Many companies are still unfamiliar with the EU Cyber Resilience Act (CRA), and even among those that are aware of it, there are significant misconceptions about both its scope and the amount of work