In a recent development, the federal government of Pakistan has introduced proposed changes to the rules governing the Computer Emergency Response Team (CERT). According to sources within the Ministry of IT and Telecommunication (MoITT), these changes entail the formation of a CERT Council under the CERT Rules.
Notably, the federal government, in its approval of the CERT Rules, has mandated the inclusion of a representative from the Cabinet Division within the CERT Council. This council will consist of representatives from key governmental bodies such as the Ministry of Law, Ministry of Commerce, Pakistan Telecommunication Authority (PTA), and other significant institutions. Its primary function will be advisory in nature.
The Ministry of Law will be responsible for incorporating any necessary amendments into the rules in accordance with the directives of the Cabinet. Once these changes are made, the updated rules will be officially notified.
Following the notification of the rules, it is anticipated that the National Computer Emergency Team (nCERT) and Sectoral CERTs will be established. Sectoral CERTs will be specifically created for sectors including Defense, Telecom, Banking and Finance, Power, and other critical areas.
Furthermore, plans are underway to establish a dedicated secretariat for the National CERT. In its initial stages, the National Telecom and Information Security Board (NTISB) will provide support to this initiative. Additionally, provincial governments will receive letters urging the establishment of provincial CERTs. It is worth noting that a computer emergency response center is already operational in Khyber Pakhtunkhwa, which can potentially be converted into a provincial CERT.
The federal cabinet granted approval for the Computer Emergency Response Team Rules a decade ago. According to MoITT, the rules underwent thorough review, with inputs and feedback from various stakeholders. Following approval by the cabinet committee, they were subsequently presented to the federal cabinet for final approval. Once these rules are formally notified, efforts will be initiated to establish a cyber-secure environment in Pakistan, marking a significant step in enhancing cybersecurity within the nation.
