RED's cybersecurity-related requirements already apply to certain categories of wireless devices. The project cannot just stop at RF and EMC testing, but also checks evidence related to the device’s networking capabilities, software maintenance, user data and network protection.
项目应先确认什么
- Product scope: Confirm whether the device has the ability to connect to the Internet, process personal data, or make payments, and determine applicable requirements based on sales market and version.
- Technical documentation: Maintain an auditable chain of evidence in product descriptions, risk analyses, software versions, interfaces and user instructions.
- Testing rhythm: Arrange network security data review in parallel with wireless, EMC, and safety testing to avoid later rework.
客户下一步
Prepare product specifications, networking methods, App/cloud service descriptions, software version strategies, user data processing instructions and target EU sales plans, and conduct project gap assessment first.
Official source: EUR-Lex RED Cybersecurity Regulations Convergence Instructions