2025 CyberSC Cyber Review Grant is sponsored by CyberSC. This grant aims to improve the cybersecurity of South Carolina companies by assessing their cybersecurity level and producing a remediation plan.

##### Leveraging digital tools can significantly enhance your company’s capabilities. However, it is crucial to invest in protecting sensitive information and mitigating the risk of cyber-attacks. Since all Irish companies utilize digital tools, it is essential that all Irish companies now review their cyber security measures.

This is especially important as recent advancements in AI have made smaller businesses more attractive targets for malicious actors. To help you take action now, Enterprise Ireland, in collaboration with the National Cyber Security Centre, offers the Cyber Security Review.

This initiative provides companies like yours access to cyber security experts who will conduct an independent review of your company’s cyber security status, identify vulnerabilities, and develop a clear roadmap for you to enhance your security measures. ## What can it be used for? The review is designed to meet the specific needs of Irish companies and encourage them to the take the first/next step on their security journey.

Every review will cover the headings below, tailored to your company, in line with the National Cyber Security Centre (NCSC) Framework. In agreement with you as the client, the consultant may focus on specific areas of concern while still ensuring a breadth of coverage including agreed next steps. The standard report template is available on the claim page and it will review your current position on: 12.

Cyber Awareness Training and Culture 13. Cyber Incident Response and Business Continuity Planning The report will prioritize key issues and provide specific, measurable actions, with named owners within the company, that can be addressed in a six to twelve month timeframe. No security project can guarantee that your company is fully insulated from any potential attack.

The Cyber-security review aims to lessen the risk, improve your ability to respond and begin to instill a culture of continuous improvement in the light of evolving threats. * Funding of 80% of the fixed project cost of €3,000 (which covers all the project costs – including consultant time, travel, and other project expenses).

* The support of a qualified, external Cyber security expert to: * Interview key company personnel * Investigate current company practices * Review the technical implementation of both on-site and cloud software being used. * The delivery of a report (with named owners of actions within your company) on how to improve your Cyber Security posture.

The report is structured based on best practice from the NCSC (National Cyber Security Centre). * It is expected that the bulk of these follow-on actions will be structured so they can be implemented by your company directly. * The report will also feature signposting to other industry supports and training available and appropriate to your company as a follow-on to your Security Journey.

1. Read the eligibility requirements. 2.

Contact your Client Advisor to discuss further. 3. Find a suitable consultant.

4. If you do not have a Client Advisor, please become an Enterprise Ireland client. When you have discussed the application with your advisor and you are ready to apply, an application can be processed through the online application system.

Please note that first time applications will need to register to apply. Apply now and select the **Cyber Security****Review** project option. ### When and how can I apply?

As a “first step” to encourage companies to engage with Cyber Security, the online application process has been streamlined and should take you less than 10 minutes to complete. Once your application is accepted and approved you will receive a letter of offer. Following the instructions in this letter (e.g. The completed report, plus your proof of payment to the consultant) will allow you to claim 80% of the money back.

### Further Application Details * As part of the application, you will need your CRO number * The Grant is only valid for costs incurred after your application is approved * **Closing date:**This is subject to budget availability under The European Union’s Digital Transition Fund up to 2026. It is offered on a “first come first served” basis so we encourage client companies to apply now.

The task breakdown should be agreed by the applicant and the chosen service provider and may vary from the above depending on the needs. Note that Enterprise Ireland will review all applications and reject those that are not in line with the objectives of the offer. **The application process is as follows:** * Application review: 1-2 weeks processing time although it is often much faster.

* Decision made and application approved/rejected. * If approved, Grant issued and accepted via DocuSign. * Project carried out with consultant.

* Consultant invoices company. * Company makes a claim to Enterprise Ireland by submitting the correct documents. The final claim date for your grant will be 6 months from the issue date of the letter of offer from Enterprise Ireland.

* Company contacts their agency advisor to discuss follow-on actions.

For more information on the application process, refer to the document provided below; * Cyber Security Review Grant Terms of Reference document Activities carried out before the application was approved are not eligible for grant support This is not a general consultancy grant and cannot be used for items such as: * Routine or business as usual upgrades of digital systems already in use (i.e., software upgrades that patch security vulnerabilities).

* Assessments from technology platform or software providers; cyber security experts must be solution agnostic. * General management consultancy including business strategy, market research, product development, financial review and planning, sales & marketing, HR planning or health & safety training, IT training for existing systems, routine consultancy audits.

* Scoping or sourcing equipment purchases or planning for other grant applications. * Projects with a focus on physical security (e.g. manned guarding of sites or protection of key personnel). The immediate tangible outcome of the Cyber Security Review is a report prepared by a certified consultant.

This report will be specific to your company and identify key new steps with named owners within your company. Most action items will be achievable within your company using existing resources (such as training and certification), clearly signposted using the report structure as recommended by the NCSC.

This report should also be sharable with Enterprise Ireland as part of the grant claim / payment process i.e. details of specific vulnerabilities will be contained in a removable appendix for your own use only. A more important outcome for Enterprise Ireland is starting your company on its security journey. Strong exporting companies with robust digital processes are at the heart of Enterprise Ireland’s job creation mission.

Eligible companies - Client companies of Enterprise Ireland with an assigned Client Advisor. Only one Cyber Security Review grant can be approved per company (or group of companies). NCSC are reviewing cyber-security supports for other Irish companies on an ongoing basis.

Following NCSC guidance, it is important that you choose a qualified consultant holding one of the following qualifications, or equivalent: * CISA - CISA Certification | Certified Information Systems Auditor | ISACA * CISSP - CISSP - Certified Information Systems Security Professional | ISC2 * CISM - CISM Certification | Certified Information Security Manager | ISACA Enterprise Ireland will engage with the Cyber Security community in Ireland, and it is expected the consulting community will be proactive in messaging their availability to work with companies under this scheme.

There is no published list of approved experts related to this offer. It is the responsibility of the client company to identify and engage a suitable cyber security expert for the project. Applicants are strongly recommended to engage with up to three cyber security experts before making a choice of a provider with appropriate expertise, capability and certification.

Enterprise Ireland will not be liable for any loss and/or damage caused by an applicant’s decision to retain the services of a consultant in connection with this grant offer. Cybersecurity experts engaged for this grant support may not be employees of, nor shareholders of, nor have a direct financial interest in the company, or contractual relationship with the company as their IT technology or services provider.

As part of the application assessment process, Enterprise Ireland may deem the proposed consultant unsuitable based on these or any other criteria that may arise and will engage with the applicant to discuss other options or deem the project ineligible. Please note that this is to ensure the efficient operation of the grant and does not guarantee the quality of the specific consultant you have chosen.

Cyber Ireland are maintaining a list of their members who may be able to help you under the grant - https://cyberireland. ie/cyber-security-grants/ ##### Please complete the following steps to claim your grant. Submit your claim to us atIndustryGrantClaims@enterprise-ireland.

comon or before the projects final claim date. * to include your company name and project number in the subject line. * Use your client number (CES ID) when encrypting files.

Your CES ID number can be found in “Schedule A” of your company’s Letter of Offer. ## Step 3 - What happens next * Your claim will be assigned to a Grant Payment Officer who will review the details and seek clarification from you if necessary. * If all is in order, the claim will be passed to the Cyber Security Review Grant Manager who will review the submission and instruct the Grant Payment Officer to pay or disallow the claim.

* The Grant Payment Officer completes the authorisation of your claim and submits a payment request to our Finance Department. * A payment report will issue by email from Grant Payment Team with details of the approved payment and advising that payment by EFT will follow shortly.