2025 Cyber Review Grant

2025 Cyber Review Grant is sponsored by CyberSC. This grant assesses a company's cybersecurity posture and produces a remediation plan. It covers compliance assessments against frameworks like CMMC 2.

##### Leveraging digital tools can significantly enhance your company's capabilities. However, it is crucial to invest in protecting sensitive information and mitigating the risk of cyber-attacks. Since all Irish companies utilize digital tools, it is essential that all Irish companies now review their cyber security measures.

This is especially important as recent advancements in AI have made smaller businesses more attractive targets for malicious actors. To help you take action now, Enterprise Ireland, in collaboration with the National Cyber Security Centre, offers the Cyber Security Review.

This initiative provides companies like yours access to cyber security experts who will conduct an independent review of your company's cyber security status, identify vulnerabilities, and develop a clear roadmap for you to enhance your security measures. For more information, please click on the Eligibility and Application tab. ## What can it be used for?

The review is designed to meet the specific needs of Irish companies and encourage them to the take the first/next step on their security journey. Every review will cover the headings below, tailored to your company, in line with the National Cyber Security Centre (NCSC) Framework.

In agreement with you as the client, the consultant may focus on specific areas of concern while still ensuring a breadth of coverage including agreed next steps. The standard report template is available on the claim page and it will review your current position on: 12. Cyber Awareness Training and Culture 13.

Cyber Incident Response and Business Continuity Planning The report will prioritize key issues and provide specific, measurable actions, with named owners within the company, that can be addressed in a six to twelve month timeframe. No security project can guarantee that your company is fully insulated from any potential attack.

The Cyber-security review aims to lessen the risk, improve your ability to respond and begin to instill a culture of continuous improvement in the light of evolving threats. * Funding of 80% of the fixed project cost of €3,000 (which covers all the project costs – including consultant time, travel, and other project expenses).

* The support of a qualified, external Cyber security expert to: * Interview key company personnel * Investigate current company practices * Review the technical implementation of both on-site and cloud software being used. * The delivery of a report (with named owners of actions within your company) on how to improve your Cyber Security posture.

The report is structured based on best practice from the NCSC (National Cyber Security Centre). * It is expected that the bulk of these follow-on actions will be structured so they can be implemented by your company directly. * The report will also feature signposting to other industry supports and training available and appropriate to your company as a follow-on to your Security Journey.

Apply now**to secure your spot and enhance your company’s cybersecurity** Eligible companies - Client companies of Enterprise Ireland with an assigned Client Advisor. If you do not have a Client Advisor,please become an Enterprise Ireland client. Only one Cyber Security Review Grant shall be approved per company in a 12-month period.

### What are eligible activities? Engagement of a cyber security expert to support an independent evaluation of a company’s cyber security policies, procedures and systems.

The engagement will include three elements: * Cyber security review (based on a detailed checklist, designed in collaboration with NCSC) * Structured report with prioritised action plan to address any cyber security issues found * Cyber security training workshop and materials The technology and business areas to focus on can include: * Technical evaluation: Review of network, system, application and endpoint security configurations.

* Security Controls: Evaluate the effectiveness of security measures such as firewalls, VPNs, web proxies, and intrusion detection/prevention systems. * Key Assets: Identify critical assets (e.g., servers, databases, applications) and assess their protection mechanisms. * Business Continuity: Review continuity plans, backup procedures, and disaster recovery strategies to ensure resilience against cyber incidents.

* Responsibilities and Roles: Clarify roles and responsibilities for cyber security within the organisation. * Security awareness and training: evaluate employee understanding of cyber security measures and procedures. * Incident Management: Assess incident response protocols, including detection, containment, eradication, and recovery processes.

* Specifically address the security of AI systems, including model training data, algorithms, and deployment infrastructure. Evaluate risks related to adversarial attacks, bias, and privacy concerns. ### What are ineligible activities?

Activities carried out before the application was approved are not eligible for grant support This is not a general consultancy grant and cannot be used for items such as: * Routine or business-as-usual upgrades of digital systems already in use (i.e., software upgrades that patch security vulnerabilities). * Assessments from technology platforms or software providers; cyber security experts must be solution agnostic.

* General management consultancy including business strategy, market research, product development, financial review and planning, sales & marketing, HR planning or health & safety training, IT training for existing systems, and routine consultancy audits. * Scoping or sourcing equipment purchases or planning for other grant applications.

* Projects with a focus on physical security (e.g. manned guarding of sites or protection of key personnel). Please complete the following steps to apply for this grant. Step 1: Read the eligibility requirements Step 2: Contact your Client Advisor to discuss.

Step 3: Find a suitable consultant Step 4: Find your CRO number Step 5: Apply on our Client Portal and select the**Cyber Security Review**project option. For more information on the application process, refer to the document provided below: * Cyber Security Review Grant Terms of Reference document ##### Please complete the following steps to claim your grant. Submit your claim to us atIndustryGrantClaims@enterprise-ireland.

comon or before the projects final claim date. * to include your company name and project number in the subject line. * the Cyber Security Review Consultant Report, * a copy of the invoice and * a redacted Grantee company bank statement showing proof of payment of invoice claimed.

If any of the required documents are missing, the claim will be returned. ## Step 3 - What happens next * Your claim will be assigned to a Grant Payment Officer who will review the details and seek clarification from you if necessary. * If all is in order, the claim will be passed to the Cyber Security Review Grant Manager who will review the submission and instruct the Grant Payment Officer to pay or disallow the claim.

* The Grant Payment Officer completes the authorisation of your claim and submits a payment request to our Finance Department. * A payment report will issue by email from Grant Payment Team with details of the approved payment and advising that payment by EFT will follow shortly.