CPPC — cybersecurity expert, EU digital funds evaluation
CPPC is the Polish institution that implements EU digital funds — the Digital Europe Programme and FERC. As a cybersecurity expert I evaluated technical proposals and SME cybersecurity grant applications: whether the security plan is sound, deliverable and worth public money. Evaluation work is consulting from the other side of the table — it sharpens exactly the evidence standards regulated clients demand.
Updated
Scope
- Technical evaluation of Digital Europe Programme proposals — security, feasibility and value for public money.
- Assessment of SME cybersecurity grant applications against programme criteria.
- Evaluation under formal EU-funding rules: documented criteria, audit-ready rationale, public-funds accountability.
- Reading security plans from the funder's side — where evidence, not opinion, decides funding.
Related
Compliance
Turning DORA, NIS2, ISO 27001, GDPR and the EU AI Act into one control set with reusable evidence and aligned reporting clocks.
Compliance readiness
Gap assessment and remediation planning for DORA, NIS2, ISO 27001, GDPR and the EU AI Act — mapped to controls and evidence, not paperwork.
AI governance & AI Act readiness
Build a workable AI governance framework: system inventory, risk classification, acceptable-use policy, review gates and AI Act evidence.
EU AI Act readiness
A practical sequence for AI Act readiness: inventory, classification, obligations mapping, documentation and human oversight evidence — plus the current state of the Digital Omnibus timeline changes.
DORA, NIS2 and the AI Act
A control-level comparison of DORA, NIS2, the EU AI Act, ISO/IEC 42001 and ISO 27001 — what you can evidence once and reuse across all of them.
From Threat Modeling to a General Principle
Thoughts on threat modeling