The Cyber Resilience Act (CRA) is a new European Union (EU) regulation aimed at enhancing the security of digital products and services by requiring them to meet stringent cybersecurity requirements. To understand the practical implications of CRA for industrial equipment manufacturing companies, a survey was conducted to identify key challenges. The results revealed significant hurdles, including the implementation of secure development lifecycle practices, managing vulnerability notifications within strict timelines, and addressing gaps in cybersecurity expertise. Based on these findings, the paper offers targeted recommendations in key focus areas such as vulnerability management and tooling improvements to support industrial equipment manufacturers in preparing for CRA compliance.