Pakistan to form federal Cybersecurity Authority; draft law circulated

“Islamabad is moving to set up a federal body to oversee cybersecurity and protect critical systems.”
Key points
- Islamabad is moving to set up a federal body to oversee cybersecurity and protect critical systems.
- A draft law is out for consultation as officials push toward a 2025 information security framework.
The government has decided to create a federal Cybersecurity Authority to safeguard critical national systems and coordinate incident response across sectors, officials said.
A draft Cybersecurity Act prepared by the IT ministry has been sent to stakeholders for consultation. The National Cybersecurity Policy will serve as the framework for implementation under the Digital Economy Enhancement Programme.
The ministry has already designated data at the National Database and Registration Authority (Nadra), the Federal Board of Revenue (FBR) and the telecom sector as critical infrastructure. Until the authority is operational, a 14-member CERT Council continues to handle response and coordination.
Authorities cited repeated cyberattacks and data leaks—highlighting an incident at Oil and Gas Development Company Limited that disrupted servers—as evidence of the need for centralised governance, stronger resourcing and a national information security framework set for 2025.
Corrections & clarifications
Spot an inaccuracy or need more detail? Email connect@newsnexus24.com. Significant updates are timestamped above.