National Cyber Hubs

From the Commission's own budget table for this call. Confirm against the topic page before you plan around it: these move when a work programme is amended.

Objective: The general objective of “National Cyber Hubs” is to act as reference points and gateways to other public and private organisations at national level for participation in the European Cybersecurity Alert System and to ensure that cyber threat information from public and private entities is shared and collected at national level in an effective and streamlined manner. National Cyber Hubs are public entities given the role at national level to act as clearinghouses for detecting, gathering, aggregating and storing data on cybersecurity threats, analysing this data, and sharing and reporting cyber threat intelligence (CTI), reviews and analyses. They provide a central operational capacity and support other SOCs at national level (e.g., by offering guidance or training, making available data or analysis of this data, coordinating joint detection and monitoring actions, providing incident response services methodologies towards the mitigation of identified threats, vulnerabilities and/or misconfiguration weaknesses). They will play a central role at national level and can act as a hub within a context of SOCs in the different countries. The platforms should act as a central national point allowing for broader pooling of relevant data and CTI, enable the large scale dissemination of threat information on a large scale and among a large and diverse set of actors (e.g., CERTs/CSIRTs, ISACs, operators of critical infrastructures). National Cyber Hubs will contribute to enhancing and consolidating collective situational awareness and capabilities in detection and CTI. They will support the development of better performing data analytics, detection, and response tools, through the pooling of larger amounts of data. The National Cyber Hubs should achieve this general objective through the following specific objectives: Producing high quality, actionable information and CTI through the use of state-of-the art tools and advanced tools and technologies (for example artificial intelligence (AI), including machine learning (ML) tools) on the large data sets of collected CTI. Contributing to better detection and response to threats. They should support quicker detection of cyber threats and incidents and more effective action plans and responses by relevant entities. Contributing to collective situational awareness. The platforms should contribute to the strengthening of the EU’s common situational awareness and enhanced coordinated detection capabilities by sharing information at three levels: At national level. Close and coordinated cooperation between public…