In an era of growing digital threats and new regulatory obligations such as the NIS2 directive, Polish water and wastewater utilities face a huge challenge. Securing an extensive and often outdated operational technology (OT) infrastructure is a complicated and, above all, costly task. Many boards and managers are asking themselves: where to get the funds for this when budgets are tight and operational needs are not diminishing?
The answer to this question is the “Cyber-secure Water Supply” grant program, run by the Center for Digital Poland Projects. This is a unique and historic opportunity to obtain a non-refundable grant that can cover the entirety - that is, 100% of eligible costs - of an investment in cyber security. The maximum amount of the grant that one company can apply for is as much as PLN 1,300,000.
This is a fundamental change in the rules of the game. Investment in cyber security ceases to be a cost to be borne, and becomes an opportunity that can be fully financed by external funds. The purpose of this article is to introduce you to the key principles of this program and show you how to take advantage of this unique opportunity.
Shortcuts
What exactly is the “Cyber Safe Water Supply” program?
The “Cyber Secure Water Supply” program is an initiative funded by European funds under the FERC (European Funds for Digital Development) program, which aims to strengthen resilience against cyber attacks in the water and wastewater sector. This is in response to the growing number of threats targeting critical infrastructure, as well as new legal requirements imposed on critical service operators by the NIS2 directive. The program is a grant, which means that the funds awarded are non-refundable.
📚 Read the complete guide: SOC: Security Operations Center - czym jest, jak działa, jak wybrać
Who can apply for funding?
The target group of the program is water and sewage enterprises from all over Poland. Neither the legal form nor the size of the enterprise is important. Both large, municipal companies and smaller, communal utilities can apply for funds. This is a program designed specifically and exclusively for this sector, making it ideally suited to its unique needs and challenges.
What is the maximum grant amount that can be obtained?
The maximum amount of funding that one company can apply for is PLN 1,300,000. Most importantly, the grant can cover up to 100% of the value of the project’ s eligible costs. This means that with a well-prepared application, the entire investment in cyber security, from audit to implementation and training, can be carried out without involving the company’s own funds.
What types of investments and activities can be financed?
The catalog of eligible costs is very broad and covers three main areas. First, the organizational area, which is the financing of conducting a comprehensive OT cyber security audit, developing the necessary documentation (policies, procedures) and implementing an Information Security Management System. Second, the technological area, which includes the purchase and implementation of specialized systems and software to protect OT infrastructure. Thirdly, the competence area, which is the financing of advanced training for employees, both from IT and OT teams.
Why is conducting an audit a crucial first step?
The foundation of any grant proposal and any mature security strategy is diagnosis. You can’t effectively protect something you don’t understand. This is why conducting a comprehensive cyber security audit of your OT infrastructure is not only one of the eligible costs, but a de facto prerequisite for wise planning of further investments. The results of the audit will provide you with objective knowledge of security gaps and allow you to create a precise roadmap that will become the basis of the grant application.
What defense technologies for OT networks can be funded by the grant?
The program allows you to finance the purchase and implementation of the entire spectrum of modern technologies to protect industrial environments. Funds can be obtained for systems for asset inventory and passive monitoring of OT networks, which will provide full visibility of the infrastructure. The grant will also cover the cost of implementing network segmentation with industrial firewalls, as well as the purchase of anomaly detection and incident response systems (IDS/IPS).
Does the program also include training for employees?
Yes, and this is one of its most important elements. The “Cyber Secure Waterworks” program fully funds the upgrading of personnel skills. Both security awareness training for all employees and highly specialized, certified technical training for IT and OT engineers can be funded. This is a unique opportunity to build an internal, competent team capable of managing new technologies and processes.
What is the relationship between the grant and the NIS2 directive?
The NIS2 Directive imposes a number of stringent cyber-security obligations on water and wastewater utilities as key service operators. The implementation of these requirements is mandatory and involves significant investment. The “Cyber Secure Water Supply” grant is a de facto tool that the state is giving to the sector to enable it to finance these mandatory changes. It can be said to be the perfect answer to the “unfunded mandate” problem.
Why is the timing of the decision crucial?
Grant programs, especially those with such high popularity, have limited budgets and timeframes. The interest in the “Cyber Secure Water Supply” program is huge, and funds can be distributed in a relatively short period of time. Waiting and postponing decisions is a risk of losing irrevocably the chance to get funding. Companies that take a proactive approach and are the first to submit well-prepared applications have the best chance of success.
What should be the first, simplest step?
The first, most logical step is to take steps to prepare a sound grant proposal. And the basis of such an application, as already mentioned, is to conduct a zero audit. It is the audit that will provide you with all the necessary data to accurately estimate your needs and plan investments that will have the best chance of receiving funding.
Where to start so as not to miss this opportunity?
One should not wait. Your first step should be to contact an experienced advisor who understands both the specifics of OT cyber security and the formal requirements of grant programs. Such a partner will help you assess your potential, plan your activities and smoothly move through the entire process, from audit to submission of a complete application.
”Cyber Safe Water Supply” grant in a nutshell
CategoryKey information**For whom?**Polish water and sewerage companies.Maximum amountUp to PLN 1,300,000.Funding levelUp to 100% of eligible costs.**What can be financed?**Audits, documentation, OT security systems, training.First stepConduct an OT cyber security audit to prepare a proposal.
How can nFlo help you successfully obtain and use a grant?
At nFlo, we have a unique combination of competencies in the Polish market. On the one hand, we are one of the leading experts in the field of operational technology (OT) cyber security, on the other hand, we have extensive experience in preparing audits and strategies that form the basis for successful applications for EU funds. We understand both the world of PLCs and the world of grant applications. Specifically for the “Cyber Secure Water Supply” program, we have prepared ** a “Starter Package: Audit and Grant Application”**. This is a standardized service that, for a flat, fixed fee, provides you with everything you need to submit a complete and professional application for a PLN 1.3 million grant. We operate on a simple principle: we help you invest a small amount to open the way to seven-figure funding.
Related Terms
Learn key terms related to this article in our cybersecurity glossary:
- Network Security — Network security is a set of practices, technologies, and strategies aimed at…
- Security Operations Center (SOC) — Security Operations Center (SOC) is a central location where a team of security…
- SOC as a Service — SOC as a Service (Security Operations Center as a Service), also known as…
- Cybersecurity — Cybersecurity is a collection of techniques, processes, and practices used to…
- Cybersecurity Incident Management — Cybersecurity incident management is the process of identifying, analyzing,…
Learn More
Explore related articles in our knowledge base:
- What is the “Cyber Secure Local Government” program and why is it a historic opportunity for your municipality?
- Cyber security in the water and wastewater sector
- How to Wisely Choose a Partner for the Cybersecure Local Government Program?
- You have won 1.3 million zlotys from the grant. What is your plan for building a digitally resilient water supply?
- 12 Tips to Improve Cybersecurity in Your Organization
Explore Our Services
Need cybersecurity support? Check out:
- Security Audits - comprehensive security assessment
- Penetration Testing - identify vulnerabilities in your infrastructure
- SOC as a Service - 24/7 security monitoring
