exida releases risk assessment tool to support EU Cyber Resilience Act compliance
exida has introduced the exSILentia® CRA software to assist manufacturers with the mandatory product risk assessments required by the EU's upcoming Cyber Resilience Act.
Industrial cybersecurity firm exida has launched exSILentia® CRA, a software tool designed to streamline the technical documentation and risk assessment processes mandated by the EU Cyber Resilience Act (CRA). As manufacturers prepare for the December 2027 compliance deadline, the tool aims to reduce the manual labor associated with evaluating product portfolios for security vulnerabilities.
The CRA requires companies to conduct comprehensive Threat Analysis and Risk Assessments (TARA) to demonstrate that connected devices meet essential cybersecurity standards. exSILentia® CRA integrates pre-defined risk matrices and compliance frameworks directly into the existing exSILentia® platform, allowing engineering teams to follow a structured workflow rather than building assessments from the ground up.
According to exida CTO Iwan van Beurden, the goal is to allow developers to focus on product features while maintaining compliance standards. The company explicitly notes that while the tool supports the assessment process, utilizing the software does not constitute or replace a formal third-party certification or regulatory compliance assessment.