Newsletter Cyber Resilience Act commission guidance VDMA decision making Oct 6, 2026 members No. 76: How Much CRA Compliance Is Needed for Legacy Products?