exida Launches exSILentia CRA for EU Cyber Resilience Act

exida, a global pioneer in industrial automation and control system (IACS) cybersecurity and the world’s first accredited IACS Certification Body, announced the release of exSILentia CRA. This new software tool is built directly into the industry-leading exSILentia platform, and designed to streamline evaluation, reduce time to conformity and help minimize regulatory risk through an optimized threat and risk assessment workflow for manufacturers seeking compliance with the European Union’s Cyber Resilience Act (CRA).

With the enforcement deadline set for December 2027, connected-device manufacturers are scrambling to evaluate tens to thousands of existing and new products. Failure to achieve compliance prior to placing products on the EU market carries a real risk of severe business consequences, including restricted market access, regulatory penalties, and reputational damage.

Read more –NetApp acquires PEAK:AIO to accelerate AI deployments

Navigating the CRA Workload

Under the CRA, manufacturers must execute a rigorous, product-level workflow to prove conformity. Central to this process is the Threat Analysis & Risk Assessment – TARA (Product Cybersecurity Risk Assessment).

The cybersecurity risk assessment dictates which requirements from the selected harmonized standard or Annex I (essential cyber requirements) apply to a specific product, how those requirements are implemented, and why the chosen mitigations have sufficiently addressed the identified risks based on intended use and operational environment. Every in-scope product must undergo this risk assessment, no matter its category. What is an arduous process for a single product, scales into significant manual effort for companies with large portfolios unless the right tools and workflows are in place.

Read more – Lazarus AI raises $43 million for independent AI

Turning Complex Risk Analysis into a Streamlined Workflow

exSILentia CRA transforms risk analysis into a structured engineering workflow. Preloaded with an industry standard risk matrix and pre-defined mitigations (requirements) from harmonized standards, the tool ensures product development teams never have to start from scratch.

Read more – Cynet adds AI security and identity protection

By embedding the deep domain expertise of exida’s cybersecurity certification assessors  who routinely perform assessments to ISA/IEC 62443 —exSILentia^® CRA allows product developers to focus on building features rather than navigating complex cybersecurity legislation.