Objectives

·       To translate for researchers the essential regulatory framework on data protection (GDPR, DPIA, health data), digital security and resilience (NIS2 Directive, DORA) and dual-use export control (EU Regulation 2021/821)

·       To explore the relationship between Open Science, FAIR principles and data security, with a focus on research infrastructures (EOSC) and dual-use challenges

·       To embed security throughout the life cycle of Horizon Europe projects, from the proposal (Data Management Plan, Ethics and Security section) to EU audits and checks

·       To present cybersecurity funding opportunities in Horizon Europe and the Digital Europe Programme (DEP), including a hands-on proposal-writing workshop

Programme

Day 1 – November 10, 2026, 10:30 AM–12:30 PM (online)
The regulatory framework explained for researchers and project cycle management in HE

• Essential legislation: data protection in research, GDPR, when a DPIA is required, health data and health projects, the researcher’s role as “data handler” (Renato Fa, APRE)
• Digital security and resilience: implications of the NIS2 Directive for research organisations; principles of the Digital Operational Resilience Act (DORA), relevant to fintech/health tech projects with financial partners (ACN – National Cybersecurity Agency)
• Dual use and cybersecurity in international cooperation: Regulation (EU) 2021/821, sensitive technologies (AI, cryptography, drones, biotech), “catch-all” clauses, typical cases in universities, European Commission White Paper on Export Controls (Flavia La Colla, APRE)

Day 2 – November 13, 2026, 10:30 AM–12:30 PM (online)
Open Science and data security: FAIR principles and dual-use challenges

• Open science & FAIR data in European research; cybersecurity in research infrastructures: focus on EOSC, services and evolution (Diego Coglitore, APRE)
• Dual use in research projects: current programmes and future perspectives (Flavia La Colla, APRE)

Day 3 – November 17, 2026, 9:30 AM–4:30 PM (in person)
Security throughout the project life cycle

• Data Management Plan & Cybersecurity, from proposal to audit: overview of cybersecurity calls and opportunities in Horizon Europe and DEP; the Cybersecurity Competence Community; how to identify security risks at proposal stage; Ethics and Security section; early involvement of DPO and IT (Giorgio Vingiani, Flavia La Colla, Bruno Mourenza – APRE)
• Data sharing between partners; cloud and repositories (Giorgio Vingiani, APRE)
• EU audits and checks: required documentation, data traceability, incident reporting (Daniele Gizzi, APRE)
• 12:15–1:00 PM – Round table: discussion with companies, moderated by APRE, ACN and AREA Science Park
• 1:00–2:00 PM – Lunch break
• 2:00–4:30 PM – Proposal-writing workshop: cybersecurity in Horizon Europe and DEP (Flavia La Colla, APRE; Ludovica Coletta, ACN)

Speaker

Renato Fa, Diego Coglitore, Giorgio Vingiani, Bruno Mourenza, Daniele Gizzi, Flavia La Colla (APRE)

Ludovica Coletta and speakers from ACN – National Cybersecurity Agency

Location

November 10 and 13: online, [link to be announced]

November 17: in person in person at Area Science Park (TS) - Congress Center - building C1

Registration

The course will be held in Italian.

Registration is open until 27/10/2026, at 18:00, by filling out the form at the link: https://forms.gle/4kfZeKhyJN4zNwmX9

More information

Course organised by APRE – Agency for the Promotion of European Research, as part of the APRE 2026 training path for FVG members.

The detailed programme is available here