GrantWise
HORIZON EUROPE TOPIC · Cluster 3 · Civil Security for Society

Secure Computing Continuum (IoT, Edge, Cloud, Data spaces)

HORIZON-CL3-2027-02-CS-ECCC-02 — the expected outcomes as checkable statements, what evaluators look for in this topic, and the conditions that shape the proposal.

Get the free Part B working draft for this topic ↓

ForthcomingIA · lump sumDeadline 15 September 2027EUR 3 million to EUR 4 million per project

GrantWise › Horizon Europe topics › HORIZON-CL3-2027-02-CS-ECCC-02

TopicHORIZON-CL3-2027-02-CS-ECCC-02
StatusForthcoming
CallHORIZON-CL3-2027-02-CS-ECCC — Indirectly Managed Action by the ECCC (2027)
Type of actionInnovation Actions · lump sum
Opening2 March 2027
Deadline15 September 2027
BudgetEUR 3 million to EUR 4 million per project · 5 projects expected · EUR 24 million in total
Part B page limit45 pages (standard application form; check your call)
TemplateWork Programme 2026–2027 application form

Expected outcomes

Projects may contribute to some of the expected outcomes; say which ones and why. The topic says: “Proposals are expected to contribute to one or more of the following:”

  1. EO1 Enhanced resilience against distributed cyber threats and adversarial attacks targeting interconnected systems, while preserving data privacy in highly dynamic and heterogeneous environments.
  2. EO2 Security solutions tailored to distributed computing systems including for example IoT and edge computing environments, integrating privacy-preserving mechanisms.
  3. EO3 Improved interoperability of security measures and cross-layer security, including the compatibility of privacy-enhancing technologies across different layers of the computing continuum and data spaces, and across providers in the multi-provider edge cloud continuum.

What evaluators will look for in this topic

Expected outcomes

  • Projects may contribute to some of the expected outcomes; say which ones and why.
  • For each outcome (EO1 to EO3), name who will use or adopt your results (a specific group, not “industry” or “society”), how they get them, and the indicator that shows the change, with baseline, target and date.
  • Use the topic's own words for each outcome, so the evaluator can tick it off.

What the scope asks for

Evaluators check the proposal against these sentences of the scope. Answer each one visibly, in the call's own words.

  • “Proposals should address critical challenges such as ensuring data integrity in highly distributed and dynamic environments, implementing robust zero-trust architectures to secure interconnected and heterogeneous systems, and enabling comprehensive protection for sensitive data and processes.”
  • “Privacy should be considered a core element of these approaches, ensuring that data confidentiality is preserved throughout its lifecycle, in compliance with relevant data protection frameworks, such as GDPR.”
  • “Solutions are expected to deliver tangible and measurable security improvements across all layers of the continuum, prioritizing scalability, interoperability, trustworthiness, security and resilience against emerging threats.”
  • “Proposals are expected to address one or more of the following:.”

Conditions that shape the proposal

  • Part B, sections 1–3: 45 pages (standard application form). Text beyond the limit is not read; tables and figures count.
  • Lump sum: the budget is fixed per work package and paid when each work package is completed. Every work package needs activities and deliverables an evaluator can verify, and the effort must match the money.
  • Innovation action: evaluators expect a plausible path to commercialisation and named first users or customers.
  • Other Eligible Conditions: “In order to achieve the expected outcomes, and safeguard the Union’s strategic assets, interests, autonomy, and security, participation in this topic is limited to legal entities established in Member States and Associated Countries. In order to guarantee the protection of the strategic interests of the Union and its…”

Impact pathway and traps

  • Keep outputs, outcomes and impacts apart: what you deliver, what changes when others use it, and the long-term effect.
  • Link your outcomes to the destination's expected impacts in the Work Programme. Destination impacts are long-term effects, not project deliverables.
  • Name the barriers outside the project (regulation, markets, user behaviour) that could block uptake, and what you will do if they do.
  • Section 2.3 (the summary canvas) is optional on this call; the old split into scientific, economic and societal impact is no longer required.
The scope, as published

This topic aims to advance security across the entire computing continuum, spanning IoT devices, edge computing, cloud infrastructures, AI computing environments, and data spaces. Proposals should address critical challenges such as ensuring data integrity in highly distributed and dynamic environments, implementing robust zero-trust architectures to secure interconnected and heterogeneous systems, and enabling comprehensive protection for sensitive data and processes. Privacy should be considered a core element of these approaches, ensuring that data confidentiality is preserved throughout its lifecycle, in compliance with relevant data protection frameworks, such as GDPR. Solutions are expected to deliver tangible and measurable security improvements across all layers of the continuum, prioritizing scalability, interoperability, trustworthiness, security and resilience against emerging threats. Proposals are expected to address one or more of the following: Develop advanced security solutions for edge to cloud. For example, investigating lightweight cryptographic techniques, including in combination with or based on post-quantum cryptography, incorporated in zero-trust architectures, and decentralized security models to ensure end-to-end protection from edge to cloud, while maintaining privacy during data transmission and processing. Enhance interoperability of security measures across different computing layers. Exploring security protocols, identity and access management solutions, and cross-domain authentication mechanisms to seamlessly integrate security controls across diverse computing ecosystems, including privacy-preserving protocols that enable the secure and compliant data exchange. Develop portable, deployable PQC acceleration solutions through SW/HW secure co-design to secure user data and computing tasks across heterogeneous platforms and applications in all layers of the continuum. Improve resilience against distributed cyber threats. Exploring anomaly detection, including AI-driven anomaly detection, intrusion prevention techniques, and automated response mechanisms to counter emerging threats targeting interconnected infrastructures and data spaces, while upholding privacy through techniques such as federated analysis, secure multi-party computation, Fully Homomorphic Encryption or other.

Other topics in HORIZON-CL3-2027-02-CS-ECCC

Source and attribution

Topic text from the official topic page on the EU Funding & Tenders Portal, retrieved 19 October 2026. © European Union, reused under Commission Decision 2011/833/EU (CC BY 4.0). Changes: the expected outcomes and impacts are split into numbered statements, long passages are shortened, and the evaluator checklist is GrantWise's own commentary. Your call and the Work Programme always win; check them before you submit. GrantWise is independent and not affiliated with, endorsed by, or acting on behalf of the European Commission.