The Cybersecurity Act (CSA) came into force in 2019 as part of the EU's efforts to build strong cybersecurity.