3. Results
3.1. Funding Misalignment with Risk Exposure and Inequity in Distribution Patters
The UDebDS project found that EU security and defense funds are not consistently aligned with Member States' current threat exposure. States on the EU's external borders or those subject to persistent hybrid threats are underrepresented in funding allocation relative to their risk profile. EU Member States perceive threats differently, Eastern states focus on Russian aggression, while southern countries emphasize instability along the Mediterranean. Despite this diversity, EU funding instruments generally lack prioritization based on measurable threat indicators like proximity to conflict zones, hybrid threat exposure, or infrastructure vulnerability [
7].
Funding mechanisms, like the EDF, depend heavily on grant proposals, industrial capacity, and co-financing ability, not on vulnerability or threat level. Member States that already have strong defense industries and high capacity to co-fund projects tend to win more, regardless of their geographic risk exposure. This market-driven approach disproportionately benefits countries with established defense industrial bases, robust R&D ecosystems, and the financial flexibility to engage in co-funded projects. Consequently, states located on the geopolitical frontlines of the Union, such as those bordering Russia or regions affected by instability in the Sahel and Eastern Mediterranean, find themselves at a disadvantage. These countries may face persistent hybrid threats, host critical strategic infrastructure, or be exposed to direct military escalation. Yet, their access to EU defense funding remains limited due to insufficient industrial ecosystems or constrained fiscal space. This structurally sidelines smaller, frontier countries with limited industrial bases, despite facing greater hybrid or kinetic threats. Hence, independent analysts and institutions [
7] argue for moving toward a threat-based approach, using systematic risk assessment to align budget planning and fund distribution. A refined Strategic Compass grounded in measurable risk metrics, rather than political or industrial capacity, is necessary to close this alignment gap.
Recent data shows EU defense spending is rising dramatically, estimated at €326 billion (~1.9% of GDP) in 2024, up more than 30% since 2021, alongside record levels of collaborative investment via EDF and other mechanisms [
8]. But there is no evidence these investments are systematically targeted at the highest-risk Member States. The increase seems driven by general cohesion and aggregate investment goals, rather than allocating based on risk-level.
Table 1.
Structural Drivers of Misalignment Between EU Defense Funding Allocation and Member State Threat Exposure.
Table 1.
Structural Drivers of Misalignment Between EU Defense Funding Allocation and Member State Threat Exposure.
| Issue |
Key Point |
| Divergent threat perceptions |
Eastern vs. Southern EU states face different risks, but current funding doesn’t account for these variations |
| Funding mechanics favor capacity |
Access depends on industrial readiness and co-funding, not geographic exposure or hybrid threat levels. |
| Massive increase in spending |
EU defense investment is up >30%, but still not aligned with national risk profiles. |
| Expert recommendations for redesign |
Analysts call for integrating threat indicators into allocation frameworks to ensure strategic equity. |
States on the EU’s eastern and southern flanks, such as the Baltics, Poland, Romania, Greece, and parts of the Mediterranean, face a sustained hybrid or geopolitical risks. This ranges from Russian disinformation campaigns and cyberattacks to instability and irregular migration pressures originating from North Africa and the Middle East. Despite the intensity and persistence of these threats, these frontline states do not receive proportionally higher funding from EU defense mechanisms. This imbalance shows a structural flaw in current EU funding architecture as it rewards industrial and financial capability, not strategic necessity. The implication is stark, Member States facing the most acute operational challenges are often least prepared to compete under market-driven allocation systems like those underpinning the EDF and related instruments. These frontline countries may lack the defense-industrial maturity or fiscal elasticity required to develop competitive proposals, mobilize national co-financing, or engage in complex, multi-stakeholder projects, criteria that remain central to accessing EU funds. Moreover, this misalignment is a matter of procedural inefficiency and a strategic EU vulnerability. Underfunding those Member States that sit on the EU’s most exposed geopolitical fault lines creates capability gaps precisely where deterrence and resilience are most needed. It undermines the credibility of EU collective defense aspirations and increases reliance on NATO or bilateral arrangements to fill the void often with uneven results and limited EU-level visibility or control. If uncorrected, this funding asymmetry risks deepening internal divisions and eroding solidarity across the Union. It may lead frontline Member States to perceive EU defense mechanisms as politically disconnected from operational realities, further straining cohesion at a time of heightened geopolitical instability. Calls for a threat-based allocation model are thus not only technically justified but politically urgent. In this context, an EU-wide threat-based resource distribution model is seen as essential. Such a model should integrate intelligence-based assessments, hybrid threat indices, and proximity-to-threat indicators directly into funding decisions. This can involve establishing minimum funding thresholds or ring-fenced allocations for high-risk Member States, creating flexible funding tracks tailored for countries with low industrial capacity but high exposure, or revising evaluation criteria to prioritize strategic risk over co-financing ability. Ultimately, without a shift from capacity-driven funding to threat-informed investment, the EU’s growing defense budget risks entrenching existing disparities rather than addressing them. Ensuring that the Strategic Compass and related policy tools evolve in this direction is critical to achieving both strategic equity and operational credibility across the Union.
3.2. Measurable Risk Indicator (MRI)
To capture differentiated exposure among EU Member States in a quantifiable manner, our study operationalized a set of MRIs that joins geopolitical and infrastructural vulnerabilities in comparable, policy-relevant metrics. The first dimension, PCZ (
Table 2), shows the disadvantage faced by states located closest to unstable or adversarial regions beyond EU borders. As shown in
Table 2, Estonia and Poland are in less than 200 km from active or latent conflict theatres linked to Russian and Belarusian activities around Ukraine. This assigs them a “very high” risk weight. Romania and Greece, located 250–300 km from zones of persistent instability in the Black Sea, Eastern Mediterranean, and Libya, are classified as “high” risk, whereas Italy, more distant from direct conflict yet still exposed to Mediterranean security pressures, is scored “moderate.” By contrast, Germany and Portugal are geographically insulated, at distances of 1,000 km and over 1,500 km, respectively, from external conflict interfaces, which results in “low” or “very low” scores. This distance-based assessment shows a basic structural asymmetry: states in closer proximity to potential kinetic or hybrid escalation are objectively more exposed, yet do not necessarily receive proportionate EU financial reinforcement.
The second dimension is the SIV, which evaluates the density and criticality of assets that, if compromised, can degrade national and collective security. As detailed in
Table 3, Poland, Romania, and Greece all register high concentrations of exposed infrastructure, each with more than a dozen high-risk assets such as LNG terminals, NATO logistics corridors, Black Sea ports, Aegean maritime facilities, and undersea communication cables located in geopolitically sensitive regions. These assets function as operational lifelines for national defense and EU-level deterrence, and their geographic exposure increases their strategic liability in crisis scenarios. Germany and France exhibit slightly lower but still significant levels of vulnerability, mainly due to concentrations of energy pipelines, nuclear plants, space assets, and major ports that remain essential for EU force projection and resilience. Portugal, with only a small number of maritime nodes and cable landing sites exposed to external threats, represents the lower end of the vulnerability spectrum when compared with others.
Data sources: EU CER Directive reporting [
11], ENISA threat outlook [
12], NATO basing data [
13]. Measures the concentration of high-value, critical infrastructure near exposed regions, based on the EU Critical Entities Resilience Directive – CER Directive, 2022/2557 [
14]. Key Infrastructure Categories Considered: Gas and electricity interconnectors, Undersea cables, Military installations (NATO and national), Nuclear power plants, Satellite/space infrastructure, Ports and maritime chokepoints.
The PCZ and SIV indicators provide complementary views. On one hand, PCZ takes the positional risk of being geographically “forward deployed” relative to external threats; on the other hand, SIV shows the internal fragility arising from the clustering of critical assets in areas susceptible to hostile interference or disruption. Both factors are crucial for a holistic appraisal of risk. A Member State geographically insulated but hosting a dense concentration of strategically indispensable infrastructure (e.g., communications hubs, LNG terminals) may still represent a high-priority target for hybrid operations, whereas a frontier state with limited industrial or infrastructural density may experience acute operational pressure simply due to its geographic exposure. In combination, these indicators allow policymakers to identify where strategic gaps between exposure and financial support are most consequential for EU collective defense and resilience.
3.3. Operational Readiness Deficit (ORD)
In this section we analyze the ORD that assesses the internal capacity of Member States to respond effectively to crises. This indicator shows the gap between the defense capabilities that are required to meet contemporary threat environments and those available at the national level. The ORD integrates several dimensions of force generation and sustainability, which includes the defense expenditure as a percentage of GDP, the availability of military personnel relative to population size, the pace of equipment modernization, and NATO Readiness and Deployability Ratings (RDRs). These variables provide a preliminary measure of how prepared a state is to project, sustain, and integrate military power when facing hybrid or conventional escalation.
As summarized in
Table 4, disparities can be seen across Member States. Poland and Estonia exhibit comparatively high levels of defense investment. They are both above NATO’s 2% GDP benchmark, with Estonia at 3.1% and Poland at 4.0%. Both are also register high NATO RDR scores, which shows that their forces are deployable and combat-ready on short notice. Consequently, their ORD risk level is assessed as “low”, indicating that, although they are geographically exposed, they possess credible defensive capacity to mitigate immediate operational shortfalls. Romania and Greece reveal a more mixed profile. Both allocate substantial resources to defense, 2.1% and 3.2% of GDP, respectively, and their NATO RDR scores indicate medium readiness. These states face “medium” ORD risk that suggests that additional investment in modernization or personnel availability would be required to fully offset the pressures of their geostrategic position.
By contrast, Italy, Germany, and Portugal demonstrate cases of structural vulnerability despite being core EU members with historically significant defense roles. Italy and Portugal maintain defense spending levels of only 1.5% and 1.4% of GDP, respectively, both below NATO’s guideline, and exhibit low NATO RDR scores, resulting in “high” ORD risk. Germany, despite its economic weight, spends just 1.6% of GDP on defense and achieves only medium readiness, also placing it in the “high” ORD risk category. Hence, our results highlight an important asymmetry. Some Member States geographically insulated from immediate threats nevertheless contribute disproportionately to EU operational risk by maintaining insufficient deployable capacity, whereas others positioned on the Union’s geopolitical frontlines demonstrate comparatively higher readiness despite fiscal or industrial constraints.
In our view, this discrepancy between exposure and readiness is strategically significant. A state with high geographic and infrastructural risk but low ORD may lack the ability to defend its own territory or contribute effectively to collective EU or NATO missions, thereby increasing the burden on allies. Conversely, a state with high readiness and forward-deployed capabilities can act as both a stabilizing factor and a deterrent, reducing the net vulnerability of the Union as a whole. The ORD indicator therefore complements PCZ and SIV by bridging external exposure with internal capability. Taken together, the three dimensions produce a more precise and actionable understanding of where EU resources should be directed. Our analysis is not only focused on those countries at greatest risk, but also to those where investment can meaningfully enhance the Union’s collective deterrence and crisis response capacity.
3.4. Composite MRI Score (0–9 Scale)
To interpret the multidimensional assessment of risk in a single, actionable metric, the three measurable risk indicators: Proximity to Conflict Zones, Strategic Infrastructure Vulnerability, and Operational Readiness Deficit, were combined in a composite MRI score. This integration gives a consolidated representation of each Member State’s relative exposure. This allows for direct comparison across the Union and facilitates the development of funding allocation criteria that are evidence-based and policy-relevant. Each dimension contributes equally to the aggregate score on a 0–9 scale to ensure that geographic, infrastructural, and readiness-related vulnerabilities are balanced in their influence.
As shown in
Table 5, the composite analysis reveals four Member States: Poland, Estonia, Romania, and Greece, that clustered at the highest tier. Each country scores a total of seven points. This group combines either high or very high geographic exposure with concentrated strategic infrastructure and at least medium levels of operational deficit. Moreover, these states constitute the EU’s functional “frontline,” where external pressure converges with internal capacity limitations. This creates an increased risk of operational strain and strategic instability. In practical terms, this means that failure to direct sufficient resources toward these states leaves them individually vulnerable and generates cascading risks for the Union’s collective deterrence and response posture.
Interpretation & Application: MRI ≥ 7 → Priority Tier 1 Funding: Mandatory access to ring-fenced funding and simplified procedures; MRI 5–6 → Priority Tier 2 Funding: Enhanced co-financing, proposal support services; MRI ≤ 4 → Baseline Access: Competitive funding under standard conditions. This composite indicator should be embedded in future iterations of the Strategic Compass, EDF criteria, and the EU’s Capability Development Plan (CDP) to ensure that strategic risk drives investment.
Taking a closer look at
Table 5, we can see that Germany presents a composite score of five. This falls into an intermediate risk category. Although geographically insulated (PCZ score of zero), Germany possesses significant concentrations of strategic infrastructure (SIV score of two) and carries a high ORD risk (score of three) due to its insufficiently deployable military capabilities relative to its economic size and political weight. This profile highlights a critical issue of the model, which is “risk is not synonymous with proximity”. A state may be structurally central to EU defense credibility yet underperform in readiness. This produces a latent vulnerability that, in crisis, can delay or dilute collective action.
Regarding France and Portugal, both scored four. These countries occupy the baseline tier of the composite risk distribution. Their lower scores reflect a combination of geographical distance from active theatres, moderate levels of strategic infrastructure vulnerability, and relatively weak readiness profiles. These states face less immediate pressure, and they remain integral to the Union’s overall resilience, particularly in terms of sustaining logistics, industrial capacity, and political cohesion during protracted security crises.
This three-tier classification provides a structured framework for calibrating EU funding instruments. Member States scoring seven or above represent Tier 1, for which ring-fenced funding, simplified access procedures, and targeted capacity-building should be prioritized to ensure immediate reinforcement of the Union’s most exposed regions. States scoring five or six constitute Tier 2, warranting enhanced co-financing rates, proposal-development support, and targeted capability improvement measures. Those scoring four or below remain eligible under standard competitive conditions, reflecting a lower degree of urgency but preserving their role within the broader strategic architecture.
When embedding this composite scoring logic into the allocation processes of instruments such as the European Defense Fund, the European Peace Facility, and the EU Capability Development Plan, decision-makers can transition from politically balanced yet strategically blunt funding models toward data-driven, risk-responsive allocation mechanisms. Such a shift will enhance deterrence credibility, reduce intra-EU asymmetries, and strengthen the Union’s capacity to act collectively in an increasingly contested security environment.
3.5. Proposal of a New Allocation Model
If we build on the composite assessment of Member State exposure, we can see that our study proposes an alternative funding allocation model. This model aligns with the EU security and defense resources and is empirically defined by the strategic need, and not on the administrative convenience or industrial capacity. Our model addresses a fundamental shortcoming of existing mechanisms, that are, the current funding allocation that is largely shaped by the ability of states to submit competitive proposals, the mobilization of national co-financing, and the leverage established by industrial ecosystems. We acknowledge that the previous allocation model was procedurally efficient. However, that capacity-driven approach presents structural disadvantages for those states that face the highest levels of external pressure and yet lack equivalent institutional or industrial leverage. Thereby, in our view, this was creating a misalignment between need and support.
Our model integrates four core dimensions of vulnerability. Hence, our main intention was to transform these dimensions into measurable and actionable funding criteria. First, we considered the proximity to conflict zones, which remained a primary determinant of exposure, as states geographically adjacent to unstable theatres or adversarial actors are inherently at higher risk of hybrid and conventional escalation. Second, the exposure to hybrid threats. These includes cyberattacks, disinformation operations, and coercive energy or migration tactics. These threats were selected as they make part of the contemporary character of conflict, in which pressure is increasingly exerted below the threshold of open war. Third, the vulnerability of critical infrastructure, which accounts for the clustering of indispensable assets in geopolitically sensitive regions, where disruption can generate systemic consequences for national and EU-wide operational continuity. Last and fourth, the gaps in operational readiness, to capture the capacity dimension and measure whether Member States possess sufficient deployable forces, modern equipment, and trained personnel to transform financial support in credible deterrence and crisis response.
The indicators above form what we believe to be a multidimensional risk profile that can be systematically mapped across the Union. The model operationalizes this profile by assigning Member States to differentiated priority tiers. States in Tier 1, those with the highest composite risk, would receive guaranteed access to ring-fenced funds, simplified administrative procedures, and tailored capacity-building packages aimed at closing critical capability gaps. Tier 2 states, represent those with moderate composite risk. These states would benefit from enhanced co-financing rates, proposal-development support, and targeted incentives for multinational projects that address shared vulnerabilities. Tier 3 states are assessed as comparatively low risk. These states would continue to access competitive funding under existing EDF and EPF structures, ensuring that innovation, industrial collaboration, and strategic diversity remain incentivized across the Union.
This approach carries several advantages over the status quo. We shifted emphasis from administrative and industrial capacity to threat-informed strategic necessity. This ensures that limited EU resources generate maximum impact on collective security and deterrence. If we embed intelligence-based, reproducible indicators in the allocation process, transparency will be enhanced and can reduce the risk of politicization or perceptions of inequity. Finally, by creating structured pathways for high-risk but low-capacity states to access support, it reinforces solidarity, strengthens deterrence at the Union’s external borders, and reduces dependency on ad hoc NATO or bilateral solutions that may not reflect EU priorities.
Table 6.
Proposed Risk-Based EU Security and Defense Funding Allocation Model.
Table 6.
Proposed Risk-Based EU Security and Defense Funding Allocation Model.
| Tier |
Composite Risk Profile |
Priority Criteria |
Funding Mechanism |
Intended Impact |
| Tier 1 |
MRI ≥ 7 (High Risk) |
• Proximity to conflict zones (≤ 300 km) • Persistent hybrid threat exposure (cyber, disinformation, energy coercion) • High concentration of critical infrastructure in exposed regions • Operational readiness gaps limiting autonomous response |
Ring-fenced funding allocations; simplified procedures; tailored capacity-building packages; reduced national co-financing requirements |
Immediate reinforcement of EU’s most exposed borders; enhanced deterrence credibility; crisis-response resilience |
| Tier 2 |
MRI 5–6 (Moderate Risk) |
• Moderate proximity to external threats • Selective hybrid threat exposure • Medium concentration of critical infrastructure • Partial readiness deficits |
Enhanced co-financing rates; proposal development support; targeted multinational project incentives |
Strategic capability strengthening; improved interoperability; gradual closure of readiness and resilience gaps |
| Tier 3 |
MRI ≤ 4 (Low Risk) |
• Geographically insulated • Limited exposure to hybrid threats • Low concentration of critical infrastructure in sensitive regions • Mature operational readiness profiles |
Competitive funding under standard EDF/EPF/CDP conditions; innovation-driven project selection |
Sustained innovation ecosystem; industrial collaboration; long-term capability development without urgent prioritization |
In practical terms, implementing this model will require adjustments to the evaluation criteria of key funding instruments, including the European Defense Fund, the European Peace Facility, and future iterations of the EU Capability Development Plan. Moreover, integration of composite risk scoring into these instruments will allow for dynamic, periodically updated allocations that evolve alongside the threat environment. Over time, such a model can transform EU security and defense funding from a politically balanced and in a data-driven, adaptive tool capable of responding to the complexities of twenty-first century conflict.