EU Cyber Resilience Act: What are its Essential Requirements for Software Products?