The Cyber Resilience Act (CRA) is an EU regulation that establishes a uniform legal framework for the cybersecurity of products with digital elements that are made available on the EU market. It aims to ensure that hardware and software products have fewer vulnerabilities and that manufacturers are responsible for cybersecurity throughout the product's lifecycle. Mandatory cybersecurity requirements for the design, development, and production of these products, including vulnerability handling and security updates have been introduced. The regulation also seeks to improve transparency for consumers and businesses regarding the security features of products, allowing them to make informed choices. The CRA complements existing legislation like the NIS2 Directive and is a key part of the EU's Cybersecurity Strategy. Base CRA obligations concern the classification of roles.The regulation makes use of the standard New Legislative Framework device for role-reclassification, in this context applying to the manufacturer role. These requirements apply to all parties subject to CRA requirements. The full set of manufacturer obligations follows whoever exercises manufacturer-like control over a product, regardless of the label the operator uses for itself. The regulation affects all economic operators engaged in the manufacture of products with digital elements.