Director General National CERT Haider Abbas shared the figures during a meeting of the National Assembly Standing Committee on IT and Telecom. He told the committee that the organization has a total workforce of 70 employees.

Haider Abbas also revealed that National CERT uses artificial intelligence (AI) agents to monitor cybersecurity threats. However, most of its operations are still handled manually. He said 30% of the organization's work relies on AI, while the remaining 70% is performed manually.

National CERT Uses AI to Monitor Cyber Threats

During the meeting, committee members raised questions about the security risks associated with using AI. They asked whether the technology could create vulnerabilities or compromise existing security systems.

The DG explained that Pakistan has a security monitoring centre to identify and monitor potential cyber threats.

Committee Chairman also expressed concern over hacking attempts during important national events. He pointed out that cyberattacks tend to increase around August 14 and September 6 and questioned what measures authorities were taking to prevent such incidents.

The discussion highlighted the need for stronger monitoring systems and improved cybersecurity arrangements.

Annual Cybersecurity Audits Planned for Institutions

Haider Abbas also briefed the committee on Pakistan's Information Security Framework Rules, which were approved in 2023.

He said the framework provides a mechanism to assess the cybersecurity strength of institutions. Under the rules, every institution will undergo an annual cybersecurity audit.

The IT secretary informed the committee that each province had nominated departments to handle cybersecurity responsibilities.

Officials Raise Concerns Over Data Protection

The meeting also focused on data protection and the security of Pakistan's digital infrastructure.

The Director General of the Pakistan Digital Authority said digital infrastructure carries significant risks related to data security. He stressed the need for a dedicated data regulator and proper oversight of artificial intelligence as the country expands its digital systems.

Federal IT Minister Shaza Fatima Khawaja explained the role of regulators in the digital ecosystem. She said regulators do not directly manage an organisation's operations or policymaking.

She added that data-related matters would follow the standards issued by the Pakistan Digital Authority, which was established under Prime Minister Shehbaz Sharif's vision of Digital Pakistan.

During the discussion, MNA Musa Gilani raised concerns about the protection of citizens' personal information. He said weaknesses remained in Pakistan's data protection systems and called for additional measures to protect sensitive information.

He also stressed that the personal data of Pakistani citizens should remain within the country.

The committee chairman welcomed the suggestions and said they would be considered.

National Digital Strategy Also Discussed

The chairman also appreciated the progress made by the Pakistan Digital Authority, noting that it had started its work around a year earlier.

The meeting further discussed a proposed national commission for digital strategy. The commission is headed by the prime minister and aims to ensure that approved digital policies are implemented across the provinces.

The discussion comes as Pakistan faces growing cybersecurity challenges and works to strengthen its digital infrastructure and data protection framework.