The National CERT (PKCERT) has officially directed all provincial and sectoral CERTs to establish and operationalize Cyber Security Operations Centres (SOCs) by November. Furthermore, these entities must complete their technical integration with the National Security Operations Centre (NSOC) on a priority basis. This massive expansion aims to strengthen the nationwide monitoring and coordination of cyber threats across Pakistan.
Mandatory Compliance & Immediate Actions
The National CERT explicitly stated that the establishment of these Cyber Security Operations Centres remains fully mandatory. The National Cyber Security Policy and CERT Rules enforce this requirement. Consequently, the authority directed all relevant provincial and sectoral CERTs to nominate a technical focal person or a dedicated team within seven days. This dedicated personnel will facilitate the required integration with the national cyber security network.
Meanwhile, the National Security Operations Centre already operates round the clock. It actively monitors cyber threats and incidents at the national level. Several sectoral CERTs have already completed their integration with the NSOC. As a result, national-level monitoring and coordination of cyber incidents have significantly improved.
Therefore, the National CERT directed institutions lacking active Security Operations Centres to operationalize them immediately. Subsequently, these institutions must share cyber incidents and threat-related information with the NSOC without delay. To guarantee smooth execution, the National CERT’s technical team will provide necessary assistance to provincial and sectoral CERTs for their integration.
PKCERT to Expand the Cyber Security Framework Nationwide
This major initiative seeks to extend the national cyber security monitoring and response framework well beyond the federal level. It actively brings provincial governments and critical sectors into a coordinated national network.
To ensure full compliance, the National CERT sent official letters to the chief secretaries of Punjab, Sindh, Khyber Pakhtunkhwa, and Balochistan. Moreover, the authority addressed the chief secretaries of Azad Jammu and Kashmir (AJK) and Gilgit-Baltistan (GB). The National CERT called upon all provincial governments and relevant institutions to ensure both the operationalization of their SOCs and their technical integration with the national network.
Bringing Critical Sectors Under One Umbrella
The directives expand past regional governments to secure highly critical sectors. The National CERT sent separate letters to several key regulatory and governing bodies. These include the Governor of the State Bank of Pakistan, the Chairman of the Higher Education Commission (HEC), and the Director General of the Pakistan Civil Aviation Authority (PCAA).
Furthermore, the National CERT approached the Secretary of the Ministry of Maritime Affairs and the Secretary of the Karachi Port Trust (KPT). It also issued directives to the Chairman of the Punjab Information Technology Board (PITB) and the Sindh Information Technology Department.
Finally, the authority sent a formal letter to the Chairman of the Pakistan Space Activities Regulatory Board. This step successfully brings another vital sector into the ambit of the national cyber security coordination framework.
Ultimately, the National CERT emphasized a critical point. Timely information-sharing and technical connectivity with the NSOC remain absolutely essential for ensuring a coordinated response to cyber incidents and strengthening Pakistan’s overall cyber resilience.
