The European Union is imposing increasingly strict cybersecurity requirements on manufacturers of electronic devices, particularly IoT and smart systems. The goal of these new regulations is to ensure the resilience of digital products against cyber threats while fostering a secure and reliable market.

In this presentation, I will introduce the EU’s regulatory cybersecurity requirements and the associated standards that directly impact electronic device manufacturers. Additionally, I will outline the process of compliance assessment.

Topics:

1. The EU Cybersecurity Strategy

  • The objective of the regulatory framework: ensuring a uniformly high level of protection

  • Two main pillars:

    1. Protection of critical infrastructures (NIS2)

    2. Protection and resilience of devices (CRA and sector-specific regulations, e.g., RED)

2. Cyber Resilience Act (CRA) – The New Horizontal Regulation

  • The role of CRA in CE marking requirements
  • Risk-based approach and manufacturer obligations
  • Responsibilities and roles across the supply chain

3. Sector-Specific Harmonized Regulations: The Radio Equipment Directive (RED)

  • The RED and its supplement on cybersecurity for internet connected radio equipment (e.g., wireless IoT devices)
  • Essential cybersecurity requirements for smart devices

4. Applicable Cybersecurity Standards

  • EN 18031 series: Cybersecurity requirements for internet-connected radio equipment
  • IEC 62443 series: Cybersecurity for industrial control systems and their secure lifecycle management
  • Common Criteria and EUCC Certification:
    • The role of the Common Criteria (ISO/IEC 15408) in cybersecurity compliance
    • The EUCC (European Cybersecurity Certification) scheme, which is recognized under multiple regulations for demonstrating compliance with fundamental requirementsa

5. Practical Example: Ensuring Compliance for an IoT Smart Device

  • Steps of cybersecurity certification
  • Documentation requirements for compliance

Who Should Attend??

This presentation is aimed at manufacturers, engineers, and quality assurance professionals working with electronic and IoT devices. It is designed for companies and professionals seeking to understand and meet regulatory compliance and cybersecurity certification requirements.

Why Attend?

  • ✔ Gain a comprehensive overview of current and future EU cybersecurity requirements
  • ✔ Understand the necessary steps to ensure your product’s compliance
  • ✔ Receive practical guidance on meeting regulatory requirements and gaining a competitive market advantage