Network Security

Do regular Zigbee and Bluetooth sub-devices need to undergo RED network security certification?

If a product factory has obtained CE certification and RED network security certification, can the certificates and reports be transferred/derived to multiple brand partners they work with? Does each brand need to undergo certification themselves?

Does a custom-developed adapter board module need to undergo separate CE RED and network security certification?

For a module with custom firmware, if RED network security certification is required, should the custom firmware be used for the RED network security certification testing?

What are the similarities and differences between the network security technical requirements of RED DA (Radio Equipment Directive Delegated Act) and other network security technical requirements (such as EN 303 645, UK PSTI, NIST 8259A)?

What tests need to be conducted on the product to meet NISTIR 8259A, and is whole machine testing required?