A Critical Analysis:
In not long past years, Pakistani institutions had become the targets of several cyber attacks which became a digital threat for them. This article incorporates from the national cyber security policy from 2021 and highlights the prerequisite for enhancing cybersecurity measures in Pakistan. This article also explores and reveal the impact of these cyber-attacks on Pakistani institutions and listed the strategic measures as it is necessary to overcome these threats and build a strong cyber space system.
“There’s no silver bullet with cybersecurity; a layered defense is the only viable option.”
— James Scott—
Pakistan infrastructure in terms of digital and technological has seen remarkable advancements, but these achievements also came along with the increasing cyber threats. Recent cyber-attacks have exposed its vulnerabilities in both public and private sectors which resulted many risks and challenges. First and most prominent one is ownership at the top. So, information is considered as national assets and fundamental pillar of knowledge-based economics in Pakistan. For that sensitive nature and cross sectoral application of cyber security demand robust administrative support to protect this valuable asset.
Secondly, challenge at a level of governance and its implementation can be widely observed in Pakistan. This challenge is in two forms: 1– weak enforcement of statutes 2- assessment and continual improvement. Existing cyber security legislation in Pakistan is insufficient to provide an extensive protection for digital asset. And continuous monitoring, assessment and improvement of legal frameworks and processes are essential. So, for legislation, there is a need of ensuring a robust compliances framework that aligns with national interests. Without these, the framework can become obsolete.
Thirdly, enforcement of required structures and processes for proper governance, regulation and enforcement structure are critical for cyber security. Fourthly, inadequate and poor quality of resources is one the challenges Pakistan is facing and there’s a need constantly updated skills and resources. Fifthly, reliance on external resource also poses serious challenge for the country. This is because dependency o external skills, hardware and software increases vulnerability to cyber-attack. For this strengthening local resources is very crucial and essential. Lastly, effective response to cyber threats requires coordinated efforts through response team. So, the lack of such teams and poor coordination also exacerbate threats.
Example of such threats include K-electric attack (2020) which was the largest electricity suppliers in Pakistan suffered ransomware attack which leads to service disruption and operational delays. To restore access to encrypted data attackers demanded a ransom payment. Another example is of Punjab Government Website Breach (2021) Hackers infiltrated several websites of the Punjab government defacing them and compromising sensitive data. Lastly and recent incident ofFBR Data Leak (2021) The Federal Board of Revenue’s (FBR) systems were compromised, resulting in a massive data leak. Sensitive taxpayer information was exposed causing significant privacy concerns and financial risks. These incidents underscore the urgent need for robust cybersecurity measures to protect critical digital assets.
“We used to fear atomic bombs when I was young. Now we fear all the cyber-attacks and hacking”
—Steve Wozniak—
To address these challenges, national cyber security policy 2021 sets comprehensive approach to strengthen Pakistan’s cyber resilience. For this construction of a holistic digital ecosystem which aims to establish a secure and reliable digital ecosystem by creating supportive frameworks for digital service and infrastructure. Secondly, promoting local and international competence by encouraging both local and international entrepreneurs to offer cyber security service and solution will enhance Pakistan’s digital industry at global level.
Thirdly, by supporting online business one can facilitate the smooth operation of digital payments within and outside the Pakistan. By doing this one can boost the digital economy and this will also promote online business. Fourthly, by strengthening national cyber security capabilities, implementing stringent security standards and enforcing regulations are key to enhance national cybersecurity capabilities. Lastly, cyber governance policy committee has established to oversee strategic cybersecurity issue at national level which will ensure alignment with Pakistan’s cyber vision.
In conclusion, the suasiveness of recent cyber-attack on Pakistan institutions reveals the urgent need for well-developed cyber environment to robust cybersecurity measures. The National Cyber Security Policy 2021 provides a strategic roadmap to address these challenges and build a secure and resilient digital ecosystem. By strengthening governance, improving legal frameworks, enhancing local resources and fostering public-private partnerships Pakistan can protect its digital assets and ensure national security in the digital age.
Note: This column incorporates insights from the National Cyber Security Policy 2021 and highlights the critical need for enhanced cybersecurity measures in Pakistan.
This author is an undergraduate of school of politics and international relations at Quaid e Azam university and can be reached at sammanakhtar6@gmail.com.
Related
