In exactly two years, the Cyber Resilience Act will come into force. But what cyber resilience means and how to achieve it is still unclear to many.