On 31 August 2018, parts 1 to 4, 6 and the First Schedule of the Cybersecurity Act were implemented, establishing a framework for the protection of critical information infrastructure (CII) against cybersecurity threats. Part 1 of the Act provides d…