RED's cybersecurity-related requirements already apply to certain categories of wireless devices. The project cannot just stop at RF and EMC testing, but also checks evidence related to the device’s networking capabilities, software maintenance, user data and network protection.
What should be confirmed first for the project?
- Product scope: Confirm whether the device has the ability to connect to the Internet, process personal data, or make payments, and determine applicable requirements based on sales market and version.
- Technical documentation: Maintain an auditable chain of evidence in product descriptions, risk analyses, software versions, interfaces and user instructions.
- Testing rhythm: Arrange network security data review in parallel with wireless, EMC, and safety testing to avoid later rework.
Customer next step
Prepare product specifications, networking methods, App/cloud service descriptions, software version strategies, user data processing instructions and target EU sales plans, and conduct project gap assessment first.
Official source: EUR-Lex RED Cybersecurity Regulations Convergence Instructions