magazine article, on the company website, or a poster.

Board and expert panel

The NCC-IS Board of Directors is made up of six individuals for a two-year term. In 2024, the Board is made up of the following individuals;

• Jón Vilberg Guðjónsson (male), Director General of Administration at the Ministry of Higher Education, Science and Innovation
• Sigurður Óli Sigurðsson (male), Head of Research and Innovation Division, Rannís
• Einar Mantyla (male), CEO of Auðna
• Sigurður Magnús Garðarsson (male), Dean of the School of Engineering and Natural Sciences, University of Iceland
• Bryndís Björk Ásgeirsdóttir (female), Acting Dean of the School of Technology, Reykjavík University
• Hrafnkell V. Gíslason (male), Managing Director, the Electronic Communications Office of Iceland (ECOI)

The expert panel consists of five individuals with expert knowledge in cybersecurity:

• Theodór R. Gíslason, Chairman of the expert panel, CTO and Head of Innovation at Syndis
• Bryndís Bjarnadóttir, cybersecurity expert at CERT-IS
• Tinna Þuríður Sigurðardóttir, Senior Analyst at the European Center of Excellence for Countering Hybrid Threats
• Kristinn Guðjónsson, Senior Staff Security Engineer at Shopify
• Hákon Aakerlund, Chief Security Officer at Arion Banki

The expert panel consists of five individuals with expert knowledge in cybersecurity.

Role of Rannís:

The Icelandic Centre for Research (Rannís) manages the fund in collaboration with NCC-IS and oversees the review and assessment of applications.