Funding in Bavaria
Digitalbonus Bayern for an ISO 27001 gap assessment
The Free State of Bavaria funds small companies' IT security projects at up to 50% of the costs. Our ISO 27001 gap assessment and StandardOS for the project's months can be applied for as one such project; whether it is approved is the district government's decision.
- Who
- Small commercial companies with premises in Bavaria: fewer than 50 employees and at most €10,000,000 in annual turnover or balance sheet total.
- How much
- Digitalbonus Standard: up to 50% of eligible costs, at most €7,500. Projects under €4,000 are not eligible.
- For what
- Funding area 2.2 IT-Sicherheit: introducing or improving IT security processes in the company, external providers' services including the software they need.
- Until when
- The programme runs until 31 December 2027. Applications are taken in monthly quotas.
What you apply for
One project: the ISO 27001 gap assessment at its fixed price and StandardOS for the project's months, together over €4,000. Licence costs count for at most 18 months.
Example
| ISO 27001 gap assessment, fixed price | €1,200 | €1,200 |
| StandardOS, 12 months: €2,988 | StandardOS, 18 months: €4,482 | |
| Project total, excl. VAT | €4,188 | €5,682 |
| Grant if approved, at most | €2,094 | €2,841 |
The district government sets the grant; the figure is the ceiling under the programme's rules, not a promise.
What we invoice
- Before you apply, a quote addressed to your company, itemised: the gap assessment at its fixed price and StandardOS per month, for the project's months only.
- Once the project starts, the gap assessment once and StandardOS monthly, each excl. VAT, addressed to your company. You file these invoices with the payment request.
In this order
- 1 Ask us for a quote. Do not order: an order placed before the application, even verbally, rules the funding out.
- 2 Apply online to your district government (Bezirksregierung), with the ELSTER company account.
- 3 After the acknowledgement of receipt you may start at your own risk, or wait for the grant decision. Only then commission us.
- 4 After the project, file the payment request with our invoices.
Ask for a quote for the gap assessmentMention “Digitalbonus” in the form's notes field.
What we do not decide
- Whether the project is funded, and by how much, is the district government's decision. We promise no grant.
- The programme excludes standard software. Whether the district government treats StandardOS as the software the measure needs is its decision.
- Measures that rest on a legal obligation are excluded. That is why this page leads with the voluntary ISO 27001 gap assessment rather than CRA readiness, which implements a manufacturer's legal duty.
Read on 25 September 2026 on digitalbonus.bayern: Programme, FAQ