On 1 April 2025, the reporting obligation for cyber attacks on critical infrastructures included in 2023 amendments to the Information Security Act comes into effect. This follows the adopted amendment of the law on 29 September 2023 and the officia…