This is a binding precursor to the Cyber Resilience Act (CRA), which aims to ensure the security of digital products throughout the supply chain and protect customers from security vulnerabilities in digital products, including IoT devices. The recent delegated act enhances the cybersecurity framework for radio equipment, requiring all wireless devices marketed in the EU to comply with these updated standards.
Understanding the EN 18031-1:2024 standard and its compliance implications
The EN 18031-1:2024 standard serves as a harmonized standard for demonstrating compliance with Articles 3.3(d), (e), and (f) of the NETwork. These articles are now essential for manufacturers of wireless devices wishing to access the EU market
• Article 3.3(d): Network Protection
Devices must not degrade network performance or misuse network resources.
• Article 3.3(e): Privacy Protection
Devices must guarantee the protection of users' personal data and privacy, regardless of internet connectivity.
• Article 3.3(f): Fraud Prevention
Devices must incorporate protective measures against fraudulent activities, especially those involving monetary or virtual currency transactions.
To comply with the EN 18031-1:2024 standard, manufacturers must:
- Evaluate the scope of the product
Determine the applicability of Articles 3.3 (d), (e) and (f) to your device.
- Implement the EN 18031 standards
Integrate the relevant cybersecurity controls and protocols.
- Conduct a gap analysis
Identify and address nonconformities in existing product designs.
- Hire a notified body
Required for products that trigger restricted clauses under the NETWORK.
- Prepare the technical documentation
Include risk assessments, technical files, and EC declarations.
Panasonic Compliance
The cybersecurity regulatory landscape is evolving rapidly. Panasonic Industry has taken a proactive approach to meeting new cybersecurity requirements and, in July, notified customers of the compliance of its relevant product portfolio. Many of its wireless modules already comply with EN 18031 1:2024 without requiring any hardware or software modifications.
Panasonic wireless modules are supplied without embedded software or firmware. Following a Threat Analysis and Risk Assessment (TARA), Panasonic confirms that Article 3.3d applies only to a specific number of modules, which are listed below.
Panasonic confirms that the following modules comply with the NETWORK without hardware or software modifications:
PAN9019 Series: ENWF9501C1KF, ENWF9501CMKF, ENWF9511C1KF, ENWF9511CMKF
PAN9028 series: ENWF9408A1EF, ENWF9408A2EF
PAN9026 Series: ENWF9202A1EF
For all other Panasonic modules, the aforementioned law (EN 18031) is not applicable.
