After a year of consultation, discussions and amendments, the Cyber Security Act which requires certain businesses to report ransom payments has passed by the parliament.