Pakistan has stepped up cybersecurity preparations ahead of Defence Day amid concerns over possible Pakistan cyber attacks targeting government systems and other critical digital infrastructure.
The National Cyber Emergency Response Team, or National CERT, has issued a set of cybersecurity instructions to important institutions. The measures will remain in place from September 5 to 7.
Authorities want organisations to remain prepared for possible cyber incidents during the sensitive period.
National CERT orders special monitoring
The National CERT has directed key institutions to establish dedicated cybersecurity control rooms during Defence Day.
Sectoral and provincial CERTs must also remain on alert. Organisations responsible for critical information infrastructure have been told to strengthen their security arrangements and prepare for potential threats.
The National Security Operations Centre, known as NSOC, will serve as the country’s central cyber coordination point during the period.
The centre will operate around the clock to monitor the cyber environment. It will also help institutions exchange threat information and coordinate responses to major incidents.
Institutions told to monitor networks
The National CERT has instructed organisations to continuously monitor important networks, computer systems, websites and digital services.
Officials should immediately report any major cyber incident or suspicious activity.
Institutions must also report possible security breaches without delay. Early reporting can help security teams identify threats and limit potential damage.
The guidance also calls for close coordination with the NSOC.
This coordination will allow authorities to share cyber threat intelligence and develop a joint response if an attack affects important national digital infrastructure.
Technical teams must remain available
Institutions have been told to ensure that cybersecurity focal persons and technical teams remain available from September 5 through September 7.
Technical staff should be ready to communicate with national cyber authorities and respond quickly to emergencies.
The instructions highlight the importance of rapid action during a cyber incident.
A delayed response can give attackers more time to compromise systems, steal information or disrupt digital services.
Websites face stronger protection
The National CERT has also recommended additional protection for government websites, online portals, application programming interfaces and email systems.
Organisations should activate web application firewalls and distributed denial-of-service protection where required.
They have also been advised to keep web applications and other internet-facing systems fully updated.
These measures can help reduce the risk of attackers exploiting known vulnerabilities.
Institutions should also use multi-factor authentication for sensitive accounts. Stronger controls should apply to administrative accounts that provide access to critical systems.
Systems and databases need protection
The cybersecurity instructions also cover internal systems and databases.
Institutions have been told to update operating systems and disable services that they do not need.
Firewalls and systems designed to detect and prevent cyber attacks should remain active on important servers.
Critical databases should not have direct access through public IP addresses.
Security logs should also receive regular monitoring. This can help technical teams identify unusual activity and investigate possible intrusions.
Backup plans remain essential
The National CERT has also stressed the importance of disaster recovery preparations.
Organisations should keep disaster recovery sites ready for immediate use if their primary systems become unavailable.
They have also been advised to maintain offline or air-gapped backups of critical data, system configurations and other important information.
Offline backups can provide an additional layer of protection if attackers compromise connected systems or attempt to encrypt or destroy data.
Data centres urged to prepare
Data centres and security operations centres have received additional instructions.
They should maintain alternative internet connections and ensure that backup power systems remain available.
Reliable connectivity and power can prove critical during a major cyber incident.
The preparations aim to ensure that important government and national digital services can continue operating even if organisations face technical disruption.
Pakistan strengthens cyber readiness
The Defence Day alert reflects the growing importance of cybersecurity in protecting national infrastructure.
Modern conflicts and geopolitical tensions can extend beyond physical battlefields. Cyber attacks can target government websites, communication networks, financial systems and other digital services.
The National CERT’s instructions therefore focus on prevention, monitoring and rapid response.
For institutions, the September 5 to 7 period will require increased vigilance. Cybersecurity teams must monitor their systems, report suspicious activity and maintain communication with national authorities.
The measures do not confirm that a specific cyber attack will take place. Instead, they represent a precautionary response to the possibility of increased cyber threats around Defence Day.
With critical services becoming increasingly dependent on digital infrastructure, strong cybersecurity remains an important part of Pakistan’s national security preparations.
