Fortunately, there are several internationally accepted standards to help manufacturers secure their devices.

• EN 18031 series — This is the new European standard that will be mandatory for compliance with RED cybersecurity requirements from 1 August 2025. The standard was published in August 2024, but due to comments from the EU HAS consultants, the standard has not yet become an EU harmonized standard. This means that the standard cannot yet be used for self-declaration by the manufacturer and a Notified Body must be used. Nemko provides service for this standard today, both for testing to the standard and as Notified Body for RED
• ETSI/EN 303 645 — These European standard details outcome-focused best practices for the security of Internet-connected consumer devices to provide flexible security measures.
• IEC 62443 — This series of standards focuses on the cyber security of various aspects of industrial communications networks, including industrial automation and control systems and components, as well as requirements for IACS service providers.

With its combined expertise in cyber security, product safety, Radio/Telecom and electromagnetic compatibility (EMC), Nemko is a robust source for manufacturers.