Checklists for device makers
Free PDF checklists for device makers: the EU Cyber Resilience Act, ER: 01 before the lab, SBOMs for each release and device passwords.
Download a checklist
Each checklist lists its sources, checked on 24 October 2026.
EU Cyber Resilience Act: manufacturer checklist
For connected products sold in the EU. Reporting under Article 14 applies from 11 September 2026; the rest from 11 December 2027.
13 items, PDF
ER: 01 pre-lab checklist for CCTV and IP cameras
Before you book an STQC recognised lab. Item numbers follow STQC's procedure for CCTV testing; the lab and STQC make the final call.
20 items, PDF
SBOM checklist for device makers
For each firmware release you ship. Formats: CycloneDX (ECMA-424) or SPDX (ISO/IEC 5962:2021).
9 items, PDF
Device password checklist: UK PSTI, EU and US rules
One password design that meets the UK PSTI rules, ETSI EN 303 645 provision 5.1-1, the EN 18031 restriction on optional passwords, and the California and Oregon connected device laws.
8 items, PDF