Why the EU Declaration of Conformity Is Not a Simple Form A manufacturer may ship computers, firmware, apps, SDKs and online services under one brand. The EU Cyber Resilience Act (CRA, Regulation (EU) 2024/2847) asks it to prepare an EU Declaration of Conformity (DoC) for products with digital elements. The hard part is the CRA…
Exploring a Korea market entry model that better fits Taiwan’s AI server makers, through practical industry exchange On October 22, 2026, The One-Glodacert held the “AI Server Korea RRA Certification and In-Taiwan Testing Seminar” in Taiwan. The technical team from Korea Testing Laboratory (KTL) was invited to Taiwan to discuss practical issues with Taiwan’s AI…
What the FCC Announced On October 2, 2026, the FCC’s Public Safety and Homeland Security Bureau released Public Notice DA 26-1063. It says the Department of War (DoW) has granted Conditional Approval to three more sets of devices. As a result, these devices are now exempt from the FCC Covered List, which names equipment seen…
Selling a connected device across multiple Asian countries has traditionally meant repeating the same security testing again and again, once for each national scheme. That is starting to change. Singapore’s Cyber Security Agency (CSA), Japan’s Ministry of Economy, Trade and Industry (METI), and South Korea’s Korea Internet & Security Agency (KISA) have strengthened cooperation between…
A Question Every Firmware Team Will Eventually Face Firmware rarely gets updated for just one reason. A single Maintenance Release (MR) often bundles bug fixes, new features, and vulnerability fixes together. But the EU Cyber Resilience Act (CRA) adds a twist: where technically feasible, security updates should be provided separately from feature updates. This raises…
Does CRA Compliance for OEM/ODM Companies Really Not Apply? “The product doesn’t carry my brand, so the CRA is my customer’s job.” We hear this often from OEM and ODM companies preparing for the Cyber Resilience Act (CRA). The idea is partly right. Under Regulation (EU) 2024/2847, a Manufacturer is not only the company that…
What Is the U.S. Cyber Trust Mark? The U.S. Cyber Trust Mark is a voluntary cybersecurity labeling program run by the Federal Communications Commission (FCC). It covers consumer wireless Internet of Things (IoT) products, such as smart home devices. The goal is simple. It helps shoppers find connected products that meet clear security standards. Products…
Notes: We have a tutorial youtube video below for you under “Resources for Manufacturers”. What Is the Single Reporting Platform? The European Union Agency for Cybersecurity (ENISA) has launched the first version of the Single Reporting Platform (SRP). This online tool helps manufacturers and open-source software stewards meet their new reporting duties under the Cyber…
Time Is Almost Up 11 September 2026 — this Friday. Not next month. Not “sometime soon.” This week. From that day, the EU’s Cyber Resilience Act (CRA) requires manufacturers of products with digital elements to report actively exploited vulnerabilities and severe security incidents to EU authorities. If your team hasn’t finished preparing, stop everything else…
INCHEON, KOREA — September 3, 2026 — The One Lab and Glodacert, members of The One Group, were honored to be invited by Korea Testing Laboratory (KTL) to participate in the 2026 Global ICT Testing & Certification Conference in Songdo, Incheon. Hosted by Korea’s National Radio Research Agency (RRA) and organized by Korea Testing Laboratory…