The European Cyber Resilience Act (CRA) is a legal framework that defines cybersecurity requirements for hardware and software products with digital elements placed on the market of the European Union.