Tallinn Mechanism
One of the constant targets of russia’s war of aggression is Ukraine’s cyber capabilities, both in the military and civilian domains. It is therefore important to support Ukraine’s cyber defence, as well as its ability to restore and develop the relevant infrastructure. Civilian sector support is coordinated through the Tallinn Mechanism.
In 2024, Ukraine was subjected to over 4,315 cyberattacks, an average of 12 per day, mainly from Russia, and many of them critical. These attacks on civilian infrastructure threaten the state’s ability to function and provide basic services to its citizens.
On 23 December 2023, Estonia with Ukraine, the Netherlands, Canada, Poland, Germany, Denmark, United States, and the United Kingdom launched a system aimed at amplifying the cyber support of donors to Ukraine in the civilian domain. The system was named the Tallinn Mechanism after the location of its initial meeting. NATO and the European Union are observer members in the Tallinn Mechanism. The Mechanism has an Estonian front office in Kyiv, a Polish back office in Warsaw and a coordination group that unites representatives of Ukraine and all donors. The Tallinn Mechanism addresses this issue by systematically aligning Ukraine’s needs with the capabilities of donor countries, ensuring that international support forms a cohesive and strategic whole.
In 2025 The Tallinn Mechanism project office (TMPO) was officially opened in Kyiv. The office coordinates projects in the fields of cybersecurity and cyber diplomacy. Its mission is to enhance transparency, coordination and the effectiveness of donor support aimed at strengthening Ukraine’s cyber resilience. TMPO was established with the support of the Estonian Centre for International Development (ESTDEV) and EU CyberNet.
TMPO will also work to involve the private sector—both Ukrainian and international cyber companies—in implementing Tallinn Mechanism projects. This enables private businesses to contribute to the TM ecosystem, participating in initiatives ranging from threat detection and incident response to capacity-building training for Ukrainian cybersecurity professionals.
Increasing donor support
In 2025, ESTDEV joined forces with the Swedish International Development Cooperation Agency (Sida), who committed €12.2 million to boost Ukraine’s civilian cyber resilience within the framework of the Tallinn Mechanism. Since its launch, the Tallinn Mechanism donor countries have worked together to accumulate over €200 million to support Ukraine’s resilience. At the national level, Estonia has allocated €500,000 from the 2024 development cooperation budget and intends to maintain this level of support.
Dozens of initiatives are already being implemented within the TM: cybersecurity assessments, training programmes and the provision of Starlink terminals, which play a vital role in maintaining Ukraine’s digital resilience.
The Tallinn Mechanism and TMPO represent the frameworks and tools for international cooperation, helping Ukraine defend its sovereign rights in cyberspace and adapt to long-term cybersecurity challenges.
Related articles