The National Cyber Emergency Response Team (National CERT) has announced a significant step to bolster Pakistan’s digital infrastructure by making it mandatory for all public and private sector entities to adopt Pakistan Security Standards (PSS).Â
These standards, developed domestically, align with global cybersecurity protocols such as the US FIPS 140 and ISO 15408 (Common Criteria).
According to a news report, the decision, outlined in Statutory Notification SRO 762(I)/2023, mandates full implementation of PSS by June 1, 2028. After this date, it will be illegal to manufacture, store, or sell any security products claiming cryptographic or cybersecurity capabilities without meeting PSS standards.
However, the defence sector is subject to a more accelerated timeline. The National Technical Information Security Board (NTISB) has set a compliance deadline for December 2025 for all new procurements. This move is part of Pakistan’s broader strategy to nationalize cryptographic assurance and strengthen the integrity of its supply chain, particularly in critical sectors.
The PSS guidelines are designed to safeguard the confidentiality, integrity, and availability of the country’s ICT systems, enhancing cyber resilience across key sectors such as defence, banking, energy, and communications.Â
The National CERT stressed that early compliance would streamline procurement processes, enhance national cybersecurity posture, and protect sensitive operations, especially in defence.
In response, the National CERT has urged vendors, developers, and industry partners to begin the certification process immediately. Non-compliant products will soon be banned from government and defence procurements.
