Assessing the Cyber RED-DA: Our Take on the Good, the Bad, and the Impact of EN 18031 (T11b)
This talk offers an in-depth perspective on experiences as a TIC company working with the Radio Equipment Directive (RED) and the EN 18031 standard. Drawing from firsthand assessments and work as a RED Notified Body, the discussion explores the benefits and challenges presented by the regulation. While the Cyber RED Delegated Act and the EN 18031 standard raise cybersecurity and privacy levels for wireless devices and networks, compliance definitions and technical assessment criteria present challenges. The talk addresses alternative compliance paths with other recognized standards, such as ETSI 303 645, where additional guidance is required to harmonize assessments and bridge gaps. The analysis also evaluates the interplay with other EU regulations, particularly the Cyber Resilience Act (CRA), and is aimed at manufacturers and cybersecurity professionals.