Preparing an AI-Augmented SIEM for the EU Cyber Resilience Act: A Practitioner Case Study
A practitioner case study maps AI-augmented SIEM SEUXDR to EU Cyber Resilience Act lifecycle and reporting duties.
The EU Cyber Resilience Act (Regulation 2024/2847) requires risk assessment, vulnerability handling, conformity documentation, and Article 14 incident and vulnerability reporting before products with digital elements reach the EU market. Researchers document a preparedness pilot for SEUXDR, an AI-augmented security monitoring product with a large-language-model active-response component, on the open-source CYBERFORT platform. They contribute a six-step recipe—Scope and Classify, Asset Registration, Produce Evidence, Map to CRA, Gap and Actions, Audit Pack—and traceability from product and AI-specific controls to CRA objectives.
44