exida releases exSILentia CRA tool to support EU cyber regulation compliance
exida has launched a software module to assist manufacturers with the product risk assessments required under the EU Cyber Resilience Act by 2027.
Industrial cybersecurity firm exida has introduced exSILentia CRA, a software tool designed to streamline the technical documentation and risk assessment processes mandated by the EU Cyber Resilience Act (CRA). With a compliance deadline of December 2027, manufacturers of connected products must now conduct detailed product-level security evaluations.
The legislation requires manufacturers to perform comprehensive Threat Analysis and Risk Assessments (TARA) to demonstrate that products meet essential cybersecurity requirements. For companies managing large product portfolios, the manual effort required for these assessments is significant. exSILentia CRA addresses this by providing standardized templates and risk matrices based on the ISA/IEC 62443 industrial standards.
"The goal is to allow product developers to focus on building features rather than becoming legal experts in cybersecurity," said Iwan van Beurden, CTO of exida. The tool integrates the company's internal expertise in certification and cyber risk mitigation into an automated engineering workflow.
exSILentia CRA is currently available as part of the exSILentia software suite. The company clarifies that while the tool assists in documenting compliance, using the software does not equate to formal certification or regulatory approval.