
Pakistan has passed the Cybersecurity Act 2025, establishing a nationwide cyber-defence framework to protect critical digital infrastructure. The law creates a dedicated authority and expands cyber-response capacity to fortify national security and steer the country’s digital transformation.
Read more: Pakistan Plans Cyber Authority and Pushes 5G Rollout
At a public event hosted by the FAST Public Policy and Research Society (FPPRS) in Islamabad, the Federal Minister for IT and Telecom, Shaza Khawaja, described the new Cybersecurity Act 2025 as “essential for national security,” marking a major reform step for Pakistan’s cyberspace.
The law mandates the establishment of a National Cybersecurity Authority (NCA), tasked with leading nationwide incident response and threat intelligence, expanding the mandate of Pakistani Computer Emergency Response Team (PKCERT).
As part of the broader digital push under the Digital Economy Enhancement Project (DEEP), the Act seeks to support secure digital public infrastructure cloud-first security frameworks, and identity-management systems.
The minister emphasised that Pakistan’s rapid digital transformation demands strong institutional safeguards. She noted that Pakistan’s long-term objective is to build a cyber-resilient, innovation-driven digital nation supported by secure infrastructure, technological excellence, and skilled human capital. She highlighted Pakistan’s Tier-1 ranking in the ITU Global Cybersecurity index as evidence of strong collaboration between government, academia, and industry.
Khawaja added that Pakistan is advancing toward AI-driven cybersecurity, dark-web monitoring, and modern cloud security under its Cloud-First Policy. She described Marka-i-Haq episode as a defining moment where coordinated cyber-warfare responses demonstrated national strength and confirmed that the cyber domain has become the country’s first line of defence.
