Extension of ECM accreditation for the RED Directive: ready to support manufacturers in verifying cybersecurity requirements

15 January 2025

The extension of ECM’s accreditation under the RED Directive 2014/53/EU is now official, enabling us to conduct conformity assessments of radio equipment in compliance with cybersecurity requirements (Article 3.3, points d, e, f).

With the publication on Accredia’s website of the decision by the Sectoral Accreditation Committee for Regulated Activities (CSA AR) on 12 December 2024, ECM has obtained the accreditation extension under the Product Scheme for the RED Directive 2014/53/EU, specifically addressing cybersecurity requirements.

ECM is now officially accredited to assess the conformity of radio equipment also in relation to essential cybersecurity requirements outlined in Article 3.3, points d, e, and f. This extension marks a significant step forward in addressing the emerging safety challenges manufacturers of radio equipment will face in the coming months. As of 1st August 2025, compliance with cybersecurity requirements will become mandatory for all internet-connectable radio equipment (as mandated by Delegated Regulation 2022/30/EU).

The RED Directive 2014/53/EU specifies that devices connected to the Internet must meet the following essential cybersecurity requirements:

  • Network Protection (Article 3.3d): ensuring devices do not compromise the security of communication networks;
  • Personal Data Protection (Article 3.3e): implementing measures to safeguard users’ personal data and privacy;
  • Fraud Prevention (Article 3.3f): adopting solutions to prevent the fraudulent use of devices.

Adapting to these provisions requires careful and timely planning by manufacturers, who must implement the necessary functionalities to meet the directive’s requirements. They will then need to demonstrate compliance through the certification process with a Notified Body like Ente Certificazione Macchine (ECM).

With over 20 years of expertise in certifications, ECM – Notified Body 1282 is ready to support companies on this journey by providing professional and prompt certification services. Thanks to our recent accreditation extension for the RED Directive, we are now able to verify the conformity of radio equipment to cybersecurity requirements as well [View the CSAAR Annex to Accreditation Certificate 0118PRD].

To inform companies about new regulatory obligations and provide insights into cybersecurity requirements, ECM will host a free webinar in collaboration with Confindustria Emilia on 25 February 2025, at 10:30 AM. The online event will feature our technical expert, who will offer an in-depth analysis of the most relevant technical and regulatory aspects.

Check our Courses calendar and follow us on LinkedIn to stay updated on further webinar details!


Contact us for more information about our conformity verification service and ensure your devices are ready for the European market! Reach out to:

Paolo Bernardoni (Italy) paolo@entecerma.it

Marzia Pellegrini (Outside Italy) marzia.p@entecerma.it

TOP