SELLERSVILLE, Pa. On November 3rd / PRNewswire -- A global pioneer in industrial automation and control systems ( IACS ) and also the world's first certified IACS certification body, exida today announced the launch of exSILentia ® CRA. This new software tool is directly integrated into the industry-leading exSILentia ® platform, aiming to help manufacturers seeking compliance with the European Union's Cyber Resilience Act ( CRA ) simplify assessments, shorten compliance times, and reduce regulatory risks through an optimized threat and risk assessment workflow.

With the deadline set for December 2027, manufacturers of connected devices are busy assessing a range of existing and new products, ranging from dozens to thousands. Failing to comply before launching these products into the EU market could result in serious business consequences, including restricted market access, regulatory penalties, and damage to their reputation.

Coping with the workload of CRA

According to CRA, manufacturers must follow strict, product-specific work processes to demonstrate compliance with requirements. At the core of this process is threat analysis and risk assessment – TARA (product network security risk assessment).

Cybersecurity risk assessment determines which requirements from the selected coordination standards or Appendix I (Basic Cybersecurity Requirements) are applicable to a particular product, how these requirements should be implemented, and why the chosen mitigation measures are sufficient to address the identified risks according to their intended use and operating environment. Every product within the scope of application must undergo this risk assessment, regardless of its category. For a single product, this process is already quite cumbersome; if a company has a large portfolio of products, the workload will significantly increase in the absence of appropriate tools and processes.

Transform complex risk analysis into a streamlined workflow

exSILentia ® CRA transforms risk analysis into a structured engineering workflow. This tool comes pre-configured with industry-standard risk matrices and predefined mitigation measures (requirements) from coordination standards, ensuring that product development teams do not have to start from scratch.

By leveraging the profound domain expertise of exida cybersecurity certification assessors – who often conduct assessments based on ISA / IEC 62443 – exSILentia ® CRA, product developers can focus on building functionality rather than dealing with complex cybersecurity regulations.

exida Chief Technology Officer Iwan van Beurden This means: "We want product developers to focus on creating excellent products, rather than worrying about whether they will become experts in cybersecurity law." exSILentia CRA It combines expertise in various network risks, authentication, and product development, which is also the reason we use it internally when conducting risk assessments for manufacturers.

Availability

exSILentia ® CRA is now available for immediate use in the exSILentia software suite. To learn how exSILentia ® CRA can help simplify the CRA product compliance process, please visit: www.exida.com / cra-tool.

About exida

exida is a global pioneer in the field of industrial automation and control systems ( IACS ) network security. As the world's first certified cybersecurity institution (in 2011) and co-author of foundational textbooks, our experts have contributed to the establishment of global standards such as ISA / IEC 62443. The company is currently applying for certification as an authorized body under the European Union's Cyber Resilience Act ( CRA ). Through consulting, threat modeling, penetration testing, CSMS development, exida Academy courses, as well as exSILentia ® Cyber and CRA software tools, we help organizations implement practical security protections. We provide comprehensive ISA / IEC 62443 certifications for processes, components, systems, and personnel, assisting critical infrastructure in building end-to-end operational resilience.

exSILentia CRA is designed to assist manufacturers in conducting evaluations and documentation related to CRA. The use of this software does not guarantee compliance with the EU's Network Resilience Act, nor does it constitute or result in certification or conformity assessment, nor will it affect the outcome of any individual certification or conformity assessment process.

Contact Information: