What is Ezurio's statement on the CRA and RED requirements?

Answer

We have evaluated the EU’s Cyber Resilience Act (CRA) and the Radio Equipment Directive (RED) cybersecurity requirements outlined in Article 3.3 (d), (e), and (f) and are actively pursuing compliance for all applicable products. Applicable products are generally those that ship with application software and do not require configuration or integration to enable internet connectivity. We are fully committed to achieving compliance by the August 1, 2025 deadline.

While we will ensure compliance with RED Article 3.3 for our applicable products, it is important to note that for Radio Modules and SOMs, the end product must still undergo its own assessment to verify conformance. This is largely because the RED Cybersecurity requirements can only practically be achieved with a fully integrated end-product and application software.

Please note that we are not a Notified Body. It is recommended customers collaborate directly with a Notified Body or an accredited laboratory to evaluate compliance with EN 18031-X standards and determine the necessary compliance requirements for their end products.