EU Funding
Unaprjeđenje kibernetičke sigurnosti – Studio Sonda d.o.o.
(Improvement of Cybersecurity – Studio Sonda d.o.o.)
Call for Proposals & Funding Programme
The project is co-financed under the National Coordination Centre for Cybersecurity (NCC) through the Digital Europe Programme (DIGITAL) within the Call for Proposals:
„Improvement of Cybersecurity of Micro, Small, and Medium Enterprises“
Call Reference Number: NKS-DEP-0001
Project Reference Number: 215
General Project Details & Financial Overview
| Parameter | Details |
| Beneficiary | Studio Sonda d.o.o. |
| Total Project Value | €16,360.30 |
| Total Grant Allocated (50%) | €8,180.15 |
| Own Financing (50%) | €8,180.15 |
| Implementation Period | March 1, 2026 – March 1, 2027 (12 months) |
Project Objectives
The main objective of the project is to enhance the overall level of cybersecurity resilience and improve internal processes within Studio Sonda d.o.o. by strengthening employee capacities and aligning business operations with the highest international cybersecurity standards.
Through the implementation of planned project activities, Studio Sonda will transition from partial security management to a formal, sustainable, and certified Information Security Management System (ISMS). This will directly protect the sensitive intellectual property of clients, ensure business continuity, and increase the company’s competitiveness in the European Union market.
Key Project Activities & Measurable Results
- ISMS Implementation and ISO/IEC 27001:2022 Certification:
- Activities: Conducting GAP analysis, risk assessment, development of complete ISMS documentation, and formal auditing by an accredited certification body.
- Target Result: Implemented ISMS and obtained internationally recognized ISO/IEC 27001:2022 certificate.
- Employee Education and Capacity Building:
- Activities: Specialized training for the management and ISMS team, along with general cybersecurity awareness training for all employees.
- Target Result: 100% of employees trained in cyber hygiene, phishing recognition, and safe usage of digital resources.
- Security Testing and Process Validation:
- Activities: Social engineering testing (phishing simulations) and “tabletop” incident response exercises.
- Target Result: Validated Incident Response Plan (IRP) and detailed reporting with recommendations for continuous improvement.
End Users / Target Groups
- Employees and Management of Studio Sonda d.o.o.: Equipped with key competencies, practical knowledge, and formal procedures for safe daily operations.
- Clients and Business Partners: Assured of high-level data protection, safeguarded intellectual property, and a compliant supply chain in accordance with EU regulations (such as NIS2/ZKS requirements).
Sustainability & Post-Project Maintenance
Following the 12-month implementation period, the project results will be sustained through regular annual internal reviews, external surveillance audits for ISO 27001 maintenance, mandatory onboarding security trainings for new employees, and periodic security testing funded through the company’s regular operational budget.
