The government has established nine Computer Emergency Response Teams (CERTs) under the CERT Rules-2023 as part of efforts to strengthen national cyber governance and digital security.
These CERTs, including National, Punjab, KP, Balochistan, Sindh, AJK, GB, Telecom, Defense, and Community, form the initial structure of Pakistan’s expanding cyber-response ecosystem. Nominations are now being sought from additional sectors to broaden the nationwide cybersecurity framework further.
According to the document, the Ministry of IT and Telecommunication (MoITT) has detailed reforms being implemented under the National Cyber Security Policy (NCSP-2021).
The policy is operational through the Digital Economy Enhancement Program (DEEP), which includes core components such as a Secure Data Exchange Layer, Digital Identity, and e-Citizen enablement. A draft National Cyber Security Act remains under consultation, while a 14-member CERT Council has been notified to coordinate cybersecurity efforts until a central authority is established.
The document states that the National CERT has been functional since 2023-24 and has issued guidelines for the designation and protection of Critical Information Infrastructures (CIIs).
Under PECA-2016, the information systems of NADRA, FBR, and the Telecom sector have already been designated as CIIs, with additional summaries under process. Protection protocols and relevant criminal proceedings will follow the applicable sections of the cybercrime law.
Editorial & Legal Practice Group
Authored and reviewed by the corporate law and tax litigation practice group at Javid Law Associates. Our team comprises High Court advocates, corporate legal advisors, and authorized tax practitioners across Pakistan.
Advocates High Court & Tax Counsel
Jurisdiction: Pakistan