On 11 April 2022, part 5 and the second Schedule of the Cybersecurity Act were implemented, establishing a framework for the protection of critical information infrastructure (CII) against cybersecurity threats. Part 5 of the Act establishes the lic…