Cybersecurity, Trusted Labs & Compliance Testing Updates
Product compliance continues to evolve across cybersecurity, equipment authorization, post-market surveillance, and laboratory testing requirements. This month’s Washington Laboratories update highlights practical considerations for manufacturers, engineers, and compliance teams preparing products for U.S., EU, and global markets.
In This Issue:
- From the Vault: Cyber Security for Product Compliance
- EU Cyber Resilience Act: Key Dates for Product Developers
- Trusted Test Labs: A Laboratory Perspective
- Post-Market Surveillance: Why Test Planning Matters
- Technical Compliance & Testing Support
From the Vault: Cyber Security for Product Compliance
As connected products become increasingly common across consumer, industrial, medical, and wireless markets, cybersecurity is becoming an important part of product compliance and global market access.
In this Washington Laboratories Academy webinar, Mike Violette and the ACB team discuss emerging cybersecurity frameworks, product security considerations, FCC cyber labeling initiatives, ETSI EN 303 645, EU Radio Equipment Directive cybersecurity requirements, supply chain security, and the growing role cybersecurity plays in product certification and compliance programs.
Although originally presented as part of the Washington Laboratories Academy series, the topic remains highly relevant as manufacturers prepare for evolving cybersecurity expectations, including the FCC Cyber Trust Mark program and the EU Cyber Resilience Act.
View Webinar Resource Page →
Watch on YouTube →
EU Cyber Resilience Act: Key Dates for Product Developers
The EU Cyber Resilience Act (CRA) introduces cybersecurity requirements for products with digital elements placed on the European Union market. As implementation milestones approach, manufacturers should begin evaluating how cybersecurity obligations may affect product development, technical documentation, software maintenance, vulnerability handling, and conformity assessment planning.
From a laboratory and product-development perspective, manufacturers should also consider how cybersecurity requirements may connect with existing EMC, RF, safety, software, and documentation workflows. Preparing early can help reduce last-minute compliance gaps as the CRA deadlines approach.
Key CRA Dates
September 11, 2026
Reporting obligations begin for actively exploited product vulnerabilities and severe cybersecurity incidents.
December 11, 2027
Main CRA obligations apply, including broader cybersecurity requirements and CE marking expectations for covered products.
Read WL’s EU Cyber Resilience Act Article →
View Cyber Resilience Act Implementation Guidance →
View Official CRA Regulation (EU 2024/2847) →
Trusted Test Labs: A Laboratory Perspective
The FCC’s recent activity around Trusted Test Labs reflects a broader emphasis on laboratory integrity, recognized accreditation, and secure equipment authorization processes. OET has sought comment on best practices for implementing a fast-track priority review process for applications tested in Trusted Labs.
From a Washington Laboratories perspective, this discussion reinforces the importance of choosing qualified testing partners early in the product development process. A strong testing program depends not only on technical measurements, but also on defensible documentation, clear test planning, appropriate accreditation, and reliable communication between the manufacturer, laboratory, and certification team.
Why Manufacturers Should Watch This
- Trusted Lab status may influence how certain applications move through review.
- Laboratory accreditation and recognition remain central to equipment authorization confidence.
- Clear test planning and documentation can reduce delays when applications require additional review.
- Manufacturers should confirm testing pathways before scheduling final compliance work.
View FCC Trusted Test Lab Notice →
Post-Market Surveillance: Why Test Planning Matters
FCC OET is also seeking comment on possible revisions to post-market surveillance procedures. The questions raised include how surveillance samples should be selected, whether some testing should be performed by different laboratories, and whether certain products should be evaluated using real-world “out-of-the-box” testing instead of relying only on manufacturer-provided test modes.
For manufacturers, post-market surveillance is a reminder that compliance does not end when a product receives authorization. Product documentation, test modes, production consistency, firmware control, and field performance can all become important after market entry.
Lab Perspective
- Maintain complete test records and product configuration documentation.
- Keep test modes, firmware versions, and hardware revisions well controlled.
- Consider whether production units match the configuration tested during authorization.
- Plan for possible follow-up testing, especially for connected and wireless devices.
View FCC Post-Market Surveillance Notice →
Technical Compliance & Testing Support
Washington Laboratories has supported EMC, RF, product safety, environmental, medical, wireless, and MIL-STD testing programs since 1989.
Need help planning a test program or preparing for upcoming compliance requirements?
Contact Washington Laboratories |
Request a Quote
Washington Laboratories, Ltd. | Supporting Global Standards Since 1989
