European Radio Equipment Directive cyber requirements – 90 days in
summary
Three mandatory requirements known as 3.3 D, E, F require devices with radios to protect the network, protect privacy/data, protect from fraud, with compulsory compliance from 1 August 2025 and vulnerability reporting beginning September 2026. Industry tools include WG8 standards, voluntary 303645 work and a recent industry hackathon that tested labs’ interpretations; outcome is widespread confusion, many manufacturers still unaware, sharp rise in compliance inquiries after August, and repeated debates over what counts as “internet connected.” Advice: assume worst case and start documenting decisions.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:49RED cyber requirements
- 3:55Manufacturers' challenges
- 6:46Awareness gaps
- 9:14Fairness concerns
- 10:43Industry responses
- 12:27Remaining challenges
- 14:34Preparing for CRA
related talks
12mIoT Cyber Security Regulations
22mEU Cyber Resilience Act - A Product Owner’s Approach
30mThe EU's Cybersecurity Resilience Act (CRA) has Begun – How Can Manufacturers Confidently Addres ...
11mNavigating the EU RED IoT Security Maze: Standards, Compliance, and Hurdles
29mThe challenge ahead for OEMs based upon the RED Article 3.3
27mEU Cyber Resilience Act: What Every Manufacturer Needs to Know
15mEuropean Cybersecurity Regulations who's who
59mMerging Security and Compliance: Perspectives on Emerging Regulations and Best Practices