Helping SMEs strengthen cybersecurity through secure-by-design methods, practical tools, and guidance
The Trusted Connected Products in Energy Transition (TCCPET) project helps Flemish SMEs strengthen the cybersecurity of their connected energy products. It provides practical tools, guidelines, and demonstrations to integrate security from the design stage throughout the product lifecycle. The project also supports companies in preparing for the European Cyber Resilience Act (CRA).
Target group
TCCPET is aimed at companies that develop, integrate, or operate connected products and digital solutions for the energy transition, including:
- Manufacturers and developers of connected energy products, such as sensors, inverters, and energy management systems
- Companies involved in battery storage, solar energy, offshore wind, and electric vehicle charging
- System integrators and specialists configuring connected energy installations
- Operators of digital platforms for energy and flexibility management
- Data and software service providers
- Cybersecurity companies specialising in risk assessment, testing, and regulatory compliance
- Suppliers of energy infrastructure and renewable energy technologies
Context
As energy systems become more connected, cybersecurity becomes increasingly important. Connected devices, software platforms, and industrial control systems exchange information across complex networks. A vulnerability in one component can affect other parts of the system.
Manufacturers and integrators must address risks throughout the product lifecycle, from initial design to software updates and maintenance. They also need to consider the security of third-party components and open-source software.
The European Cyber Resilience Act introduces cybersecurity requirements for products with digital elements. Companies therefore need practical methods to assess risks, document security measures, and manage vulnerabilities.
For many SMEs, putting these requirements into practice in their day-to-day engineering activities remains challenging. They need accessible tools and guidance adapted to the technologies used in the energy sector.
Objectives & results
TCCPET aims to:
- Help companies integrate secure-by-design principles into connected energy product development
- Develop practical methods for cybersecurity risk assessment, threat modelling, and secure component integration
- Improve vulnerability management, software updates, and security throughout the product lifecycle
- Evaluate cybersecurity tools and architectures for different connected energy products
- Provide practical guidance to help SMEs prepare for the Cyber Resilience Act
Key expected results
- Cybersecurity toolkits for vulnerability detection, risk management, and CRA implementation
- Design guidelines and templates for secure product architectures, component integration, and configuration
- Practical demonstrators at EnergyVille to evaluate security solutions and illustrate potential cyberattacks
- Reports and assessment tools covering cybersecurity maturity, common challenges, and available technologies
- Case studies illustrating cybersecurity threats and mitigation approaches in connected energy systems
- Workshops, masterclasses, and online resources to help companies apply secure-by-design practices
The project focuses on solutions that companies can integrate into their existing development, integration, and maintenance activities.
Get involved in TCCPET
Developing or integrating connected energy products? Join TCCPET to share your cybersecurity challenges and explore practical secure-by-design solutions.
Funding
- Programme: COOCK+
- Funding agency: VLAIO
- Contract number: HBC.2025.1356
- Total budget: €991,106
- Funding rate: 100%, subject to meeting the project's performance indicators
- Industrial support: 20+ companies from the energy transition sector
- Monitoring Committee: Agoria, Flux50
- Partners: Sirris, KU Leuven (COSIC, DistriNet, ELECTA), Flux50
Read more about this subject
- Cybersecurity 4.0 project : Explore practical cybersecurity strategies and solutions tailored to the needs of Industry 4.0 SMEs
- SecDes – Security by Design : Discover how companies can integrate cybersecurity into the design and development of connected products





