2025 has been a year of regulatory change for cybersecurity.