Page 6 - Nemko - Annual performance - 2021

Cyber security and IoT:

Changing regulatory landscape

The world of cyber continues to develop. The We foresee developments outside of the EEA,
boundaries between our digital and physical and expect a corressponding increase in the
world become vaguer driven by the introduction demand for Nemko’s cyber secuirity services in
of 5G and the rapid growth in the number of the years to come.
interconnected devices (Internet of Things,
IoTs). A growing number of IoT devices equals Developing our cyber security
increased risk of cybercrimes – for individuals, offerings
businesses and communities. Therefore, it
is necessary to to ensure that the IoTs put Nemko continuse to develop our cyber security
on market are secure. For many years the services to support our customers’ access to
regulatory requirements for cyber security have markets globally.
been limited. Until now.
In 2021, we further developed the Nemko IoT

New regulations on IoT cyber Security Certification scheme, and our
evaluation capabilities at our Nemko offices,
while simultaneously establishing partner
The regulatory framework within cyber security
has for many years not kept pace with the agreements with evaluation laboratories
growth in cyber security devices and the worldwide. We have strengthened our
corresponding risks. But an increased tendency capabilities within common criteria evaluation
in many countries towards introducing national for critical infrastructure and defense industry,
or regional cyber security market requirements, and also established a pen-test lab. This
suggest that this is about to change. enables us to remain relevant as a third party
for our customers.
In 2021, two important steps were taken
towards establishing a regulatory framework
that can help protect consumers of IoT.
First, the Cybersecurity Act came into force.
This introduced a European cyber security
certification framework for information and
communications technology. Second, the
European Commission implemented the cyber
security in the Radio Equipment Directive.
This implementation makes cyber security
a mandatory requirement for all connected
products that are being imported to the EEA
– and therefore needs a CE marking – from
August 2024.

4