News and developments
Computer Emergency Response Team Rules 2023
In light of the continuous attacks of spyware on government websites and the hacking of the same, the Government of Pakistan promulgated the said Rules for the creation of computer emergency response teams at the national, provincial and sectoral levels to respond to such threats to protect government data and that of private citizens being handled by the Government.
Salient features of the rules and their impact on companies and individuals are discussed below:
ESTABLISHMENT OF CERTS
Types of CERTs are to be formed under section 3 of the Rules.
-
- National Level: The Central Entity along with its National Computer Emergency Response Team (ICERT) and National Security Operation Center (NSOC).
- Sectoral Level: Sectoral Regulator (s)l CERTs (including but not limited to Defense, Telecom, Banking, Finance, Power, and Public sector).
- Organizational Level: Enterprises, entities, and individual users.
-
- CERTS shall disseminate security announcements regarding potential cyber attacks.
- Provide technology updates to its constituents
- CERTs shall conduct periodic audits and assessments of the security and information systems of constituents from time to time
- The CERT shall assist constituents in upgrading their security for information systems
- Provide security consulting on its own or upon request
- Upgrade and update software and hardware of constituents