Based on ETSI EN 303 645, the consumer IoT security baseline, we assess the security design and implementation of your connected products and help them meet the European market’s cybersecurity requirements in a structured way.

Why Cybersecurity Matters Now

Connected products are increasing year on year, and security and privacy have become hard requirements for entering the European market. Cybersecurity assessment under the EU Radio Equipment Directive (RED), EN 18031, is becoming mandatory in stages; the UK PSTI regime sets out explicit cybersecurity obligations for connectable consumer products; and the EU Cyber Resilience Act (CRA) extends its scope to a broader range of products with digital elements.

EN 303 645 is the industry baseline most widely referenced by these regulatory requirements. Completing a gap assessment and remediation against it early in a project significantly reduces rework costs and compliance risk after launch.

Service Process

1. Requirement review — clarify the product type, connectivity, data handling and target market.

2. Gap assessment — review the security design and implementation item by item against EN 303 645 and produce a gap list.

3. Security testing — assess and verify key areas such as default passwords, software updates, data protection and vulnerability management.

4. Remediation and retesting — provide remediation advice for identified issues and support retesting and regression after remediation.

5. Reporting and support — issue the assessment conclusion, support subsequent market-access applications and provide technical support throughout.

Applicable Products

• Smart home devices (smart speakers, cameras, smart locks, home gateways, routers)
• Wearables (smart watches, health monitoring bands)
• Connected appliances (smart air conditioners, refrigerators, sockets, lighting control systems)
• Smart toys and connected products for children
• Other consumer terminals with network connectivity

Why Choose Star River Quality

• Accredited qualifications — CMA and CNAS accredited, with a traceable testing process and results
• Standards experience — familiar with the implementation points of EN 303 645, EN 18031 and IEC 62443 cybersecurity requirements
• One-stop coordination — security assessment can be coordinated with EMC, wireless and safety testing, reducing the number of interfaces you have to manage
• Full-lifecycle support — follow-up from gap assessment and remediation advice through to market-access application

If your product is a consumer IoT device, contact us for EN 303 645 testing advice; we will help you identify the applicable cybersecurity assessment path.