Pakistan’s National Computer Emergency Response Team (NCERT) is set to be fully operational by June 2025, as efforts to acquire technical human resources and capabilities are in progress. Minister of State for Information Technology and Telecommunication, Shaza Fatima Khawaja, recently informed the National Assembly that while NCERT initiated soft operations in July 2023, the development of its full functionality is still underway.
NCERT, a pivotal initiative under the Cyber Security for Digital Pakistan framework, is a Public Sector Development Program (PSDP) project spearheaded by the National Telecommunication & Information Security Board (NTISB) under the Cabinet Division. This project is integral to strengthening Pakistan’s cybersecurity infrastructure, aiming to mitigate threats at national, sectoral, and organizational levels.
Operating under the CERT Rules 2023, NCERT adheres to a structured legislative framework designed to enhance national cybersecurity. These rules, approved by the Federal Cabinet and officially notified in the Gazette on September 26, 2023, define technical support mechanisms, operational capabilities, and capacity-building strategies to counter cybersecurity risks effectively. The framework emphasizes a proactive and integrated risk management approach, ensuring a robust response to evolving cyber threats.
Pakistan’s National Cyber Security Policy (NCSP) 2021 lays the foundation for a secure and resilient digital ecosystem. The policy establishes a three-tier cybersecurity approach, encompassing National Level, Sectoral, and Organizational CERTs to ensure comprehensive digital protection. To coordinate and oversee these teams, a CERT Council has been established, promoting collaboration and strategic interventions against cyber threats.
The CERT Rules 2023 explicitly outline the roles and responsibilities of various specialized teams, including Government CERT, Critical Infrastructure CERT, Sectoral CERT, Federal CERT, and Provincial CERT. These entities work collectively to enhance national cybersecurity readiness, detect vulnerabilities, and respond swiftly to cyber incidents.
Khawaja underscored the government’s commitment to strengthening cyber resilience, emphasizing key initiatives such as technological investments, cyber intelligence sharing, capacity building, and international cooperation. The government is aligning its cybersecurity strategies with global best practices, ensuring compliance with international standards to bolster Pakistan’s digital defenses.
The National Cyber Security Framework also aligns with the United Nations’ Norms on Responsible State Behavior in Cyberspace (UN Norms 40), ensuring that Pakistan’s cybersecurity policies not only protect its digital infrastructure but also prevent any malicious cyber activities from affecting other nations. This global alignment highlights Pakistan’s responsible approach to cybersecurity, reinforcing its commitment to fostering a secure and resilient digital landscape.
Through continued legislative support, strategic cybersecurity investments, and nationwide capacity-building initiatives, the government aims to elevate Pakistan’s cybersecurity posture. As NCERT moves towards full operational capability, it is expected to play a crucial role in safeguarding businesses, individuals, and critical digital assets from emerging cyber threats, positioning Pakistan as a stronger player in global cybersecurity efforts.