Cybersecurity & Compliance Insights
Practical analysis for connected products, cybersecurity regulations and global market access.
Explore expert perspectives on CRA, EN 18031, IEC 62443, medical cybersecurity, Taiwan CNS / BSMI, and emerging compliance trends affecting manufacturers worldwide.
CRA Firmware Security Update: Do You Really Need a Security Branch for Every Old Version?
A Question Every Firmware Team Will Eventually Face Firmware rarely gets updated for just one reason. A single Maintenance Release (MR) often bundles bug fixes, new features, and vulnerability fixes together. But the EU Cyber Resilience Act (CRA) adds a twist: where technically feasible, security updates should be provided separately…
Does Your Device Need SAR Testing? The 2027 DJID Guideline
Komdigi Makes SAR Test Reports Mandatory for Selected Devices On 22 April 2026, Komdigi issued Ministerial Decree No. 197 of 2026, which makes SAR test reports mandatory for certain telecommunication devices certified through DJID. The decree replaces Decree 177/2024 and sets Specific Absorption Rate (SAR) limits for products used close…
ETSI EN 304 627 Secure Boot Requirements: Can Passwords Protect a Router’s Root of Trust?
Looking at Trustworthy Boot Design for Routers and Switches through ETSI EN 304 627 AC-INTEGRITY-1-02 As the EU Cyber Resilience Act (CRA) gradually enters the technical standard implementation phase, manufacturers of routers, Internet-connected modems, and switches need to re-examine their designs for Secure Boot, Firmware Integrity, and Root of Trust….
Taiwan’s New Cybersecurity Requirements: A Paradigm Shift in Market Access
Background: Cybersecurity as a Market Access Imperative Taiwan’s Bureau of Standards, Metrology and Inspection (BSMI) is introducing mandatory cybersecurity requirements for selected information technology and audiovisual products. This initiative marks a significant shift, making cybersecurity an integral part of product market access in Taiwan . The new framework incorporates several…
FCC Intensifies Oversight of Test Laboratories: Time to Reassess U.S. Market Access Strategies
Background: A New Era of Scrutiny In June 2026, FCC Chairman Brendan Carr announced a significant enforcement action against a test laboratory that submitted false test results . This move underscores the Federal Communications Commission’s unwavering commitment to protecting the integrity of its equipment authorization program. While this enforcement targeted…
CRA Compliance Starts with Product Classification: How to Define Your Product Under the Cyber Resilience Act
As the European Union’s Cyber Resilience Act (CRA) moves toward full implementation, manufacturers across multiple industries are assessing its impact on their products and development processes. A fundamental question The One Lab’s CRA consulting team hears at the outset of nearly every CRA project: “What category does my product belong…
IEC 62443 Certified? Why That Still Doesn’t Mean You’re CRA Compliant
One of the most common questions in the realm of cybersecurity compliance, particularly concerning the EU Cyber Resilience Act (CRA), is whether existing IEC 62443 certification automatically translates to CRA compliance. The short answer is: not necessarily. While IEC 62443 is a widely referenced cybersecurity framework, it’s crucial to understand…