close

Cybersecurity Act draft prepared

Nadra, FBR and telecom sector data declared critical digital infrastructure; policy provides framework for nationwide digital protection

November 24, 2025
Representational image of a screen bearing text cyber security seen in background of toy humans and a padlock. — Reuters
Representational image of a screen bearing text "cyber security" seen in background of toy humans and a padlock. — Reuters

ISLAMABAD: The government has decided to establish a Cybersecurity Authority at the federal level.

The authority will propose cybersecurity measures for critical national infrastructure, and will implement cybersecurity initiatives across the country.

The Ministry of IT has prepared the initial draft of Cybersecurity Act and sent it to stakeholders for consultation. The National Cybersecurity Policy provides a framework for nationwide digital protection, and its implementation is underway under the Digital Economy Enhancement Programme.

According to ministry documents, progress has been made on Secure Data Exchange Layer and digital identity projects. NADRA, FBR and telecom sector data have been declared critical digital infrastructure and protecting information systems of key institutions is a government priority.

The process of declaring Immigration and Passports systems as critical infrastructure is also underway. Until the establishment of National Cybersecurity Authority, the CERT Council remains active.

The CERT Council consists of 14 public and private institutions and is strengthening cyberattack response and coordination. The work is also ongoing on Pakistan Information Security Framework 2025, said the ministry.