The world's first recognized certification body for industrial automation and control systems ( IACS ) in network security, exida, has launched a structured, template-driven engineering tool aimed at simplifying product risk assessment and technical documentation work, to help companies prepare for the CRA deadline in December 2027.
Pennsylvania Sellersville, November 3rd / PRNewswire / -- A global pioneer in industrial automation and control systems ( IACS ) cybersecurity, as well as the world's first recognized IACS certification body exida, today announced the launch of exSILentia ® CRA. This new software tool is directly integrated into the industry-leading exSILentia ® platform, aiming to help manufacturers seeking compliance with the European Union's Cyber Resilience Act ( Cyber Resilience Act , CRA ) simplify their assessments, shorten the time required to achieve compliance, and reduce regulatory risks through optimized threat and risk assessment processes.
With the enforcement deadline set for December 2027, manufacturers of connected devices are racing against time to assess dozens to thousands of existing and new products. Failing to comply before their products are launched in the EU market could result in serious business consequences for these companies, including restricted market access, regulatory penalties, and damage to their reputation.
Coping with the workload of CRA
According to CRA, manufacturers must implement strict, product-specific work processes to demonstrate their compliance with requirements. At the core of this process is threat analysis and risk assessment – TARA (product network security risk assessment).
This cybersecurity risk assessment determines which requirements from the selected coordination standards or Appendix I (Basic Cybersecurity Requirements) are applicable to a specific product, how these requirements should be implemented, and why the chosen mitigation measures are sufficient to address the identified risks based on the intended use and operating environment. All products within the scope of application must undergo this risk assessment, regardless of their category. For a single product, this process is already quite cumbersome; for companies with a large portfolio of products, the manual workload will significantly increase without appropriate tools and work processes.
Transform complex risk analysis into a simplified workflow
exSILentia ® CRA transforms risk analysis into a structured engineering process. This tool comes pre-configured with industry-standard risk matrices and predefined mitigation measures (requirements) from coordination standards, ensuring that product development teams do not have to start from scratch.
By leveraging the profound domain expertise of exida cybersecurity certification assessors – who often conduct assessments based on ISA / IEC 62443 – exSILentia ® CRA, product developers can focus on building functionality rather than dealing with complex cybersecurity regulations.
exida Chief Technology Officer Iwan van Beurden This means: "We want product developers to focus on creating excellent products, rather than worrying about having to become experts in cybersecurity law." exSILentia CRA It combines expertise in various network risks, authentication, and product development, which is also why we use it internally to conduct risk assessments for manufacturers.
Availability
exSILentia ® CRA is now available for immediate use in the exSILentia software suite. To learn how exSILentia ® CRA can simplify the CRA product compliance process, please visit: www.exida.com / cra-tool.
About exida
exida is a global pioneer in the field of industrial automation and control systems ( IACS ) network security. As the world's first recognized cybersecurity certification body (in 2011) and co-author of foundational textbooks, the company's experts have contributed to shaping global standards such as ISA / IEC 62443. The company is currently applying for certification as a designated entity under the European Union's Cyber Resilience Act ( CRA ). Through consulting, threat modeling, penetration testing, CSMS development, exida Academy courses, as well as exSILentia ® Cyber and CRA software tools, the company helps organizations achieve practical security. It provides comprehensive ISA / IEC 62443 certifications covering processes, components, systems, and personnel, to build end-to-end operational resilience in critical infrastructure.
exSILentia CRA is designed to assist manufacturers with assessment and documentation work related to CRA. The use of this software does not guarantee compliance with the EU's Network Resilience Act, nor does it constitute or result in certification or conformity assessment, nor will it affect the outcome of any individual certification or conformity assessment process.
Contact Information:
Email: marketing @ exida.com
Website: www.exida.com
