ARNOOL
Follow Suzhou Arnool
SUZHOU ARNOOL
✦ EU 18031
An Overview of Cybersecurity Certifications
01 Policy Background
On January 12, 2022, the Official Journal of the European Union published Delegated Regulation (EU) 2022/30, which sets forth the compliance requirements for implementing Article 3(3)(d), (e), and (f) of the RED. This regulation mandates cybersecurity, personal data privacy, and fraud protection for applicable wireless devices on the EU market, with the aim of ensuring a higher level of cybersecurity for such devices and enhancing consumer confidence in them. The regulation took effect on February 1, 2022, andAugust 1, 2025Enforcement... and provided equipment manufacturers with a 42-month transition period.
Against this backdrop, the European Union released a draft standard in May 2024 outlining the applicability of the RED cybersecurity requirements.prEN 18031 Final Draft – FprEN 18031..
● ● ● ● ● ● ●
02 Products Evaluated
1. Network Protection (3.3(d)):
Applies to radio equipment capable of connecting to a network, either directly or indirectly.
2. Privacy Protection (3.3(e)) :
Radio equipment that processes personal data;
Even without an Internet connection, this provision applies to devices capable of transmitting personal data, communication data, and location data, specifically the following types of devices:
• Toys with radio functionality that also fall within the scope of Directive 2009/48/EC;
• Child care products;
• Products designed or intended to be worn, fastened, or hung on the human body.
3. Fraud Protection (3.3(f)) :
Radio equipment designed to support monetary transfers or virtual currency transactions.
03 Reasons for Corporate Certification
1.EV charger: As new energy vehicles become more widespread, the cybersecurity of EV charger is of critical importance. If EV charger is hacked, it could lead to issues such as the leakage of user information and interruptions in charging services, thereby affecting the normal use and promotion of new energy vehicles. Certification ensures the safety of user charging and the security of user information.
2.Inverter: In the field of new energy power generation, such as photovoltaics, inverters are critical equipment. Certification ensures their stable operation in complex grid environments, prevents declines in power generation efficiency and grid connection failures caused by cyberattacks, and safeguards the stability and reliability of the energy supply.
3.Home Appliances: For example, smart refrigerators, air conditioners, and other such products are increasingly connected to the internet to enable features such as smart control. Certification helps prevent the theft of users’ personal information, ensures that devices cannot be maliciously controlled due to network vulnerabilities, and protects user privacy and home network security.
4.Wireless Products: For devices such as wireless headphones and wireless routers, network security is critical to users' communication security and privacy. Authentication helps prevent wireless signals from being interfered with or compromised, thereby ensuring a secure online experience and protecting users' information.
04 Suzhou Arnool: How Can It Help Businesses?
1
Professional Testing: Using specialized equipment and technical personnel, we conduct comprehensive and in-depth cybersecurity testing of a company’s products to identify potential security risks and vulnerabilities, such as testing the EV charger communication protocol to prevent data leaks and tampering during transmission.
Interpretation of the Standard: To help companies accurately understand certification standards and requirements, ensure that the design, R&D, and production of their products comply with all provisions of the EU 18031 Cybersecurity Certification, and avoid certification failures caused by misinterpretations of the standards.
2
3
Recommendations for Correction: Based on the test results, we provide companies with targeted recommendations for corrective actions and solutions to help them improve the cybersecurity performance of their products and successfully pass certification—for example, by recommending technical improvements such as encryption for wireless products with security vulnerabilities.
Certification Assistance: Assist companies in preparing the various materials and documents required for certification, communicate and coordinate with certification bodies, expedite the certification process, improve certification efficiency, and reduce the certification burden on companies.
4
05 Why Choose Suzhou Arnool
Professional Competence
With professional cybersecurity expertise and extensive testing experience, we can identify issues more accurately and provide effective solutions, helping businesses avoid detours and save time and money.
Independence and Objectivity
As a third party independent of both companies and certification bodies, its testing results are more objective and impartial, making them more readily accepted by certification bodies and the market, thereby enhancing the credibility of a company’s products.
Resources and Efficiency
With professional testing equipment and a dedicated team, we can complete testing tasks quickly, improve certification efficiency, and help companies bring their products to the EU market faster to gain a competitive edge.
Risk Sharing
By sharing the risks associated with the certification process with the company, third-party testing companies are held accountable for any certification issues resulting from testing errors, thereby reducing the company’s certification risks.
● ● ● ● ● ● ●
Click the blue text to follow us
ENTERPRISE
Phone Number |
0512-66186880
Official Website |
www.arnool.com