# EU Cyber Resilience Act part two: Updates & Impracticalities

DevFeed: [EU Cyber Resilience Act part two: Updates & Impracticalities](<https://devfeed.tech/articles/eu-cyber-resilience-act-part-two-updates-impracticalities-36389.md>)

Original publisher: [Read original article](<https://berthub.eu/articles/posts/eu-cra-practicalities/>)

Published: 2023-03-23T15:51:39Z

Content type: opinion

Language: en

Sources: [Bert Hubert's writings](<https://devfeed.tech/sources/bert-hubert-s-writings.md>)

Topics: [cyber resilience act](<https://devfeed.tech/topics/cyber-resilience-act.md>), [Resilience](<https://devfeed.tech/topics/resilience.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Software](<https://devfeed.tech/topics/software.md>), [Hardware](<https://devfeed.tech/topics/hardware.md>), [Linux Kernel](<https://devfeed.tech/topics/linux-kernel.md>), [Firewall](<https://devfeed.tech/topics/firewall.md>)

Tags: [cyber-resilience-act](<https://devfeed.tech/tags/cyber-resilience-act.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [eu](<https://devfeed.tech/tags/eu.md>), [firewall](<https://devfeed.tech/tags/firewall.md>), [hardware](<https://devfeed.tech/tags/hardware.md>), [linux](<https://devfeed.tech/tags/linux.md>), [linux-kernel](<https://devfeed.tech/tags/linux-kernel.md>), [politics](<https://devfeed.tech/tags/politics.md>), [programming](<https://devfeed.tech/tags/programming.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

This follow-up commentary examines practical questions about how the EU Cyber Resilience Act might work, focusing on third-party components in hardware and software products. It discusses concerns about regulatory workability and possible effects on innovation, while noting the draft's due-diligence expectations for manufacturers.

## Source excerpt

This is a living document - I'd normally spend a few days polishing everything, but since CRA talks are ongoing right now, there's simply no time for that. Check back frequently for updates! Also please let me know urgently on bert@hubertnet.nl if you think I'm reading things incorrectly! As a follow-up to my earlier post on the EU Cyber Resilience Act, here I'd like to address some practicalities: how would it actually work.