Table of Contents Background __________________________________________________________1 1.1 Introduction ___________________________________________________________ 1 1.2 Review of Pakistan’s Cyber Security Landscape _________________________ 2 1.3 Challenges and risks ___________________________________________________ 3 1.3.1 1.3.2 1.3.3 1.4 Ownership at the Top _______________________________________________________ 3 Governance and Implementation challenges of Cyber Security Policy and Strategy 3 Enforcement of Required Structures and Processes ___________________________ 4 Course of Action _______________________________________________________ 5 Vision, Scope & Objectives____________________________________________6 2.1 Vision _________________________________________________________________ 6 2.2 Scope _________________________________________________________________ 6 2.3 Objectives ____________________________________________________________ 6 2.4 Principles ______________________________________________________________ 7 Policy Deliverables ___________________________________________________8 3.1 3.1.1 3.1.2 Cyber Security Governance ____________________________________________ 8 Policy Formulation and Oversight: Cyber Governance Policy Committee (CGPC)8 Institutional Structure for Implementation _____________________________________ 9 3.2 Active Defence ________________________________________________________ 9 3.3 Protecting Internet-Based Services _____________________________________ 10 3.4 Protection and Resilience of National Critical Information Infrastructure __ 10 3.5 Protection of Government’s Information Systems and Infrastructure ______ 11 3.6 Information Security Assurance Framework _____________________________ 12 3.7 Public-Private Partnership _____________________________________________ 13 3.8 Cyber Security Research and Development ____________________________ 13 3.9 Capacity Building _____________________________________________________ 14 3.10 Awareness for National Culture of Cyber Security _______________________ 14 3.11 Global cooperation and Collaborations ________________________________ 15 3.12 Cybercrime Response Mechanism _____________________________________ 16 3.13 Regulations ___________________________________________________________ 16 3.14 Establishing Trust In Digital Transactions_________________________________ 17 3.15 Improve Pakistan’s ICT Ranking ________________________________________ 17 3.16 Risk management and Risk-based approach___________________________ 17 3.17 Appendix – Glossary of terms __________________________________________ 18 National Cyber Security Policy 2021

Select target paragraph3