White Paper

Understanding the Cybersecurity requirements for RED PSTI and CRA

Multiple contributors
Alex Toohie Element Materials

By Engaged Expert

Alex Toohie

Product Qualification Testing

More content from this author

Learn about our Engaged Experts

With over 10 years of experience, Alex supports global manufacturers with navigating wireless and radio equipment compliance, and overcoming complex technical challenges.

Michael Derby

By Engaged Expert

Michael Derby

More content from this author

Learn about our Engaged Experts

Michael Derby has been in the product development and approvals business for more than 35 years. His present area of expertise is helping manufacturers get radio equipment onto the market.

On 1st August 2025, mandatory cybersecurity compliance comes into effect for products sold in Europe under the Radio Equipment Directive (RED). This change will require manufacturers to ensure that both new and existing products are compliant. This is part of a larger legislative transition for product cybersecurity requirements, including the 2022 and 2024 Product Security and Telecommunications Infrastructure (PSTI) regime and the upcoming Cyber Resilience Act (CRA), which comes into force in 2027.   

Download our whitepaper, ‘Understanding the Cybersecurity requirements for RED, PSTI & CRA’ where Element’s radio experts, Alex Toohie and Michael Derby, unpack the cybersecurity regulatory landscape, the new mandatory requirements in the RED, how manufacturers need to prepare to ensure compliance from 1st August 2025, and the upcoming CRA regulations.

 

Mandatory regulatory compliance 

From 1st August 2025, manufacturers of IoT products will have to comply with the new product cyber security regulations in the RED. This will require manufacturers to have a declaration of conformity to demonstrate their product is compliant with the new cyber security regulations.  

Navigating Market Access

The new mandatory cyber security requirements covered in the RED will require manufacturers to demonstrate compliance in order to sell their products in Europe, both for new and existing product variations. This may require retesting if the manufacturer cannot demonstrate conformity.  

Time consuming process

A product’s compliance journey can be a time consuming and challenging process, with many hurdles and variations to global product legislation. It’s crucial that manufacturers understand the mandatory regional compliance requirements to reduce the risk of costly delays or redesigns.

 

Why download this Whitepaper?

  • Download this whitepaper to get... 
  • Expert analysis of the cyber security regulatory landscape in Europe 
  • A breakdown of the mandatory changes coming into force from 1st August 2025 
  • Understanding of the different pathways to compliance for cyber security 

    

Download today to read more about:

  • Introduction to product cyber Security  
  • Cyber Security legislation  
  • UK PSTI Regime  
  • EU Radio Equipment Directive  
  • EU Cyber Security Act  
  • Other Standards  
  • What does a cyber assessment look like?   
  • How Element can help 

 

Complete the form below to read the whitepaper.

 

Find related Resources