Based on the EN 18031 series (EN 18031-1 / EN 18031-2 / EN 18031-3) harmonised under the EU RED cybersecurity delegated act, we carry out cybersecurity assessment and compliance-pathway analysis for radio equipment with network connectivity, helping you determine whether your product falls within the scope of the EU’s mandatory cybersecurity requirements.

Why Cybersecurity Matters Now

The cybersecurity capability of connected radio equipment is shifting from a voluntary advantage to a mandatory threshold, taking effect in stages:

• Mandatory across the EU — the RED cybersecurity requirements corresponding to EN 18031 have applied to the products concerned since 1 August 2025, following the annual assessment and mandatory declaration routes
• Harmonised standards in place — EN 18031:2024 is the technical implementation path for the three essential cybersecurity requirements of RED Article 3(3)(d)(e)(f); connected devices without a sound assessment will struggle to meet the mandatory RED requirements
• Tightening supervision — the UK PSTI regime and the EU Cyber Resilience Act (CRA) continue to extend security obligations for connected products; building security design into the development cycle early significantly reduces rework and market-entry risk

For companies exporting wireless or connected products to the EU, completing a gap assessment against the EN 18031 baseline as early as possible reduces later compliance rework costs and market-access uncertainty.

Service Process

1. Product and target market review — clarify the product’s connectivity, functional characteristics and target market, and determine which part of the EN 18031 series applies.

2. Applicability determination (gap assessment) — identify the cybersecurity requirements likely to apply to the product against EN 18031-1/2/3 and produce a gap list.

3. Cybersecurity assessment and testing — assess and verify key requirements such as network protection, privacy protection and fraud prevention.

4. Remediation advice and retesting — provide remediation advice for identified issues and support retesting and regression verification after remediation.

5. Project delivery and follow-up support — issue the assessment conclusion and documentation, and support subsequent RED compliance applications and certificate maintenance.

Applicable Products

• Consumer IoT devices (smart speakers, cameras, gateways, routers and other wirelessly connected products)
• Wearables (smart watches, health monitoring bands)
• Connected appliances and smart home companion products
• Wireless communication terminals and connected handheld devices
• Other connected products with radio transmission functions that need to be placed on the European market

Why Choose Star River Quality

• Accredited qualifications — CMA and CNAS accredited, with a standardised and traceable testing and assessment process
• Standards experience — familiar with the implementation points of the EN 18031 series and the RED cybersecurity requirements, and able to deliver actionable advice
• One-stop coordination — cybersecurity assessment can be coordinated with EMC, wireless and safety testing, reducing the number of interfaces you have to manage
• Full-lifecycle support — from gap assessment, remediation and retesting through to RED compliance application, reducing market-entry uncertainty

Not sure whether your connected device falls within the mandatory scope of EN 18031? Tell us the product type, connectivity and target market, and we will help you determine which part of the standard applies and map out the assessment path.