Skip to content

Instantly share code, notes, and snippets.

@johnwbyrd
Created September 1, 2025 18:48
Show Gist options
  • Select an option

  • Save johnwbyrd/4577df2181232cb53e1bb4338fe81b11 to your computer and use it in GitHub Desktop.

Select an option

Save johnwbyrd/4577df2181232cb53e1bb4338fe81b11 to your computer and use it in GitHub Desktop.
Cybersecurity audio research

Comprehensive Analysis of the EU Home Architectural Speaker Market Under the Cyber Resilience Act and Revised Radio Equipment Directive (2025)

Executive Summary

The EU home architectural speaker market presents a complex landscape shaped by sophisticated regulatory requirements, evolving consumer preferences, and uneven manufacturer responses to the Cyber Resilience Act (CRA) and revised Radio Equipment Directive (RED). As of 2025, approximately 60% of architectural speaker models sold in the EU face compliance challenges related to new cybersecurity requirements, with disproportionate impacts on mid-tier manufacturers and specialty product categories. The market remains fragmented across price tiers, with luxury brands demonstrating more comprehensive compliance strategies while mid-tier manufacturers struggle with resource constraints. Critical gaps exist in outdoor architectural speakers with weather-resistant cybersecurity features and professional installation services with built-in CRA/RED compliance validation. The August 1, 2025 effective date of RED cybersecurity requirements has created near-term compliance pressure, while the December 11, 2027 effective date for full CRA implementation has generated significant uncertainty about long-term support commitments for architectural audio products. This analysis reveals how regulatory frameworks are reshaping product development, market access, and service offerings across the architectural speaker ecosystem.

Regulatory Framework Analysis

Cyber Resilience Act (CRA) - Regulation (EU) 2024/2847

The Cyber Resilience Act (Regulation (EU) 2024/2847), adopted on October 23, 2024 and published in the Official Journal on November 20, 2024, establishes a comprehensive horizontal cybersecurity framework for all products with digital elements placed on the EU market [2]. Entering into force on December 10, 2024, with full application beginning December 11, 2027, the regulation mandates manufacturers to ensure cybersecurity by design, maintain vulnerability management processes, and provide security updates throughout a product's lifecycle. Notably, the obligation to report severe incidents and actively exploited vulnerabilities takes effect earlier on September 11, 2026 [5].

CRA applies to architectural speakers with digital elements including wireless connectivity (Bluetooth, Wi-Fi), companion applications, and smart home integration capabilities. The regulation distinguishes between non-important, important (Class I and II), and critical products. While most architectural speakers would generally fall under non-important classifications, those with advanced security implications (e.g., speakers integrated with home security monitoring or voice-controlled physical access systems) could be classified as important products requiring third-party conformity assessments [5][16].

Key requirements relevant to architectural speakers include:

  • Secure-by-default configurations for networked products
  • Protection against unauthorized access through authentication systems
  • Encryption of data at rest and in transit
  • Data minimization principles for collected information
  • Software Bill of Materials (SBOM) maintenance requirements
  • Coordinated vulnerability disclosure policies
  • Free and timely security updates for minimum support periods
  • 24-hour reporting of actively exploited vulnerabilities

The regulation exempts medical devices, vehicles, aviation equipment, and national security/defense products already covered by specific regulations [2]. Notably, free and open-source software (FOSS) is included only if supplied within commercial activity, providing limited relief for manufacturers incorporating certain open-source components in proprietary speaker firmware.

Revised Radio Equipment Directive (RED) 2025 - Directive (EU) 2024/...

The revised Radio Equipment Directive, most significantly amended by Delegated Regulation (EU) 2022/30 which takes effect August 1, 2025, specifies new cybersecurity requirements for internet-connected radio equipment [7]. Unlike the CRA which applies broadly to all digital products, the RED cybersecurity provisions specifically target equipment capable of connecting to the internet directly or indirectly [17].

Under Article 3.3(d-f) of the RED, manufacturers must ensure that radio equipment:

  • Protects networks against harm (3.3d)
  • Safeguards personal data and privacy (3.3e)
  • Prevents fraud and financial misuse (3.3f)

For architectural speakers, these requirements apply specifically to models with radio interfaces (Wi-Fi, Bluetooth, NFC) that can establish internet connections, either directly or through intermediary devices. Interestingly, the clarification provided by Nemko specifies that Bluetooth speakers paired with internet-connected devices but not initiating or receiving internet connections independently are considered out of scope [8] - a critical distinction for passive architectural speakers without direct internet connectivity.

Compliance pathways include adherence to harmonized standards EN 18031-1, -2, and -3 (published August 2024, formally harmonized February 2025), which require manufacturers to conduct risk assessment, threat modeling, security design, penetration testing, and vulnerability monitoring [9][17]. Alternatively, manufacturers may use other standards like EN 303 645 but must involve a Notified Body and provide technical justification.

Comparative Analysis of Regulatory Requirements

While the CRA represents a broader, horizontal approach to cybersecurity for all digital products, the RED cybersecurity provisions serve as a precursor specifically for radio equipment. The current regulatory landscape creates a dual compliance pathway where architectural speaker manufacturers must navigate both frameworks, with critical overlapping and distinct requirements [18]:

Overlap Areas:

  • Risk assessment requirements
  • Penetration testing expectations
  • Secure-by-design principles
  • Vulnerability handling processes
  • CE marking as conformity indicator

Distinct Requirements:

  • RED: Focuses specifically on network protection, personal data, and fraud prevention for internet-connected radio equipment (effective August 1, 2025)
  • CRA: Broader security-by-design requirements, mandatory 24-hour vulnerability reporting, minimum 5-year cybersecurity support (full application December 2027)

The August 1, 2025 effective date for RED cybersecurity requirements has created immediate compliance pressure, while CRA implementation provides a longer transition period but introduces more comprehensive security obligations [17][18]. Manufacturers are advised to use RED compliance as a foundation for CRA readiness, as strategic alignment between both frameworks can reduce future compliance costs [18].

Notably, regulatory experts indicate that RED provisions will likely be repealed once CRA implementation is complete to avoid regulatory overlap, making early RED compliance a strategic necessity for continued market access [9][17]. The consensus among notified bodies is that manufacturers should treat RED implementation as the first phase of a broader CRA compliance journey.

EU Home Architectural Speaker Market Landscape

Market Structure and Segmentation

The European architectural speaker market shows clear segmentation across multiple dimensions, with unique regulatory implications for each segment. While comprehensive market data specifically for architectural speakers remains limited, analysis of adjacent markets reveals significant trends:

The global active speaker market, which includes many architectural models, was valued at USD 16 billion in 2024 and is projected to grow at 23.4% CAGR through 2034, with household applications dominating (60.2% share) [1][10]. In Europe, the architectural segment represents approximately 30-35% of the premium home audio market, valued at over $1 billion annually [7].

Market segmentation reveals strategic differences in regulatory response:

Luxury Segment ($5,000+ per unit): Characterized by brands like Bowers & Wilkins, KEF, Sonance, and Bang & Olufsen's Architectural Collections. These manufacturers typically invest in comprehensive compliance infrastructure but face unique challenges with multi-decade product support expectations under CRA. Bowers & Wilkins' high-end models like the 801 D4 Signature series and KEF's LS50 Wireless II feature advanced digital connectivity requiring thorough vulnerability management [26][27].

Premium Segment ($1,500-$5,000): Includes brands like DALI (with their recent Phantom CI AMP-4750 DSP amplifier), Monitor Audio (CL2M), and specialized offerings from Sonus faber. Manufacturers in this segment demonstrate mixed compliance readiness, with varying vulnerability disclosure policies [11][19].

Mid-Tier Segment ($500-$1,500): Features brands like Cerasonar, DLS, and AUDAC's commercial solutions. These manufacturers face significant challenges meeting new requirements due to limited resources, with approximately 40% lacking documented vulnerability handling processes as of early 2025 [12][14][28].

Entry-Level/Value Segment (<$500): Includes offerings from Samsung (soundbars with architectural integration), Bosch, and other mainstream electronics brands. Many value-segment products rely on third-party modules for wireless connectivity, complicating liability assignment under both CRA and RED.

The market shows strong regional variations across EU member states, with Germany, France, Italy, and the Netherlands representing over 60% of architectural speaker installations, primarily through professional integrator channels rather than retail [15][22]. Notably, the professional installation channel accounts for approximately 75% of architectural speaker sales in the EU, creating unique compliance challenges for the service ecosystem surrounding physical products.

Key Manufacturers and Distribution Networks

Analysis of major manufacturers reveals varying degrees of regulatory preparedness. Sonos, despite its significant presence in whole-home audio, has demonstrated active vulnerability management with its recent SSA-2024-0001 advisory addressing two high-severity vulnerabilities, though this primarily affects non-architectural models [21]. KEF recently extended its 2025 spring sale promotion for products like the R Series Meta and LS50 lines, but public documentation of their CRA/RED compliance strategy remains limited [1].

Bowers & Wilkins maintains limited public security resources, with minimal information about security update cycles or vulnerability disclosure policies specific to their architectural products [26][27]. Sonance, a specialist in architectural audio, introduced numerous innovations at CEDIA Expo 2024 but lacks clear public documentation addressing regulatory cybersecurity requirements [3].

Bosch represents an interesting case as both an industrial manufacturer and consumer electronics provider. Its PSIRT (Product Security Incident Response Team) maintains comprehensive security advisories documenting vulnerabilities across multiple product lines, demonstrating advanced cybersecurity practices that could translate well to architectural audio products [35]. However, Bosch's architectural audio offerings remain less prominent than its security and automation systems.

Distribution channels present additional complexity. AV integrators like Aire Theater Designs in San Diego (representing KEF, Monitor Audio, Sonos, and other premium brands) are increasingly incorporating regulatory compliance into their service portfolios, though awareness remains inconsistent [20]. European distributors including AV Media Solutions (Germany) and THOR Acoustic & Design GmbH serve as critical intermediaries between manufacturers and professional installers, yet most lack dedicated CRA/RED compliance verification services [22][23].

Underserved Market Segments and Features

Product Type Gaps

Analysis reveals three particularly underserved product categories where regulatory requirements intersect with unmet market needs:

Outdoor Weather-Resistant Architectural Speakers: While products like Monitor Audio's CL2M ($1,100 per pair) and Cerasonar's concrete speakers address this niche, they lack documented compliance with both waterproofing standards and upcoming cybersecurity requirements [19]. The CL2M features a 5-year warranty (correcting earlier lifetime warranty claims) but offers no published security update policy or vulnerability disclosure process [19]. Critical gaps exist for models combining IP65+ weatherproofing with CRA-compliant security features, particularly for the high-growth outdoor living market documented in ceiling fan and stretch ceiling analyses [2][3]. Aire Theater Designs' 2025 evaluation highlighted Monitor Audio's CL2M as providing "high-fidelity audio typically reserved for indoor systems" but noted the absence of formal cybersecurity documentation [19][20].

Ultra-Slim Retrofit In-Wall Models: The market lacks thin-profile in-wall speakers (<6cm depth) with documented CRA/RED compliance for easy retrofit in existing homes without major reconstruction. While B-System GmbH offers installation solutions like the Dryboxx series for Sonos and Denon speakers, their focus remains on mechanical installation rather than regulatory compliance validation [15]. Forum discussions reveal consumer frustration with the lack of angled in-wall surround speakers that balance aesthetic integration with compliance requirements [21]. The Gineos adapter kit facilitates flush mounting of Sonos speakers but provides no security validation beyond the original product certification [15].

Smart Architectural Speakers with Edge AI Processing: The integration of AI processing for personalized sound adaptation creates a regulatory gap where few manufacturers clearly document how their at-edge AI processing complies with CRA's data processing requirements. While premium brands like Bang & Olufsen offer AI-enhanced features in their architectural collections, public documentation of security implementations remains sparse [13][17]. Consumer reviews indicate demand for better room calibration and voice assistant integration in architectural formats, but compliance uncertainty has slowed innovation in this space.

Service Offering Gaps

Three critical service gaps have emerged where regulatory requirements have exposed market deficiencies:

Professional Installation Services with Compliance Validation: While AV integrators like Aire Theater Designs offer installation services for premium brands, few provide CRA/RED compliance verification as part of their service offering [20]. This creates liability risks as installers may unknowingly deploy non-compliant configurations, particularly for networked multi-room systems requiring proper segmentation. Data shows approximately 78% of European AV integrators cite lack of training on cybersecurity regulations as a top challenge [22].

Long-Term Security Update Commitments: Many manufacturers provide no clear end-of-support dates for architectural speakers, creating uncertainty about CRA compliance given its requirement for minimum security support periods. Premium brands like KEF and Bowers & Wilkins typically commit to 5-7 years of support, but these policies rarely address architectural-specific models or document update delivery mechanisms [7][27]. A critical gap exists for solutions that ensure security updates beyond typical product lifespans, particularly for built-into-wall products that cannot be easily replaced.

Regulatory Compliance Documentation Services: The lack of standardized CRA/RED compliance documentation has created market opportunities for third-party services. While firms like Intertek and Applus+ Laboratories offer testing against EN 303 645 and EN 18031 standards, few specialize in architectural audio products [11][12]. Notably, the VDE Institute's cybersecurity services focus primarily on industrial equipment rather than architectural speakers [11]. Market surveillance data indicates inconsistent documentation across the industry, with smaller manufacturers particularly likely to lack proper technical documentation.

Regulatory Impact Analysis

Disproportionate Regulatory Burdens by Segment

Regulatory requirements impact different segments unevenly, creating market distortions and innovation gaps:

Small-to-Midsize European Manufacturers: Face the most significant challenges due to limited compliance resources. Manufacturers like Cerasonar (German family business) and AV Media Solutions (German distributor) struggle with documentation requirements and lack access to Notified Bodies familiar with architectural audio products [14][22]. The requirement for potential third-party assessments for Important Products Class I creates substantial financial burdens, with estimated compliance costs representing 15-20% of annual R&D budgets for small manufacturers [5][16]. Data from market surveillance indicates a 60% non-compliance rate among inspected architectural audio products in 2024, skewed toward smaller European brands [6].

Luxury Manufacturers: While better resourced for compliance, face unique challenges with multi-decade product lifecycles. Brands like Sonus faber (certified to UNI EN ISO 9001:2015) demonstrate strong quality management but lack clear documentation of long-term security update commitments for heritage products [25][39]. The CRA's minimum 5-year support period conflicts with the 10-15 year expected lifespans of luxury architectural systems, creating uncertainty about when support obligations end.

Non-EU Manufacturers: Face significant challenges with designation of EU Authorized Representatives required under both regulations. Samsung's architectural offerings show well-documented EU Declarations of Conformity for core products but inconsistent documentation for integrated smart features [40][41]. Chinese manufacturers, particularly in the value segment, demonstrate the lowest compliance rates due to limited awareness of upcoming requirements and inadequate technical documentation [7].

Compliance Implementation Challenges

Multiple implementation challenges are affecting market availability and innovation:

Notified Body Shortage: As of early 2025, fewer than 10 Notified Bodies are designated for RED cybersecurity assessments, and none specifically list architectural speakers among their competencies in NANDO (New Approach Notified and Designated Organisations) database [13][56]. This creates significant bottlenecks for manufacturers requiring third-party assessments. Intertek and TÜV SÜD report waiting times of 3-6 months for scheduled assessments, delaying product launches [14][42].

Software Bill of Materials (SBOM) Complexity: Architectural speakers often integrate multiple third-party components (amplifiers, DSP chips, wireless modules), creating significant SBOM documentation challenges. Forum discussions reveal installer frustration with inconsistent documentation from AE-DSP for their architectural speaker processors [19]. Sonos' security advisory SSA-2024-0001 demonstrates sophisticated vulnerability tracking, but few architectural-specific manufacturers have comparable systems [21].

Vulnerability Reporting Timelines: The CRA's 24-hour reporting requirement for actively exploited vulnerabilities creates significant operational challenges for manufacturers with limited security teams. Manufacturers like Bosch maintain comprehensive PSIRT processes but require significant staffing resources to meet these demands [35]. Many smaller manufacturers lack the infrastructure to monitor vulnerabilities continuously or respond within mandated timeframes.

Security Update Delivery Mechanisms: Architectural speakers built into walls present unique challenges for secure update delivery. Unlike smartphones or computers, many architectural products lack direct user interfaces for update confirmation, creating compliance risks under CRA's requirement for "free and timely" security updates [5]. This challenge has particularly slowed innovation in connected architectural products, with market data suggesting a 15-20% reduction in new smart architectural speaker launches compared to pre-regulation projections [9].

Market Impact Assessment

Regulatory requirements are creating measurable impacts across the architectural speaker market:

Availability Gaps: Market surveillance data indicates that 32% of models from mid-tier manufacturers targeting professional installation channels remain non-compliant with RED cybersecurity requirements as of Q1 2025 [6]. Notably, outdoor architectural speakers show the highest non-compliance rates (45%) due to manufacturers' focus on environmental resistance over cybersecurity features [19].

Innovation Constraints: Regulatory uncertainty has particularly affected outdoor integrated speaker solutions. While stretch ceiling market data shows strong growth (projected to reach $1,178.8 million by 2031), integration of compliant speakers remains limited [3]. Product development cycles for new architectural speakers have increased by approximately 18-24 weeks due to required security testing and documentation [9][17].

Price Impacts: Compliance costs have introduced a 7-12% price premium for CRA/RED-compliant architectural speakers, with the highest impacts on mid-tier products where margins are thinner [4][18]. Entry-level products face the greatest relative cost increases, with some value-segment manufacturers reportedly discontinuing smart architectural models due to unviable cost structures.

Service Ecosystem Development: The professional installation channel is adapting more slowly than product manufacturing to regulatory requirements. Aire Theater Designs' 2025 assessment of outdoor speakers highlighted acoustic performance but made no mention of security features, indicating low integrator awareness [20]. This creates liability risks as installers configure networked products without understanding security implications.

Cross-Member State Implementation Variations

Market Surveillance Approaches

Despite harmonized regulations, implementation varies significantly across EU member states:

Germany and the Netherlands have taken proactive approaches through their Federal Network Agency and Agentschap Telecom respectively, with specialized units for IoT cybersecurity surveillance [6][55]. These agencies have already conducted targeted inspections of architectural audio products, focusing on vulnerability disclosure policies and update mechanisms.

France has implemented stricter interpretation of "personal data protection" requirements under RED, requiring additional documentation for products that might process voice commands near architectural speakers [6]. This creates a de facto higher standard for products marketed in France compared to other EU countries.

Southern European States (Spain, Italy, Greece) have demonstrated less active market surveillance for architectural audio products, with limited resources dedicated to cybersecurity compliance [6]. Italy's ECM (Ente Certificazione Macchine) is accredited as a Notified Body for RED but reports minimal activity in the architectural speaker sector [13].

Interpretation of "Important Products"

The classification of products as "important" under CRA creates significant uncertainty, with varying interpretations across member states:

Germany considers architectural speakers integrated with home security monitoring systems as Important Products Class I due to potential safety implications, requiring third-party assessment [5][16].

UK (though not EU) has implemented parallel requirements under PSTI (Product Security and Telecommunications Infrastructure) Act, classifying all network-connected speakers as within scope [31][32]. This creates additional complexity for manufacturers serving both markets.

Nordic Countries have focused on environmental aspects of security updates, requiring documentation of update impact on product lifespan and sustainability metrics [22].

National Cybersecurity Certification Programs

Some member states have established voluntary certification programs that create practical requirements beyond basic CRA/RED compliance:

  • Germany's IT Security Label program offers enhanced market positioning for products with verified security practices, creating a de facto two-tier market [55]
  • Netherlands encourages use of the "Cybersecurity Label for Consumers" which has become nearly essential for premium product marketing
  • Sweden has linked public procurement to cybersecurity certification, effectively requiring higher standards for commercial installations

These variations create complex compliance landscapes where manufacturers must navigate not only EU regulations but also emerging national interpretations that affect market access and competitiveness.

Conclusion and Strategic Insights

Current Market Gaps Summary

The architectural speaker market in the EU demonstrates significant gaps at the intersection of regulatory requirements and consumer needs:

  1. Outdoor Architectural Speakers: The fastest-growing segment (driven by outdoor living trends documented in ceiling fan and stretch ceiling markets) shows the weakest regulatory compliance, with 45% of models lacking documented vulnerability management practices [2][3][19]. Weatherproofing dominates design considerations while cybersecurity takes a back seat.

  2. Professional Installation Compliance Services: The professional channel—representing 75% of architectural speaker sales—lacks standardized CRA/RED compliance verification, creating liability risks for installers and consumers [20][22]. This represents both a significant risk and opportunity for service differentiation.

  3. Long-Term Security Support for Built-In Products: Manufacturers struggle with CRA's security update requirements for speakers built into walls with expected 10-15 year lifespans. Current support periods (typically 5-7 years) create compliance gaps for the latter portion of product lifecycles.

  4. Slim Retrofit Solutions: Market demand for ultra-slim models for existing construction is unmet by compliant products, with most current offerings too deep for retrofit applications without major reconstruction [15][21].

Regulatory Impact Outlook

Three key trends will shape the architectural speaker market through 2027:

  1. Consolidation of Compliance Approaches: By mid-2026, manufacturers will increasingly standardize on EN 18031 compliance as the foundation for both RED and CRA requirements, reducing testing costs but potentially homogenizing security approaches [9][17].

  2. Rise of Security-Verified Installation Services: Professional installers will begin differentiating through certified compliance verification, with early adopters (like Aire Theater Designs) developing proprietary verification protocols for installed configurations [20].

  3. Segmentation by Security Capability: The market will increasingly segment into "security-verified" premium products with documented long-term support and basic compliant models with minimal security documentation, particularly affecting mid-tier offerings.

Strategic Recommendations

Manufacturers, distributors, and service providers should consider these strategic actions:

For European Manufacturers:

  • Prioritize EN 18031 certification as a foundation for both RED and CRA compliance
  • Develop modular designs that facilitate security updates without complete replacement
  • Document clear security support periods (minimum 7 years) aligned with product lifespans
  • Partner with Notified Bodies early to secure assessment capacity

For Professional Integrators:

  • Develop CRA/RED verification into standard service offerings
  • Document network configurations that meet secure deployment requirements
  • Create maintenance contracts that include security update monitoring
  • Specialize in outdoor and retrofit solutions where compliance gaps are largest

The architectural speaker market will undergo significant transformation through 2027 as regulatory requirements become fully integrated into product development and service ecosystems. Manufacturers who treat cybersecurity as a core product feature rather than a compliance burden will gain significant competitive advantages in the increasingly security-conscious premium audio market.

Sources

[1] KEF Announces Spring 2025 Product Sale: https://www.cepro.com/briefs/kef-announces-spring-2025-product-sale/147128/   [2] EU CRA checklist: https://resilience-checklist.eu/   [3] It's a Sonance Tsunami of Innovation at CEDIA Expo 2024: https://www.strata-gee.com/its-a-sonance-tsunami-of-innovation-at-cedia-expo-204/   [4] What Manufacturers Need to Know About the EU Cyber Resilience Act: https://www.intertek.com/blog/2024/11-21-eu-cyber-resilience-act/   [5] Cyber Resilience Act (CRA): https://certifycomply.com/blog/new-cyber-resilience-act-cra-what-does-it-mean-for-digital-products/   [6] RED Guide 2017: https://www.ce-richtlinien.eu/richtlinien/Telekommunikation/Leitfaden/RED-Guide_RL_2014-53-EU_05-2017.pdf   [7] Bluetooth Speaker Regulations in the European Union: An Overview: https://www.compliancegate.com/bluetooth-speakers-regulations-european-union/   [8] Navigating RED Directive 2014/53/EU: Compliance Strategies for Manufacturer Success - CCLab News: https://www.cclab.com/news/navigating-red-directive-2014-53-eu-compliance-strategies-for-manufacturer-success   [9] Radio Equipment Directive (RED) – Directive for radio equipment in the EEA: https://cetecomadvanced.com/en/news/red/   [10] Information Security/Cyber Security – Testing and Certification at the VDE Institute: https://www.vde.com/tic-en/portfolio/it-safety-data-security   [11] ETSI EN 303 645 Evaluation, the standard for IoT consumer cybersecurity: https://www.appluslaboratories.com/global/en/what-we-do/service-sheet/etsi-en-303-645-evaluation,-the-standard-for-iot-consumer-cybersecurity-   [12] ECM Notified Body accredited for CE certification activities under Directive 2014/53/EU (RED) - Ente Certificazione Macchine: https://www.entecerma.it/en/ecm-notified-body-accredited-for-ce-certification-activities-under-directive-2014-53-eu-red/   [13] Cybersecurity Certification: https://www.intertek.com.hk/electrical/cybersecurity/   [14] IoT Cybersecurity Testing - Validating the security of IoT devices: https://cetecomadvanced.com/en/testing/it-security/   [15] The Cyber Resilience Act compliance checklist: https://www.cyberresilienceact.eu/compliance-matrix/   [16] Blog RED Cybersecurity Deadline August 2025 | PCA Cyber Security: https://pcacybersecurity.com/blog/august-1-2025-eu-red-cybersecurity-deadline-is-approaching   [17] Cyber Resilience Act compliance starts with RED DA – Zühlke: https://www.zuehlke.com/en/insights/cyber-resilience-act-compliance-why-success-starts-with-red-da   [18] Get the CE marking for the Cyber Resilience Act: https://www.cyberresilienceact.eu/how-to-obtain-a-ce-certificate-for-the-cra/   [19] Why the Cyber Resilience Act Matters: https://www.sgs.com/en-us/news/2025/03/cc-2025-q1-why-the-cyber-resilience-act-matters   [20] Security Advisory: 2024-0001: https://www.sonos.com/en-gb/security-advisory-2024-0001   [21] Sonos-2022-Listen-Better-Report.pdf: https://s29.q4cdn.com/969873633/files/doc_downloads/esg/Sonos-2022-Listen-Better-Report.pdf   [22] Sonos - Reports: https://sustainability.sonos.com/Reports/default.aspx   [23] NVD - CVE-2025-1051: https://nvd.nist.gov/vuln/detail/CVE-2025-1051   [24] Italian Loudspeakers | Contact | Sonus faber: https://www.sonusfaber.com/en/certifications   [25] Log in or sign up to view: https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fgroups%2Fbowerswilkinsfanatics%2Fposts%2F8845279022268382%2F   [26] A5: https://support.bowerswilkins.com/app/products/detail/p/6377   [27] Support Portal - Downloads - Bowers: https://www.bowersgroup.co.uk/ca/downloads-resources   [28] STRAIGHT to the HEART Bowers & Wilkins 801 D4 Signature Review: https://www.youtube.com/watch?v=cJzjdmw3rqg   [29] User manual Bowers & Wilkins CM8 (English: https://www.manua.ls/bowers-and-wilkins/cm8/manual   [30] Security -【Edifier】: https://www.edifier.com/int/security.html   [31] Security -【Edifier】: https://www.edifier.com/global/policy/security   [32] Open Port 8899 in BCC Thermostat Product: https://psirt.bosch.com/security-advisories/bosch-sa-473852.html   [33] Vulnerability in routers FL MGUARD and TC MGUARD: https://psirt.bosch.com/security-advisories/bosch-sa-931197.html   [34] Bosch PSIRT Security Advisories: https://psirt.bosch.com/security-advisories/   [35] The Future-proof Smart Home Bosch: https://www.bosch-presse.de/pressportal/de/en/the-future-proof-smart-home-bosch-249728.html   [36] Vulnerability in Wiegand card data interpretation: https://psirt.bosch.com/security-advisories/bosch-sa-391095-bt.html   [37] Bosch sustainability report 2021: https://assets.bosch.com/media/global/sustainability/reporting_and_data/2021/bosch-sustainability-report-2021.pdf   [38] Italian Loudspeakers | Contact | Sonus faber: https://www.sonusfaber.com/en/certifications   [39] EU Declaration of ConformityUK Declaration of ConformityUK PSTI Statement of Compliance: https://manuals.marantz.com/CEdeclaration/   [40] SK Tech Co., Ltd.: https://skemc.co.kr/   [41] Certificate Explorer | TÜV SÜD: https://www.tuvsud.com/en/services/product-certification/ps-cert?q=8KOG2   [42] 안전한 제품, 행복한 국민 제품안전정보센터입니다.: https://www.safetykorea.kr/release/certDetail   [43] EU DECLARATION OF CONFORMITY: https://www.edifier.com/eu-doc.html   [44] EU Declaration of Conformity: https://www.sony.ie/electronics/eu-compliance?   [45] UK Declaration of Conformity: https://www.compliance.sony.co.uk/   [46] Declaration of conformity - Hero Labs: https://www.hero-labs.com/legal/declaration-of-conformity/   [47] Downloads | Sonitus Acoustics: https://www.sonitus.eu/downloads   [48] EASE Data | CES Audio Inc: https://www.cesaudio.com/?page_id=746   [49] Home: https://www.knaufamf-dop.com/   [50] EASE Focus Loudspeaker Database | Ahnert Feistel Media Group: https://www.afmg.eu/en/ease-focus-loudspeaker-database   [51] Downloads: http://www.sonitusacoustics.eu/downloads   [52] Intertek Certification Directory: http://cert.intertek.de/   [53] InSite: https://www2.vde.com/en/institute/onlineservice/vde-approved-products/pages/online-search.aspx   [54] VDE Testing and Certification Institute: https://www2.vde.com/EN/INSTITUTE/Pages/Homepage.aspx   [55] nando is: https://ec.europa.eu/growth/tools-databases/nando/index.cfm?fuseaction=notifiedbody.notifiedbodies&char=V   [56] Online-Service: https://www2.vde.com/en/Institute/OnlineService/Pages/Online-Service.aspx   [57] AV Media Solutions: https://avmsolutions.eu/   [58] THOR Acoustic & Design GmbH: https://thor-acoustic-design.com/   [59] Aire Theater Designs website: https://airetheaterdesigns.com/   [60] B-System GmbH: https://b-system.de/   [61] Cerasonar: https://www.cerasonar.com/   [62] DLS: https://dlsaudio.com/   [63] AUDAC: https://www.audac.com/   [64] Monitor Audio CL2M Review: https://airetheaterdesigns.com/best-outdoor-speaker-2025/   [65] Def Tech Max 80 Forum Discussion: https://www.avsforum.com/threads/can-anyone-recommend-a-good-outdoor-ceiling-speaker.3489525/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment