Sign up to the newsletter
Become a subscriber to Digital Security by Design updates – with regular communications on our news, insights and opportunities, you’ll be the first to know about our work and ways to get involved.
Digital Security by Design (“DSbD”) challenge was launched by UK Research and Innovation in 2019 to improve the current insecure foundations computing infrastructure.
The Digital Security by Design Technology Access Programme (“DSbD TAP”) is an awareness and acceleration programme that addresses the cybersecurity challenges faced by embedded product and software companies.
The programme provides the tools, resources and expertise needed to assist experimentation with the new CHERI architecture and Morello board for enhanced digital security.
Digital Catapult is the UK authority on advanced digital technology. Through collaboration and innovation, we accelerate industry adoption to drive growth and opportunity across the economy.
We bring together an expert and enterprising community of researchers, startups, scaleups and industry leaders to discover new ways to solve the big challenges limiting the UK’s future potential. Through our specialist programmes and experimental facilities, we make sure that innovation thrives, and the right solutions make it to the real world.
Our goal is to accelerate new possibilities in everything we do and for every business we partner with the journey – breaking down barriers, de-risking innovation, opening up markets and responsibly shaping the products, services and experiences of the future.
Digital Catapult works with organisations on projects involving at least one of the technologies from its “Advanced Digital Technology Stack”: Artificial Intelligence, Immersive, Internet of Things, Distributed Ledger Technologies and Future Networks.
During the application stage, the judges will be responsible for scoring the applications according to the criteria set out in these Programme Competition Terms. The judges have/will be chosen based on (i) their experience and expertise, and (ii) ability to exercise independent judgment.
A number of judges from Digital Catapult will help judge the applications.
An independent judge has been selected to help judge applications, whose details are available on request at email@example.com.
Challenge Owner Judges
A number of judges from ARM Ltd. and University of Cambridge may help judge the applications.
A number of judges from UKRI may help judge applications.
Digital Catapult is working as Innovate UK’s delivery partner on this UKRI funded programme. InnovateUK is the UK’s innovation agency, and is part of UK Research and Innovation.
Programme Industry Partners
University of Cambridge
You are considered an “Applicant” if you apply to this competition.
You are considered a “Participant” if you are successful with your application and complete all pre-Project activities (e.g. signing the Participation Agreement).
There are two tiers to this Open Call. Tier 1 is for SMEs only. Tier 2 is open to all sizes of business.
Participants on the Programme will receive the following benefits:
Tier 1 Exclusive Benefits (SMEs only):
Tier 1 & Tier 2 Benefits:
Tier 1 Participants Only
Tier 2 Participants Only
All Participants (Tier 1 & Tier 2)
Tier 1 Applicants
Tier 1 & Tier 2 Applicants
The DSbD Technology Access Programme has been designed for all types of businesses, from early stage startups looking to refine business propositions to mature startups seeking early access to revolutionary technology before it is fully ready for commercial deployment.
This new architecture has wide appeal and is not restricted to any particular industry. We are looking at startups, scaleups and mid-size companies who want to make their systems and products secure from cyber threats and vulnerabilities.
The architecture is currently only available for
Linux/Android/CheriBSD Operating Systems. The Morello FVP runs on Linux for testing/PoC purposes. Additional operating system enablement is currently being addressed by a joint development between Arm, University of Cambridge, Microsoft and Google.
Applicants must answer all required questions in the full online application form relevant to the Tier applied for. Note: You may only apply for one Tier.
Relevant Catapult representatives will see your application in order to assess the application, and otherwise in the administration of your application and, if successful, participation on the Programme.
Relevant IUK representatives (and other Government representatives) will see your application in order to assess the application, Programme, and otherwise in the administration of your application and, if successful, participation on the Programme, including its statutory duties
The internal panel of judges will see the complete application, except for company name and personal information fields.
The independent judge(s) will see the complete application, except for company name and personal information fields.
Challenge Owner Judges
The challenge owner judges will see the complete application, except for company name and personal information fields.
The stakeholder judges will see the complete application, except for company name and personal information fields.
6.3.1 Applicant will appoint a main contact for the Programme (“Key Contact”). This person will be Digital Catapult’s (as Data Controller) main point of contact for the competition and, if successful, defining the Project activities, including: workshop and event commitments, team members’ availability, ongoing activities, and assessment of progress during and after the Project.
6.3.2 Digital Catapult will use this personal information for the purpose of carrying out due diligence on Applicants prior to the point of selection onto the Programme and to notify successful and unsuccessful Applicants over their submissions. The personal data we collect may be shared with and processed by Programme Partners for the purpose of assessing the Applications and providing benefits to the Participants on the Programme, as set out in these T&Cs.
The Catapult will undertake an initial assessment of the Applicants against the Programme Requirements.
All qualifying applications in each Tier will be reviewed and scored by the Judges.
The scoring criteria will be assessed by the Judges based on statements in the areas below. Each criterion will be scored on a range from 0 to 5. 0 being an “Unacceptable or No submission” score for each criterion and 5 being an “Excellent” score for each criterion. This scoring will be applied to all applications and will be equally weighted. A zero score will automatically result in a failed Application.
In Tier 1, there are 5 criteria upon which applicants will be assessed:
Relevance – The proposed use case or experimentation is relevant to DSbD technologies, CHERI, and the capabilities of the Morello Board.
Expertise and commitment of team – The business has the relevant expertise to take part and adequate resources committed to the programme.
Impact and scalability – The proposed use case or experimentation has the potential to scale and create impact beyond the immediate demonstrator.
Technical feasibility – The experimentation and project plan presented is feasible within the timeframe, budget, and resource available.
Innovation – The proposed use case is novel and will provide valuable insights to the DSbD programme.
In Tier 2 there are 2 criteria upon which applicants will be assessed
Relevance – The business and its solutions are relevant to DSbD applications
Interest – The business clearly states their interest and ambition, and potential areas of exploration with the Morello board
Furthermore, in each case, Digital Catapult will be selecting participants on a portfolio basis to ensure the Programme is able to deliver consistent support and activities that provide value to all Participants.
We will carry out due diligence on applicants prior to the point of selection onto the Programme. Applicants must be willing to submit further information or documentation upon request to qualify as ‘successful’.
7.5.1 Successful applicants will be notified and provided with a standard agreement for review and execution (“Programme Agreement”).
7.5.2 The Programme Agreement is a standard agreement and not negotiable. We do try and ensure these contracts are fair and reasonable.
7.5.3 In order to be accepted onto the Programme, successful applicants must sign the Programme Agreement.
Any funding provided by Programme Funder(s) either as direct cash grant or otherwise used for the operation of the Programme are subject to its terms and conditions stated in the Programme T&Cs.
All the benefits provided under the Programme by third-party organisations (“Suppliers”) are subject to the Supplier’s terms and conditions stated in the Programme T&Cs (in particular, in respect of the Morello Boards, from Arm Ltd.)
Any optional benefits provided by third party organisations whose terms and conditions are not contained in the Programme T&Cs will be agreed between the Participant and the Supplier directly.
Digital Catapult reserves the right to amend the list of benefits at its sole discretion.
Tier 1 Participants
Tier 1 Participants are receiving the grant pursuant to Special Drawing Rights (aka minimal financial assistance), or to the extent applicable under the NI Protocol, the de minimis aid regulations (COMMISSION REGULATION (EU) No 1407/2013), collectively referred to herein as “State Assistance.
The total State Assistance received or due to be received by a Participant (including any associated companies e.g. subsidiaries), originating from a United Kingdom source, must not exceed £315,000 for GB companies, and €200,000 (approximately £165,000) in aggregate across the Participant’s current fiscal year (as at the Agreement Date) and the previous two fiscal years.
This Project has been assessed as providing £15,000 for Tier 1 Participants.
Before signing the Programme Agreement, Applicants will therefore be asked to sign a declaration confirming that you are eligible to receive the State Assistance.
Tier 2 Participants
Digital Catapult reserves the right to accept any application which does not fulfil the minimum requirements.
Digital Catapult reserves the right to change the Key Dates at its sole discretion. No extension to deadlines will usually be granted, with very limited exceptions where the Applicant requests an extension due to reasonable extenuating circumstances, beyond the Applicant’s control and unforeseen to them, subject to the Applicant providing evidence that proves the extenuating circumstance; and the applicant informing Digital Catapult as soon as reasonably practicable following the extenuating circumstance becoming apparent. Digital Catapult reserves the right to consider the factors and decide whether such circumstances are extenuating and whether granting an extension is fair to other applicants. No extension granted will be for greater than two working days.
All information and documents requested must be submitted. Failure to submit all requested information and documents may result in the application being rejected. Catapult will not use outside information in respect of your application unless otherwise indicated, other than to undertake due diligence. Catapult reserves the right to not work with people or an organisation which could impact its reputation.
Catapult reserves the right to either (i) reassess an application from a previous competition (together with information gained from an update meeting), or (ii) accept as a successful applicant an organisation that was previously successful in a previous competition, but whose participation was deferred to a later Programme.
Digital Catapult reserves the right to make amendments to the Programme Agreement it issues up until the point of execution by both parties.
Digital Catapult reserves the right to offer Participants access to its Participant Programmes, such as its Platinum Awards.
Digital Catapult will store your application and the scoring it has received for the entire duration of the Programme. If you are a successful Applicant, we shall also store your Application for a period of up to five (5) years following the end of the Programme. For administration purposes, contracts may be stored for up to seven (7) years, contracts providing State aid for up to eleven (11) years, and deeds for up to thirteen (13) years from the end of the Programme.
9.2.1 The information provided in your Application will be kept confidential and only used and disclosed as reasonably necessary for the purpose of assessing Applications, and, if admitted onto the Programme, for working with you on the Programme. This may include with our Programme Partners as indicated above.
For practical reasons, NDAs will not be signed by Digital Catapult or the Partners as part of this Programme Competition. The activities we provide can only be achieved through trust of the tech community. It is therefore not in our interest to release your sensitive information. Mutual confidentiality provisions are included in the Programme Agreement.
9.2.2 The scoring of your Application will also be treated as confidential information.
9.2.3 As your Application will be transmitted over the Internet, ultimately Digital Catapult cannot guarantee its security.
9.3.1 We respect the intellectual property of others and we ask our Applicants to do the same.
9.3.2 In submitting the Application, you promise that you have and continue to have all necessary rights, licenses, permissions and consent to provide the content in your application to us, and for Catapult to use the Application as we have set out.
9.3.3 We will not remove from Applications any proprietary labels or copyright assertions.
9.4.1 We accept no liability for any consequences, whether direct or indirect, that may arise from your participation in the Programme Competition, your reliance on any statements we may have made about the Programme, or its suspension or withdrawal.
The Programme Competition is governed by English law and the Applicant agrees that any dispute shall be exclusively resolved in the English courts.