ISF-2026-TF2-AG-CYBER-DIGITAL – Digital Investigations

Identifikátor témy: ISF-2026-TF2-AG-CYBER-DIGITAL Výzva: ISF-2026-TF2-AG-CYBER – Digital Investigations and Standardisation Program: Internal Security Fund (ISF) Časť programu: Cybercrime – Prevention, Cybercrime – Facilitating investigations, Forensics Typ akcie: ISF-PJG ISF Project Grants Typ zmluvy (MGA): ISF Action Grant Budget-Based Stav: Open Otvorenie: 15. 9. 2026 Termín(y) podania: 15. 12. 2026 Rozpočet: 6 200 000 € (spoločný s témami ISF-2026-TF2-AG-CYBER-STANDARD)

Expected Impact:

Projects selected under this call for proposals should aim to achieve one or more of the following outcomes in the field of countering cybercrime and supporting digital investigations:

- increasing operational capacity and capabilities of law enforcement and/or judicial authorities, - increasing the availability of technical tools for law enforcement, - increasing awareness on best practices and available solutions as well as building synergies amongst relevant stakeholders will be an asset

Objective:

(1) developing capacity and expertise of law enforcement and judicial authorities;

(2) contributing to the implementation of EU law and strategic documents;

(3) fostering cross-border cooperation between law enforcement/judicial authorities and private entities.

Scope:

Proposals should focus on:

- Enhancing the operational capacity of law enforcement and/or judicial authorities to investigate cyber-attacks and cyber enabled crime, for instance through specific training, investigative techniques and tools (including for) with a focus on top threat priorities (excluding online child sexual abuse, which is covered by specific calls for proposals) as presented in Europol Internet Organised Crime Threat Assessment 2025. Areas that have been identified by EU Member States as needing particular attention include: digital forensics (mobile forensics, computer forensics, network forensics, IoT forensics including automotive forensics, cloud forensics), visual data analysis, malware analysis and reverse engineering capabilities, cryptocurrencies tracing, identifying and disrupting criminal infrastructures, analysis and seizure, efficient storage, processing, analysis and transfer of big data and large datasets, understanding and exploiting “threat intelligence” and metadata, OSINT, crime involving the use of AI by offenders. - Enhancing the operational capabilities of law enforcement and/or judicial authorities to address the challenges posed by the use of encryption by criminals and its impact on criminal investigations, for instance through training and/or by supporting the establishment, extension and development of points of expertise and their networking at EU level or supporting the development of a toolbox of alternative investigation techniques to obtain needed information encrypted by criminals (with the exclusion of measures that could weaken encryption in general or could have an impact on a larger or indiscriminate number of people) - Enhancing the capabilities of law enforcement and/or judicial authorities through the use and/or adaptation of Large Language Models and AI-based solutions to improve analysis, translation, transcription of data as well as detection of AI materials generated for criminal pruposes. - Enhancing the operational capacity of law enforcement and/or judicial authorities to cooperate across borders, for instance supporting the gathering and provision of digital evidence, supporting the secondment of officials, improving the efficiency of 24/7 (permanent) law enforcement contact points for cybercrime, establishment of dedicated platforms - Enhancing the cooperation between private entities and/or authorities in the area of cybersecurity and law enforcement and/or judicial authorities, taking remedial action, including by setting of appropriate information exchange systems (or interfaces to make better use of existing systems) - Increasing and enhancing reporting of cybercrime to law enforcement authorities

Conditions

1. Admissibility conditions: Proposal page limit and layout

described in section 5 of the call document.

Proposal page limits and layout: described in Part B of the Application Form available in the Submission System.

2. Eligible countries

described in section 6 of the call document.

3. Other eligibility conditions

described in section 6 of the call document.

4. Financial and operational capacity and exclusion

described in section 7 of the call document.

5a. Evaluation and award: Submission and evaluation processes

described section 8 of the call document and the Online Manual.

5b. Evaluation and award: Award criteria, scoring and thresholds

described in section 9 of the call document.

5c. Evaluation and award: Indicative timeline for evaluation and grant agreement

described in section 4 of the call document.

6. Legal and financial set-up of the grants

described in section 10 of the call document.

Call document and annexes:

Call document.

Application form templates

Standard application form (AMIF, ISF and BMVI) — the application form specific to this call is available in the Submission System

Model Grant Agreements (MGA)

AMIF, ISF and BMVI MGA

Additional documents:

ISF Work Programme

ISF Regulation 2021/1149

EU Financial Regulation 2024/2509

Rules for Legal Entity Validation, LEAR Appointment and Financial Capacity Assessment

EU Grants AGA — Annotated Model Grant Agreement

Funding & Tenders Portal Online Manual

Funding & Tenders Portal Terms and Conditions

Funding & Tenders Portal Privacy Statement

Aktuality k téme: - 2026-09-17: The submission session is now available for: ISF-2026-TF2-AG-CYBER-STANDARD, ISF-2026-TF2-AG-CYBER-DIGITAL