The Cyber Resilience Act holds EU software and IoT device makers to the fire to ensure secure development and implementations across critical infrastructure.