Exida Releases exSILentia CRA to Guide Manufacturers Through EU Cyber Resilience Act

Exida released exSILentia CRA, a software tool built into its exSILentia platform that structures threat and risk assessments for manufacturers working toward European Union Cyber Resilience Act compliance, the company announced on November 3, 2026. PR Newswire carried the announcement.

How exSILentia CRA Structures CRA Assessments

Under the CRA, manufacturers must complete a product-level Threat Analysis & Risk Assessment, known as TARA, for every in-scope product regardless of category. The assessment determines which requirements from a selected harmonized standard or Annex I essential cyber requirements apply to a product, how those requirements are implemented, and why chosen mitigations address identified risks based on intended use and operational environment.

Exida said the tool arrives preloaded with an industry standard risk matrix and pre-defined mitigations drawn from harmonized standards, so product development teams do not start from scratch. The software embeds the domain expertise of exida's cybersecurity certification assessors, who routinely perform assessments to ISA/IEC 62443.

"We want product developers to focus on developing great products, not worrying about becoming cyber legal experts," said Iwan van Beurden, Chief Technology Officer at exida. "exSILentia CRA embeds all kinds of cyber risk, certification, and product development subject matter expertise, which is why we use it internally for conducting risk assessments for manufacturers."

The company said enforcement of the CRA is set for December 2027 and that failure to comply before placing products on the EU market carries risks including restricted market access, regulatory penalties and reputational damage. exSILentia CRA is available immediately in the exSILentia software suite, and exida points users to its CRA tool page for details. The company states that use of the software does not guarantee CRA compliance or constitute certification or conformity assessment.

Exida's Certification Work Beyond the CRA Tool

According to akta.pro company records, exida issued IEC 62443-2-4 cybersecurity certification to Jinko ESS North American Business Unit for its energy storage products and systems, validating secure development lifecycle compliance. The same records list exida's Industrial Cybersecurity Certification Services line, anchored on IEC 62443-2-4 certification covering design, development, integration, testing, deployment and lifecycle management. The records also describe exida as an industrial cybersecurity certification body founded in 1999, headquartered in Sellersville, with a headcount range of 101-250.

Other Compliance Launches in November 2026

SecureDApp launched SecureCMS, a DPDP consent management platform for Indian banks and NBFCs, ahead of Consent Manager provisions taking effect on November 13, 2026, The Tribune reported on November 2, 2026. UK fintechs FundApps and SteelEye launched RegSensus, a unified regulatory intelligence platform, Australian FinTech reported on October 27, 2026.

Exida's Notified Body Application

exida said it is pursuing EU Cyber Resilience Act Notified Body accreditation.