New Radio Equipment Directive Cybersecurity Requirements

Joe Lomako, Cybersecurity Lab Manager / Business Development Manager, TÜV SÜD Product Service

TUESDAY 24 JANUARY 2023

As many will be aware the Radio Equipment Directive (RED) essential requirements are being enhanced to include cybersecurity requirements. This was implemented via Delegated Regulation 2022/30 whose requirements were further detailed later by the release of Mandate M585. This calls on standards organisations to prepare standards to assist manufacturers in demonstrating compliance to the cybersecurity essential requirements by the mandatory date of 1 August 2024.

However, even though the standards are being developed through the incredible and intense work of the standardisation organisation and the national groups which support it, it’s unlikely that standards will be harmonised by that date.

Although RED cybersecurity standards are still being developed, we cannot stress enough how important it is that manufacturers start preparing NOW by looking at what effort they need to put in. It can be quite considerable and leaving it to the last minute will cause delays in compliance.

At TÜV SÜD, we are committed to assisting industry in ensuring good cybersecurity; firstly, by being involved in the standards writing process and secondly, helping customers prepare by providing engineering and compliance assistance. We test to a combination of existing standards, use our own test method and other product specific information to ensure that products are aligned with what is expected of a secure product under the RED.

Find out more about how TÜV SÜD can help you get your RED CE mark or view all our product certification services.

Explore