Pakistan has initiated its most extensive cybersecurity reform to date under the World Bank–supported Digital Economy Enhancement Project (DEEP), a $77.73 million initiative designed to strengthen and modernize the country’s digital infrastructure. The Ministry of Information Technology and Telecommunication (MoITT) has issued a Request for Expression of Interest seeking an international consulting firm to conduct a comprehensive assessment of Pakistan’s cybersecurity systems.
The selected firm will carry out a wide-ranging gap analysis across government institutions, critical information infrastructures and private-sector entities. The evaluation will identify vulnerabilities in legal frameworks, institutional readiness, workforce capacity and technological capabilities. Priority sectors include finance, energy, healthcare, IT and telecommunications.
A core component of the assignment is the revision of Pakistan’s National Cyber Security Policy/Strategy (2021). The updated strategy will incorporate global best practices such as zero-trust architecture, advanced incident response, public–private cybersecurity partnerships, and safeguards tailored for the post-generative-AI era. The firm will also deliver a detailed implementation roadmap, complete with performance indicators and defined roles for federal and provincial bodies.
The government also plans to introduce a new Cybersecurity Act, establishing regulatory requirements for critical infrastructure operators. The legislation will outline breach reporting rules, mandatory audits, compliance penalties, and guidelines aligned with ITU, NIST and ISO standards. It will also address emerging challenges including cloud security, AI-powered cyberattacks and post-quantum cryptography.
Capacity development is another central pillar. The reform will map current skill gaps and recommend certification programs, cyber drills, academic curricula and research initiatives to build Pakistan’s cybersecurity talent pipeline. Recommendations will also include incentives to strengthen Pakistan’s cybersecurity industry, supporting startups and export-focused service providers.
To ensure coordinated national execution, the initiative mandates broad stakeholder engagement through consultation forums, inter-agency working groups and public–private dialogue. The consulting firm will document outcomes and draft cooperation templates, including MoUs and Mutual Legal Assistance Treaties, to support international cybersecurity collaboration.
