Abstract
The EU Cyber Resilience Act (CRA), Regulation (EU) 2024/2847, makes product cybersecurity a lifecycle obligation for products with digital elements on the EU market: risk assessment, vulnerability handling, conformity documentation, and Article 14 incident- and vulnerability-reporting readiness must be operational before market placement. Small and medium-sized enterprises that build security products are doubly exposed, since their products are in scope while their customers expect them to be exemplary. This case study documents a CRA preparedness pilot for one such product, SEUXDR, an AI-augmented security monitoring product with a large-language-model active-response component, on the open-source CYBERFORT platform. We contribute a reproducible six-step recipe (Scope and Classify, Asset Registration, Produce Evidence, Map to CRA, Gap and Actions, Audit Pack), two end-to-end traceability threads, and a pilot snapshot tracing product risks through baseline and AI-specific controls and policies to CRA objectives. It offers practitioners a replicable starting point for translating CRA legal text into operational preparedness for incident response, vulnerability reporting, and conformity assessment.
Keywords
Subject
Publication details
- Journal
- Not available
- Open access
- Green open access
Cite this article
APA 7
Koutidis, G., Kekatos, N., Korgiala-Karyda, M., Lekidis, A., & Nianios, T. (2026). Preparing an AI-Augmented SIEM for the EU Cyber Resilience Act: A Practitioner Case Study. https://omanscience.com/en/articles/preparing-an-ai-augmented-siem-for-the-eu-cyber-resilience-act-a-practitioner-case-study
MLA 9
Koutidis, Georgios, et al. "Preparing an AI-Augmented SIEM for the EU Cyber Resilience Act: A Practitioner Case Study." https://omanscience.com/en/articles/preparing-an-ai-augmented-siem-for-the-eu-cyber-resilience-act-a-practitioner-case-study.
Chicago (author–date)
Koutidis, Georgios, Nikolaos Kekatos, Marina Korgiala-Karyda, Alexios Lekidis, and Tom Nianios. 2026. "Preparing an AI-Augmented SIEM for the EU Cyber Resilience Act: A Practitioner Case Study." https://omanscience.com/en/articles/preparing-an-ai-augmented-siem-for-the-eu-cyber-resilience-act-a-practitioner-case-study.
Harvard
Koutidis, G., Kekatos, N., Korgiala-Karyda, M., Lekidis, A. and Nianios, T. (2026) 'Preparing an AI-Augmented SIEM for the EU Cyber Resilience Act: A Practitioner Case Study', Available at: https://omanscience.com/en/articles/preparing-an-ai-augmented-siem-for-the-eu-cyber-resilience-act-a-practitioner-case-study.
Vancouver
Koutidis G, Kekatos N, Korgiala-Karyda M, Lekidis A, Nianios T. Preparing an AI-Augmented SIEM for the EU Cyber Resilience Act: A Practitioner Case Study. https://omanscience.com/en/articles/preparing-an-ai-augmented-siem-for-the-eu-cyber-resilience-act-a-practitioner-case-study
IEEE
G. Koutidis, N. Kekatos, M. Korgiala-Karyda, A. Lekidis, and T. Nianios, "Preparing an AI-Augmented SIEM for the EU Cyber Resilience Act: A Practitioner Case Study," https://omanscience.com/en/articles/preparing-an-ai-augmented-siem-for-the-eu-cyber-resilience-act-a-practitioner-case-study.