Pakistan’s National Computer Emergency Response Team (National CERT) has finalized a new national information security framework aimed at strengthening government digital infrastructure against cyberattacks, data breaches and other evolving cyber threats.
Once formally approved, the Pakistan Information Security Framework will introduce mandatory cybersecurity standards for federal and provincial government institutions. The measures include regular security audits, continuous threat monitoring and stricter protection of government digital assets.
A key feature of the framework is the planned migration of government websites and applications currently hosted overseas to data centres within Pakistan. Officials say the move is intended to improve data security, strengthen oversight and reduce reliance on foreign hosting services.
The framework also introduces new compliance requirements for cloud service providers, data centres and web-hosting companies responsible for managing government information.
In addition, government data centres will be required to deploy modern cybersecurity infrastructure, including advanced firewalls, real-time monitoring systems and threat detection tools to better identify and respond to cyberattacks.