The federal government is set to introduce a significant revamp of the Computer Emergency Response Team (CERT) rules, aiming to bolster cybersecurity in Pakistan. According to reliable sources within the Ministry of IT and Telecommunication (MoITT), the proposed changes will establish a new CERT Council, while also involving the Cabinet Division for representation.
Enhanced Representation and Advisory Role
The CERT Council will include representatives from various key institutions such as the Ministry of Law, Ministry of Commerce, Pakistan Telecommunication Authority (PTA), and other important bodies. This council’s primary function will be to serve as an advisory body, providing crucial insights and guidance. Moreover, the Ministry of Law will be tasked with incorporating Cabinet instructions into the rules before formal notification.
Formation of Sectoral CERTs
After the issuance of the rules notification, the National Computer Emergency Team (nCERT) and Sectoral CERTs will be officially established. Sectoral CERTs will cater to essential sectors, including Defense, Telecom, Banking and finance, Power, and more. These dedicated teams will address sector-specific cybersecurity challenges and fortify critical infrastructure against cyber threats.
Establishment of National and Provincial CERTs
A separate secretariat for the National CERT will be set up, with initial assistance from the National Telecom and Information Security Board (NTISB). Furthermore, provincial governments will be urged to create their own provincial CERTs. In Khyber Pakhtunkhwa, a computer emergency response center is already operational and can potentially be transformed into a provincial CERT.
Progress and Approval
The federal cabinet had greenlit the Computer Emergency Response Team Rules just ten days ago. Following feedback from all stakeholders and approval from the cabinet committee, the rules were presented to the federal cabinet for final endorsement. Once the rules are officially notified, concrete steps will be taken to establish a robust and cyber-secure ecosystem in Pakistan.
