360 Compliance is a legally recognized and independent cybersecurity conformity assessment laboratory.
We provide testing and evaluation services in accordance with ISO/IEC 17025:2017, EN 18031-1/ EN 18031-2/ EN 18031-3, in accordance with Article 3(3)(d), 3(3)(e), 3(3)(f) of the RED Delegated Act (EU) 2022/30 cybersecurity requirements and ETSI TS 103 701 cybersecurity requirements which are referenced as supporting compliance with the EU Cyber Resilience Act (CRA).
Our activities cover the following service areas:
Conformity Assessment:
- Evaluation of products and systems against EN 18031-1 cybersecurity requirements.
- Conformity assessment for CE RED (EU) 2022/30 cybersecurity compliance.
- Assessment of consumer IoT devices in line with ETSI TS 103 701 as referenced for CRA compliance.
Cybersecurity Testing:
- Penetration testing and security evaluations of IoT, ICT, and network-connected devices.
- Vulnerability assessments combining automated tools and manual techniques.
Risk Assessment:
- Risk-based evaluations of cybersecurity threats and vulnerabilities in ICT and IoT ecosystems.
Documentation Review:
- Examination of Technical Construction Files (TCFs) and supporting documentation for regulatory compliance.
Products and Systems Covered:
- IoT devices (consumer, industrial, and smart home).
- Network and communication equipment.
- Embedded systems and controllers.
- ICT products and platforms.
This statement is publicly available and may be shared without restriction.
The laboratory does not perform sampling activities, metrological calibration, or measurement-uncertainty evaluations, as these are not applicable to the cybersecurity domain.
You may also be interested