SELLERSVILLE, PA — Exida has launched a cybersecurity risk assessment tool designed to help manufacturers meet the European Union’s Cyber Resilience Act requirements before a December 2027 compliance deadline, as companies face potential market restrictions and regulatory penalties for products that fail to conform.
The Sellersville-based industrial automation cybersecurity company said its new exSILentia CRA software is available immediately within its existing exSILentia engineering platform.
The product targets manufacturers of connected devices that must assess cybersecurity risks, document protective measures and demonstrate compliance with European regulations before placing products on the EU market.
The Cyber Resilience Act establishes cybersecurity requirements for products with digital elements, creating compliance obligations for manufacturers selling connected products in the European Union.
Manufacturers must conduct product-level cybersecurity risk assessments to identify potential threats, determine applicable security requirements and document how identified risks have been addressed.
Those assessments apply to products within the regulation’s scope regardless of product category, creating a substantial documentation and engineering workload for manufacturers managing extensive product portfolios.
Failure to meet applicable requirements could expose manufacturers to regulatory penalties, restrictions on EU market access and reputational damage.
Exida’s software is intended to reduce the manual work involved in conducting threat analysis and risk assessments, commonly referred to as TARA, while producing technical documentation supporting regulatory conformity.
The system uses predefined risk matrices and security mitigation requirements drawn from industry standards, allowing engineering teams to follow a structured assessment process rather than develop individual workflows for each product.
The assessments determine which cybersecurity requirements apply to a product based on its intended use, operating environment and identified threats.
Manufacturers must also document how those requirements have been implemented and establish whether the selected safeguards adequately address the risks.
For companies producing hundreds or thousands of connected devices, the process can require repeated assessments across existing and newly developed products.
Exida has incorporated cybersecurity assessment methods used by its certification specialists, including practices associated with the ISA/IEC 62443 industrial automation and control systems security standards.
The company, which identifies itself as the world’s first accredited industrial automation and control systems cybersecurity certification body, said the software draws on its experience evaluating manufacturers’ products against established security requirements.
“We want product developers to focus on developing great products, not worrying about becoming cyber legal experts,” said Iwan van Beurden, Exida’s chief technology officer.
Van Beurden said the company also uses the software internally when conducting cybersecurity risk assessments for manufacturers.
The launch extends Exida’s existing engineering software into regulatory compliance workflows as manufacturers prepare for the Cyber Resilience Act’s December 2027 deadline.
ExSILentia CRA is available through the company’s exSILentia software suite.
Support the local news that supports Chester County. MyChesCo delivers reliable, fact-based reporting and essential community resources—free for everyone. If you value that, click here to become a patron today.