RED cybersecurity readiness white paper

From August 1, 2025, many wireless products placed on the EU market must meet RED cybersecurity requirements under Article 3.3 (d), (e), and (f). This introductory readiness guide helps manufacturers understand product applicability, make early pathway decisions, and plan how RED preparation may support future Cyber Resilience Act requirements.

If your product is in scope, RED cybersecurity is no longer something to address later. Missed scoping decisions, weak documentation, or the wrong conformity route can create avoidable delays, redesign costs, and Notified Body involvement. Download the white paper to understand what might apply to your products, what decisions to make early, and how to reduce compliance risk before it affects EU market access. The white paper gives you a practical starting point whether you’re working in product, compliance, or engineering.

• What RED cybersecurity is and why it matters now
• Which products are in scope (and which are not)
• How EN 18031 is used and when self-declaration is possible
• What testing looks like in practice (grey-box, documentation-heavy, risk-based)
• A step-by-step readiness plan manufacturers can start immediately
• How RED aligns with the upcoming Cyber Resilience Act (CRA) which is already in force and applies fully from 11 December 2027, with some obligations starting earlier 

• Manufacturers placing wireless or connected products on the EU market
• Product teams assessing RED cybersecurity applicability
• Compliance teams preparing for market access deadlines
• Engineering teams making early design and documentation decisions
• Organizations planning how RED readiness may link to Cyber Resilience Act obligations