ISLAMABAD:

Pakistan’s federal cabinet has approved the Pakistan Information Security Framework 2026, paving the way for a unified national approach to information security as cyber threats and attacks on public and private institutions continue to grow.

The framework is aimed at establishing national information security standards and introducing a consistent set of requirements and controls for organisations across the country.

According to National CERT officials, the framework will strengthen Pakistan’s cyber defences by setting mandatory information security requirements, auditing controls and protective measures for institutions.

The framework is also expected to help establish uniform information security standards across both government and private-sector organisations, reducing gaps in cybersecurity practices and strengthening the protection of critical information and digital infrastructure.

Under the new framework, institutions will be required to improve their cybersecurity arrangements, risk-management practices and protective controls, officials said.

National CERT officials described the approval as an important development for Pakistan, particularly as the country faces a growing number of cyberattacks targeting digital systems and institutional networks.

The move signals a shift towards a more coordinated national cybersecurity architecture, with authorities seeking to replace fragmented security practices with common standards, mandatory controls and regular auditing.

The framework is expected to provide institutions with a common benchmark for assessing their information security readiness and identifying vulnerabilities before they can be exploited by cybercriminals.

With government services, businesses and critical infrastructure becoming increasingly dependent on digital systems, officials said the implementation of the framework would be crucial to strengthening Pakistan’s overall cyber resilience.