NC3 Information Session - ENISA Call for Tenders - Cyber Reserve - LOT 7 Luxembourg
On 21 May 2026, ENISA launched a Call for Tenders to support the provision of cybersecurity services EU Members State. Lot 7 focuses on Luxembourg.
Join the Luxembourg National Cybersecurity Competence Center (NC3) this Friday 5 June at 10:00 (CEST) for an information session:
**· **presentation of the Tender LOT 7 by ENISA
**· **presentation of the national support NC3 can provide to interested entities
Register here
At a glance
Purpos***e of the Tender Lot 7[1]: ******Build a trusted pool of cybersecurity providers ******to ******support ******Luxembourg ***during significant cyber incidents.
[1]****Lot Reference: ENISA/2026/OP/0009 – LOT 7
This lot is part of ENISA’s implementation of the EU Cybersecurity Reserve, a strategic EU capability established under the Cyber Solidarity Act to provide rapid-response cybersecurity assistance to Member States during significant cyber incidents.
Up to 3 economic operators will be selected under a cascade framework agreement to support ENISA in delivering cybersecurity services in Luxembourg. Each lot is capped at EUR 2 million over a period of 48 months.
Applications must be submitted by 23 June 2026 10:00 (EEST)****
Why Luxembourg Matters
Luxembourg is a cyber-critical Member State due to its concentration of EU institutions and agencies, financial services and banking infrastructure, government digital services, data centres and cloud operators, satellite and space-sector assets, as well as critical telecommunications infrastructure.
Consequently, ENISA is likely to expect contractors capable of operating in highly regulated and sensitive environments, with strong requirements for confidentiality, trustworthiness, and rapid deployment. This aligns with the Reserve’s focus on supporting critical sectors covered by NIS2.
Expected Service Areas
Based on the Cybersecurity Reserve model and previous ENISA cybersecurity-support contracts, contractors should be prepared to provide services such as:
- Incident response
- Digital forensics
- Threat hunting
- Malware analysis
- Recovery support
When reserved incident-response capacity is not required, resources may be converted into preventive and preparedness activities such as:
- Security assessments
- Incident-response readiness
- Cyber resilience enhancement
- Security exercises and support activities
Accessibility factors
- Proven DFIR capability
- Local response capacity
- Multilingual teams (French and English)
- Minimal team composition: 8 senior experts + 5 intermediary experts + 1 project manager
- OCA required