evidoria

← Back to browse

Good practice Imported

Bulgaria's National Cybershield — a Google Cloud-Backed Federated SOC Across 54 Government Entities

Bulgaria · Sofia · See the Bulgaria profile · See the Sofia profile

Evidence: Descriptive / self-reported Top 89% 33/100 · Ask Evidence Copilot about this practice

State-owned Information Services is onboarding 54 Bulgarian government bodies onto an AI-driven, Google Cloud-built federated Security Operations Centre, part of an EU-backed push to harden the bloc's eastern border against cyber and information threats.

54
Government entities onboarded (target)
Bulgaria's National Cybershield — a Google Cloud-Backed Federated SOC Across 54 Government Entities

Details

Maturity
Pilot
Promoter
Information Services AD (Информационно обслужване) with Google Cloud
Period
2026–present
Keywords
public sector, cybersecurity, national security, digital government

Context

Bulgaria's state-owned Information Services AD partnered with Google Cloud to launch an AI-powered 'National Cybershield', announced May 2026, using Google Cloud Security Operations for a centralised, federated threat view.

Activities

The rollout is designed to bring 54 government entities into the shared federated security-operations centre, with EU funding supporting the effort as part of a regional mandate to secure the EU's eastern border.

Implementation
Indicative cost
High (€500k–€5M)
Time to results
Medium (1–3 years)
Staffing & skills
Information Services AD, Google Cloud implementation team

Conditions for success

  • onboarding all 54 government entities to the federated SOC
  • EU funding continuity for the regional cyber-hardening mandate

Commonly funded by

Digital Europe Programme National / regional programmes

Indicative funding routes for practices of this type — always check each programme's current calls and eligibility rules.

Do you run this practice? Claim it — verified implementers get a public contact pathway and can propose corrections.

Data sources

Where this practice's information was retrieved from, and when.

Attachments

Similar practices you may find useful