The Cyber Resilience Act (CRA) is an EU regulation that sets mandatory cybersecurity requirements for products with digital elements. It ensures that software and hardware are secure throughout their lifecycle, including vulnerability management, incident reporting, and secure updates.