The Cyber Resilience Act (CRA) was published recently in the Official Journal of the EU. The regulation contains specifications for the cybersecurity of products with digital elements. Affected companies now have 36 months to implement the requirements contained in the CRA.