Free Template and Workflows for EN 18031 Technical Documentation

The hEN 18031 series comprises a set of innovative standards designed to enhance the cybersecurity of Internet-connectable radio equipment. Due to its horizontal nature—meaning the standards can be applied across various technologies—this series presents certain challenges. These include a lack of clear guidance, definitions, and examples, as well as ambiguity in identifying and documenting applicable requirements. Such issues can create significant hurdles for manufacturers aiming to create Technical Documentation that complies with the RED Delegated Act.

To assist manufacturers in navigating these challenges, we have published a range of materials and guidance, available free of charge on the Zealience repository.

• Technical Documentation template for hEN 18031-1, -2 and -3
• Test Plan template for hEN 18031-1, -2 and -3
• Workflows to identify applicable requirements

Templates for the hEN 18031 series of standards

Technical Documentation Template for hEN 18031-1, -2 and -3

This template is designed to help manufacturers of connected products compile the Technical Documentation necessary to demonstrate compliance with the hEN 18031-1, -2 and -3 standards. It provides a structured approach for documenting the Required Information expected by the standards.

The template aims to balance ease of use for manufacturers documenting the Required Information and for evaluators reviewing the submissions. For guidance on how to use the template, please refer to the README.md file included in the repository.

For guidance on usage, please refer to the README.md file included in the repository alongside the template.

Test Plan Template for hEN 18031-1, -2 and -3

After creating your Technical Documentation, it is essential to conduct testing (i.e., assessments) to ensure that your documentation meets the required standards. The Test Plan template encompasses all tests outlined in hEN 18031-1, -2 and -3.

Workflows to identify applicable requirements (i.e., mechanisms)

The hEN 18031 series does not provide a straightforward method for manufacturers to identify applicable requirements upfront. Instead, manufacturers must first identify and classify their assets, followed by determining which requirements need to be applied to protect them. This process of asset identification and subsequent identification of applicable requirements must be repeated multiple times to complete the Technical Documentation.

The workflow diagrams available in the Zealience repository provide visual representations of this iterative process for each requirement, including Asset Control Mechanism (ACM), Asset Usage Management (AUM), and Security State Management (SSM).

We recommend using our Technical Documentation template in conjunction with these workflows, as they are designed to complement each other effectively.