Pakistan has recorded more than 1,000 cyberattacks so far in 2026, raising concerns about the country’s cybersecurity readiness. The National CERT has also revealed details about its workforce and use of artificial intelligence. DG National CERT Haider Abbas shared these figures during a meeting of the National Assembly Standing Committee on IT and Telecom. He said the organization has a total workforce of 70 employees.
Haider Abbas also confirmed that National CERT uses AI agents to monitor cybersecurity threats. However, the organization still relies more heavily on manual operations. He told the committee that 30% of its work depends on AI, while the remaining 70% is handled manually.
National CERT Uses AI to Monitor Cyber Threats
Committee members questioned whether relying on AI could itself create security risks. They also asked whether the technology could compromise existing security systems. The DG explained the organization’s approach to monitoring potential threats. He said Pakistan has a security monitoring center to identify and monitor cyber threats.
The committee chairman also raised concerns about cyberattacks during important national events. He pointed out that hacking attempts increase around August 14 and September 6. He questioned what measures authorities were taking to prevent attacks on these dates. The discussion highlighted the need for stronger monitoring and better cybersecurity arrangements.
Annual Cybersecurity Audits Planned for Institutions
Haider Abbas also briefed members about Pakistan’s Information Security Framework Rules. He said the rules were approved in 2023 and provide a way to assess institutions’ cybersecurity strength. Under this framework, every institution will undergo an annual cybersecurity audit. The IT secretary also told the committee that each province had nominated departments for cybersecurity responsibilities.
The meeting also covered broader concerns about data protection and digital infrastructure. The Director General of the Pakistan Digital Authority said digital infrastructure carries significant data-related risks. He stressed the importance of establishing a dedicated data regulator. He also highlighted the need for proper AI supervision as Pakistan expands its digital infrastructure.
Federal IT Minister Shaza Fatima Khawaja explained the regulator’s role in the digital ecosystem. She said regulators do not directly handle an organisation’s operations or policymaking. She added that data-related matters would follow standards issued by the Pakistan Digital Authority. The authority was established under Prime Minister Shehbaz Sharif’s vision of Digital Pakistan.
During the meeting, MNA Musa Gilani raised concerns about the security of citizens’ personal information. He said several weaknesses still exist in Pakistan’s data protection systems. MNA Musa Gilani argued that further measures were needed to protect sensitive information. He also stressed that Pakistani citizens’ data should remain within the country.
He expressed hope that the IT minister would consider these concerns. The committee chairman welcomed the suggestions and said they would be considered.
The chairman also appreciated the Pakistan Digital Authority’s progress. He noted that the authority had started its work around a year earlier. The meeting also discussed a proposed national commission for digital strategy. The prime minister heads the commission, which aims to ensure provincial implementation of approved digital policies.
