The Pre-Award Funding Program Guide helps Canadian organizations understand how to apply for cybersecurity funding under the Cyber Security Innovation Network (CSIN) program, managed by the National Cybersecurity Consortium (NCC).
The NCC invests in Canadian-led projects that strengthen the country’s cybersecurity ecosystem. Over the course of four years, approximately $80 million in funding will be allocated to projects that support research, commercialization, and training in cybersecurity.
Funding is open to Canadian organizations that are NCC members in good standing. Applicants must be:
| Eligible Applicants | Requirements |
|---|---|
| Academia | Post-secondary institutions, colleges, universities, or research centres operating primarily in Canada |
| Industry | Canadian private-sector companies, including SMEs and corporations with operations in Canada |
| Not-for-Profits | Canadian registered charities, associations, or other non-profit organizations with cybersecurity-related initiatives |
NCC proposals fall into three funding streams, based on project scope and Technology Readiness Levels (TRLs):
| Stream | TRL Range | Focus | Example Activities |
|---|---|---|---|
| Research & Development | TRL 1–6 | Advance the state of the art in cybersecurity | Fundamental research, prototyping, feasibility studies, pilot tests |
| Commercialization | TRL 7–9 | Bring market-ready cybersecurity products and services to deployment | Product development, scaling, integration into critical infrastructure |
| Training, Upskilling & Reskilling | N/A | Build cybersecurity workforce capacity across Canada | Curriculum development, professional training programs, work-integrated learning |
The 2025 Call for Proposals supports projects across three funding categories:
| Category | Description | Suitable For |
|---|---|---|
| Accelerated Projects | Larger budget, high-impact projects with targeted goals | Mature initiatives that need significant resources for rapid results |
| New 2025 Projects | Open call for new ideas across all three funding streams | Fresh projects from academia, industry, or non-profits |
| Top-Ups to 2023/2024 Projects | Additional funding to expand or strengthen already approved projects | Existing funded projects that have identified new opportunities or gaps |
The NCC provides cost-sharing support depending on the type of applicant organization.
| Applicant Type | Maximum NCC Contribution | Matching Requirement |
|---|---|---|
| Academia & Not-for-Profits | Up to 100% of the eligible project costs | No match required (though in-kind or cash contributions may strengthen proposals) |
| Private-Sector Companies | Up to 50% of the eligible project costs | Matching contributions (cash or in-kind) from industry, non-profits, or provincial/municipal governments |
Funding can be used to cover activities essential to successful project execution.
| Cost Category | Examples of Eligible Expenses | Limits / Notes |
|---|---|---|
| Direct Labour | Technical staff, research assistants, project managers | Must be directly tied to project delivery |
| Subcontractors & Consultants | Specialized expertise, third-party services | Allowed if clearly justified |
| Equipment | Purchase or rental of equipment necessary for the project | Max 20% of NCC funds |
| Training & Development | Curriculum design, training sessions, work-integrated learning | Focused on cybersecurity skills |
| Business Development & Commercialization | Market analysis, product scaling, IP management | Must support Canadian market growth |
| Travel & Outreach | Conferences, collaboration meetings, knowledge-sharing events | Within approved limits |
| Indirect Costs (Overhead) | Institutional overhead | Within NCC’s set thresholds |
Use the Eligibility Checklist before submitting. Applying for NCC funding is a multi-step process designed to ensure fairness, transparency, and alignment with program goals.
| Stage | Description | What’s Required |
|---|---|---|
| 1. Letter of Intent (LOI) | Initial submission to confirm eligibility, project scope, and budget outline | LOI template completed and submitted by the deadline |
| 2. Full Proposal | Detailed project plan evaluated on feasibility, merit, and overall impact | Complete proposal template, budget forms, and partner details |
| 3. Administrative Review | Final compliance and documentation check | Confirmation of eligibility, NCC membership, and partner compliance |
Proposals are assessed against set evaluation criteria (outlined later in this guide), focusing on:
Important Notes: All applications must use NCC-provided templates (LOI, proposal, budget). Partner organizations listed for funding must also be NCC members. Incomplete applications will not move forward.
All applications undergo a rigorous, transparent review process to ensure fairness and impact.
| Step | Who’s Involved | Role |
|---|---|---|
| External Reviewers | Canadian subject-matter experts in cybersecurity and privacy | Score proposals based on innovation, impact, and feasibility |
| Evaluation Committee | Chaired by NCC’s Scientific Director | Reviews external scores, ensures consistency, and finalizes funding recommendations |
| NCC Decision | NCC governance team | Issues formal funding decisions and notices of award |
Proposals are assessed on several weighted factors:
| Criteria | What Reviewers Look For |
|---|---|
| Innovation | Does the project advance the state of cybersecurity knowledge or practice? |
| Feasibility | Is the project realistic, well-resourced, and achievable within proposed timelines? |
| Impact | Will the project make a measurable difference to Canada’s cybersecurity ecosystem? |
| Commercialization Potential | Does the project have market applications or industry adoption opportunities? |
| Workforce Development | Does it build Canada’s cyber talent pool through training or reskilling? |
| Equity, Diversity & Inclusion (EDI) | Are EDI principles integrated into project design and delivery? |
The NCC is committed to ensuring that all funded projects protect Canada’s security while encouraging innovation and collaboration.
All proposals must comply with Canada’s National Security Guidelines for Research Partnerships. These guidelines:
Projects that don’t meet security requirements will not be funded.
NCC takes a pro-innovation stance on IP:
Funded organizations must comply with federal and provincial laws, NCC reporting rules, and security best practices.
| Requirement | What It Means |
|---|---|
| Annual Reports | Updates on project progress, financial status, outcomes, and integration of Equity, Diversity, and Inclusion (EDI) considerations. |
| Final Report | A comprehensive summary of project results, overall impact, and key lessons learned. |
| Financial Audits | Documentation demonstrating proper use of NCC funds and any required matching contributions. |
| Security Checks | Verification of compliance with cybersecurity and data protection requirements. |
The NCC Pre-Award Program follows a clear, step-by-step application process to ensure applicants have enough time to prepare strong proposals.
| Stage | Action | Timing |
|---|---|---|
| Call for Proposals Opens | NCC publishes guidelines, templates, and resources for applicants. | Annually |
| Letter of Intent (LOI) | Applicants submit basic project details for eligibility screening. | 4–6 weeks after opening |
| Full Proposal Submission | Eligible applicants submit full proposals, including budget and supporting documents. | ~8 weeks after LOI |
| External Review | Independent experts review and score proposals. | 4–6 weeks |
| Evaluation Committee | Final recommendations made based on external reviews. | 2 weeks |
| Notice of Award | Applicants receive decision letters and funding agreements. | Varies — typically within 3 months of full proposal |
Successful projects will move into the Award Management phase, where organizations will: