Impact of malicious use of Open-Source Intelligence on critical infrastructure business continuity (HORIZON-CL3-2027-01-INFRA-02)

Scope: The malicious use of Open-Source Intelligence (OSINT) is a known concern and technique used by offenders to retrieve personal, professional, and official or technical information about entities and their employees either to immediately plot illegal actions or use it to access more sensitive data with social engineering techniques like tailored data phishing. Although singular information may seem harmless, their critical mass coupled with reasoning and automated processing of large data blocks, could reveal critical vulnerabilities and possible attack vectors. This modus operandi is of special concern for critical infrastructure operators and authorities, as it can be used to aggregate sensitive information, identify potential protection gaps, discover the security measures, such as camera and sensor locations or target individuals with special access privileges in order to orchestrate more sophisticated and harmful attacks. OSINT can also be used to impede critical infrastructure operations indirectly, gathering information and affecting their supply chains. Proposals submitted under this topic should analyse the type, amount and accessibility of publicly available information and their usefulness in planning hostile operations against critical entities and their services. They should also parse the role of OSINT for identification and recruitment of insiders, identity theft, impersonation, or launching psychological operations such as foreign information manipulation and interference or disinformation. Moreover, the implications of AI data processing to misuse OSINT potential should be addressed. Any potential OSINT sources should be covered including, but not limited to social media, online fora, cloud resources, public records and databases, lawfully accessible deep web and dark web data, geospatial information, as well as paper archives in the public domain with blueprints, emergency response plans or similar. Proposals should especially consider scenarios including hybrid threats and lone wolves and develop tools and awareness campaigns to mitigate such threats. Proposals should build upon outcomes and tools of other relevant projects, adapting, optimising and integrating them when necessary to achieve the highest possible technology readiness level of the project results. The proposals funded under this topic are expected to engage with the Europol Innovation Lab during the lifetime of the project, including validating the outcomes, with the aim of facilitating future uptake of innovations for the law enforcement community. In this topic the integration of the gender dimension (sex and gender analysis) in research and innovation content should be addressed only if relevant in relation to the objectives of the research effort. Technology Readiness Level - Technology readiness level expected from completed projects Activities are expected to achieve TRL 8 by the end of the project – see General Annex B.

Jogosultsági és benyújtási feltételek

"> General conditions 1. Admissibility Conditions: Proposal page limit and layout described in Annex A and Annex E of the Horizon Europe Work Programme General Annexes. Proposal page limits and layout: described in Part B of the Application Form available in the Submission System. 2. Eligible Countries described in Annex B of the Work Programme General Annexes. A number of non-EU/non-Associated Countries that are not automatically eligible for funding have made specific provisions for making funding available for their participants in Horizon Europe projects. See the information in the Horizon Europe Programme Guide . 3. Other Eligible Conditions In line with the “ restriction on control in innovation actions in critical technology areas ” delineated in General Annex B of the General Annexes, entities established in an eligible country but which are directly or indirectly controlled by China or by a legal entity established in China are not eligible to participate in the action. The following additional eligibility conditions apply: This topic requires involvement as beneficiaries of at least 3 relevant practitioners from EU Member States or Associated Countries. Depending on the specific proposal submitted, these practitioners should represent one or several of the following portfolios: critical infrastructure operator, authority responsible for critical infrastructure resilience, law enforcement or private companies providing security for critical infrastructure. For these participants, applicants must fill in the table “Information about security practitioners” in the application form with all the requested information, following the template provided in the submission IT tool. If projects use satellite-based earth observation, positioning, navigation and/or related timing data and services, beneficiaries must make use of Copernicus and/or Galileo/EGNOS (other data and services may additionally be used). described in Annex B of the Work Programme General Annexes. 4. Financial and operational capacity and exclusion described in Annex C of the Work Programme General Annexes. 5a. Evaluation and award: Award criteria, scoring and thresholds are described in Annex D of the Work Programme General Annexes. 5b. Evaluation and award: Submission and evaluation processes are described in Annex F of the Work Programme General Annexes and the Online Manual . 5c. Evaluation and award: Indicative timeline for evaluation and grant agreement described in Annex F of the Work Programme General Annexes. 6. Legal and financial set-up of the grants The granting authority may, up to 4 years after the end of the action, object to a transfer of ownership or to the exclusive licensing of results, as set out in the specific provision of Annex 5. Eligible costs will take the form of a lump sum as defined in the Decision of 7 July 2021 authorising the use of lump sum contributions under the Horizon Europe Programme – the Framework Programme for Research and Innovation (2021-2027) – and in actions under the Research and Training Programme of the European Atomic Energy Community (2021-2025) [This [decision is available on the Funding and Tenders Portal, in the reference documents section for Horizon Europe, under ‘Simplified costs decisions’ or through this link: https://ec.europa.eu/info/funding-tenders/opportunities/docs/2021-2027/horizon/guidance/ls-decision_he_en.pdf ]]. described in Annex G of the Work Programme General Annexes. Specific conditions described in the [specific topic of the Work Programme] Some activities resulting from this topic may involve using classified background and/or producing of security sensitive results (EUCI and SEN). Please refer to the related provisions in section B Security — EU classified and sensitive information of the General Annexes. Application and evaluation forms and model grant agreement (MGA): Application form templates — the application form specific to this call is available in the Submission System Standard application form (HE RIA, IA) Standard application form (HE RIA IA Stage 1)   Standard application form (HE RIA IA Stage 1 BLIND) Standard application form (HE CSA)   Standard application form (HE CSA Stage 1)   Standard application form (HE CSA Stage 1 BLIND) Standard application form (HE RI)   Standard application form (HE PCP)   Standard application form (HE PPI)   Standard application form (HE COFUND)   Standard application form (HE FPA)   Standard application form (HE MSCA PF)   Standard application form (HE MSCA DN)   Standard application form (HE MSCA SE)   Standard application form (HE MSCA COFUND)   Standard application form (HE MSCA COFUND CE) Standard application form (HE ERC STG)   Standard application form (HE ERC COG)   Standard application form (HE ERC ADG)   Standard application form (HE ERC POC)   Standard application form (HE ERC SYG)   Standard application form (HE EIC PATHFINDER CHALLENGES)   Standard application form (HE EIC PATHFINDER OPEN)   Standard application form (HE EIC TRANSITION)   Standard application form (HE EIC STEP) Standard application form (HE EIC Accelerator stage 2 - full proposal) Standard application form (HE EIC Accelerator stage 1 - short proposal) Evaluation form templates — will be used with the necessary adaptations   Standard evaluation form (HE RIA, IA)   Standard evaluation form (HE CSA)   Standard evaluation form (HE RIA, IA and CSA Stage 1)   Standard evaluation form (HE RIA, IA and CSA Stage 1 BLIND) Standard evaluation form (HE PCP PPI)   Standard evaluation form (HE COFUND)   Standard evaluation form (HE FPA)   Standard evaluation form (HE MSCA)   Standard evaluation form (HE EIC PATHFINDER CHALLENGES)   Standard evaluation form (HE EIC PATHFINDER OPEN)   Standard evaluation form (HE EIC TRANSITION)   Standard evaluation form (HE EIC Accelerator stage 1 - short proposal)   Standard evaluation form (HE EIC Accelerator stage 2 - full proposal)   Guidance HE Programme Guide   Model Grant Agreements (MGA) HE MGA   HE Unit MGA   Lump Sum MGA   Operating Grants MGA   Framework Partnership Agreement FPA   Call-specific instructions   Detailed budget table (HE LS)   Information on financial support to third parties (HE)   Information on clinical studies (HE)   Guidance: "Lump sums - what do I need to know?" Additional documents: HE Main Work Programme 2025 – 1. General Introduction HE Main Work Programme 2023–2025 – 2. Marie Skłodowska-Curie Actions HE Main Work Programme 2025 – 3. Research Infrastructures HE Main Work Programme 2025 – 4. Health HE Main Work Programme 2025 – 5. Culture, creativity and inclusive society HE Main Work Programme 2025 – 6. Civil Security for Society HE Main Work Programme 2025 – 7. Digital, Industry and Space HE Main Work Programme 2025 – 8. Climate, Energy and Mobility HE Main Work Programme 2025 – 9. Food, Bioeconomy, Natural Resources, Agriculture and Environment HE Main Work Programme 2025 – 10. European Innovation Ecosystems (EIE) HE Main Work Programme 2025 – 11. Widening participation and strengthening the European Research Area HE Main Work Programme 2025 – 12. Missions HE Main Work Programme 2025 – 13. New European Bauhaus Facility (NEB) HE Main Work Programme 2025 – 14. General Annexes HE Main Work Programme 2023–2025 – 13. General Annexes EIC Work Programme 2025 ERC Work Programme 2026 HE Programme Guide HE Framework Programme 2021/695 HE Specific Programme Decision 2021/764 EU Financial Regulation 2024/2509 Decision authorising the use of lump sum contributions under the Horizon Europe Programme Rules for Legal Entity Validation, LEAR Appointment and Financial Capacity Assessment   EU Grants AGA — Annotated Model Grant Agreement   Funding & Tenders Portal Online Manual   Funding & Tenders Portal Terms and Conditions   Funding & Tenders Portal Privacy Statement

Programkörnyezet

Following the Commission political guidelines 2024-2029 this Destination will support the implementation of the directives on the Resilience of Critical Entities (CER) [1] and on Network and Information Security (NIS2) [2] . Actions will focus on upgrading physical and digital security and resilience of critical entities and their supply chains, including the European strategic autonomy aspect. Research and innovation investments will continue addressing emerging and existing challenges for critical entities, including hybrid threats. Cross-destination and cross-cluster cooperation will be fostered to better understand the risks, including technological, organizational and underpinning societal issues, and to deliver innovative, scalable, interoperable, long-lasting and effective tools to anticipate, prevent, detect, monitor, manage and investigate them. These actions will contribute to realising the objectives of the ProtectEU – a European Internal Security Strategy [3] , Counter-Terrorism Agenda [4] and the European Preparedness Union Strategy [5] . Furthermore, this Destination will continue to develop measures to improve the resilience, safety, and security of urban and peri-urban areas against deliberate or accidental human actions, preserving citizens’ right to feel safe and have access to essential services, while meeting climate resilience objectives of the EU Adaptation Strategy [6] . Projects funded under this Destination will promote technological and social innovations enhancing the sovereignty, competitiveness and strategic autonomy of European critical entities, authorities and operators including their respective supply chains. Moreover, submitted proposals should consider current policy developments and meet expectations of the following EU legislation and policy documents, whichever would be relevant to the challenges addressed by the proposal: EU Cybersecurity Strategy [7] ; EU Maritime Security Strategy [8] ; EU Aviation Security Strategy [9] ; Europe-wide Climate Risk assessment (EUCRA) and Commission Communication on Managing Climate Risks; European Economic Security Strategy [10] ; Joint Framework on Countering Hybrid Threats [11] and the Joint Communication on Increasing Resilience and Bolstering Capabilities to Address Hybrid Threats [12] ; EU C-UAS Strategy [13] ; EU Space Strategy for Security and Defence [14] ; EU Disaster Resilience Goals [15] ; European Preparedness Union Strategy [16] ; EU Action Plan on Cable Security [17] ; European Water Resilience Strategy [18] . To this end, these proposals should contribute to the achievement of one or more of the following generic impacts: physical and/or digital aspects of critical entities safety and security are considerably improved, while dependencies on non-European technologies, services, and resources are significantly reduced; new and upgraded systems support the interoperability enabling rapid response and recovery from complex security incidents without significant human involvement, and situational awareness and information sharing functionalities are available, especially where emergency responders’ intervention is required; security-by-design, preparedness-by-design and where relevant circularity-by-design are default features of both newly created and upgraded infrastructure; urban, peri urban areas are more resilient through technological, organisational, and social innovations, and deepened public involvement; European citizens awareness and reaction capabilities in case of critical infrastructure disruption is considerably raised. Research projects should consider, build on (if appropriate) and not duplicate previous research, including but not limited to research by other Framework Programmes projects. It will be important also to take into account how research results can be advanced to deployable solutions after the projects lifetime, utilising validation and capacity-building programmes like the Internal Security Fund, Digital Europe Programme and other. Where possible and meaningful, synergy-building and clustering initiatives with successful actions in the same, or other relevant areas. should be considered, including the organisation of international events in coordination with the Community for European Research and Innovation for Security (CERIS) [19] . Legal entities established in China are not eligible to participate in both Research and Innovation Actions (RIAs) and Innovation Actions (IAs) falling under this destination. For additional information please see “Restrictions on the participation of legal entities established in China” found in General Annex B of the General Annexes. [1] Directive (EU) 2022/2557. [2] Directive (EU) 2022/2555. [3] COM/2025/148 final [4] COM (2020) 795 final. [5] JOIN(2025) 130 final [6] COM (2021) 82 final. [7] JOIN (2020) 18 final. [8] Council of the EU 11205/14 JOIN(2023) 8 final. [9] REGULATION (EC) No 300/2008 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 11 March 2008 on common rules in the field of civil aviation security and repealing Regulation (EC) No 2320/2002. [10] JOIN(2023) 20 final. [11] JOIN (2016) 18 final. [12] JOIN (2018) 16 final. [13] COM (2023) 659 final. [14] JOIN (2023) 9 final. [15] (2023/C 56/01); COM (2023) 61 final. [16] JOIN(2025), 130 final. [17] JOIN(2025) 9 final. [18] https://circabc.europa.eu/ui/group/1c566741-ee2f-41e7-a915-7bd88bae7c03/library/b560bc22-6a61-4b63-b62b-a7fe890ea177/details [19] https://home-affairs.ec.europa.eu/networks/ceris-community-european-research-and-innovation-security_en

Hivatkozott dokumentumok

Annex A Horizon Europe Programme Guide Online Manual [This [decision Standard application form (HE RIA, IA) Standard application form (HE RIA IA Stage 1) Standard application form (HE RIA IA Stage 1 BLIND) Standard application form (HE CSA) Standard application form (HE CSA Stage 1) Standard application form (HE CSA Stage 1 BLIND) Standard application form (HE RI) Standard application form (HE PCP) Standard application form (HE PPI) Standard application form (HE COFUND) Standard application form (HE FPA) Standard application form (HE MSCA PF) Standard application form (HE MSCA DN) Standard application form (HE MSCA SE) Standard application form (HE MSCA COFUND) Standard application form (HE MSCA COFUND CE) Standard application form (HE ERC STG) Standard application form (HE ERC COG) Standard application form (HE ERC POC) Standard application form (HE ERC SYG) Standard application form (HE EIC PATHFINDER CHALLENGES) Standard application form (HE EIC PATHFINDER OPEN) Standard application form (HE EIC TRANSITION) Standard application form (HE EIC STEP) Standard application form (HE EIC Accelerator stage 2 - full proposal) Standard application form (HE EIC Accelerator stage 1 - short proposal) Standard evaluation form (HE RIA, IA) Standard evaluation form (HE CSA) Standard evaluation form (HE RIA, IA and CSA Stage 1) Standard evaluation form (HE RIA, IA and CSA Stage 1 BLIND) Standard evaluation form (HE PCP PPI) Standard evaluation form (HE COFUND) Standard evaluation form (HE FPA) Standard evaluation form (HE MSCA) Standard evaluation form (HE EIC PATHFINDER CHALLENGES) Standard evaluation form (HE EIC PATHFINDER OPEN) Standard evaluation form (HE EIC TRANSITION) Standard evaluation form (HE EIC Accelerator stage 1 - short proposal) Standard evaluation form (HE EIC Accelerator stage 2 - full proposal) HE MGA HE Unit MGA Lump Sum MGA Operating Grants MGA Framework Partnership Agreement FPA Detailed budget table (HE LS) Information on financial support to third parties (HE) Information on clinical studies (HE) Guidance: "Lump sums - what do I need to know?" HE Main Work Programme 2025 – 1. General Introduction HE Main Work Programme 2023–2025 – 2. Marie Skłodowska-Curie Actions HE Main Work Programme 2025 – 3. Research Infrastructures HE Main Work Programme 2025 – 4. Health HE Main Work Programme 2025 – 5. Culture, creativity and inclusive society HE Main Work Programme 2025 – 6. Civil Security for Society HE Main Work Programme 2025 – 7. Digital, Industry and Space HE Main Work Programme 2025 – 8. Climate, Energy and Mobility HE Main Work Programme 2025 – 9. Food, Bioeconomy, Natural Resources, Agriculture and Environment HE Main Work Programme 2025 – 10. European Innovation Ecosystems (EIE) HE Main Work Programme 2025 – 11. Widening participation and strengthening the European Research Area HE Main Work Programme 2025 – 12. Missions HE Main Work Programme 2025 – 13. New European Bauhaus Facility (NEB) HE Main Work Programme 2023–2025 – 13. General Annexes ERC Work Programme 2026 Rules for Legal Entity Validation, LEAR Appointment and Financial Capacity Assessment EU Grants AGA — Annotated Model Grant Agreement Funding & Tenders Portal Terms and Conditions