Cybersecurity Governance in Pakistan: Evaluating Public Sector Preparedness through International Telecommunication Union Global Cybersecurity Index
Evaluating Public Sector Preparedness through International Telecommunication Union Global Cybersecurity Index
DOI:
https://doi.org/10.32350/jppp.51.03%20%20%20Keywords:
cybersecurity, cybersecurity governance, cyber legislation, global cybersecurity index, public sectorAbstract
Cybersecurity has emerged as a serious dimension of public sector governance in the digital age. The increased reliance on digital technologies for public service delivery has significantly expanded its exposure to cybersecurity risks. In Pakistan, rapid digital transformation has identified the need of robust and coherent cybersecurity framework to secure the cyberspace. In recent years, a series of legal, policy, and institutional reforms and initiatives have been introduced by the government to secure cyberspace. Despite these initiatives, the effectiveness and alignment of Pakistan’s cybersecurity preparedness with globally-recognized benchmarks remain insufficient. Using the qualitative research methodology through analysis of academic literature, national, and international reports, the current study evaluated the cybersecurity preparedness for public sector organizations. The study addressed the research question, to what level Pakistan’s cybersecurity preparedness is aligned with the five pillars, that is, legal, technical, organizational, capacity development, and international cooperation of Global Cybersecurity Index (GCI) of International Telecommunication Union (ITU). The findings identified that Pakistan has made progress in legal and organizational domains. However, key challenges and gaps remain in enforcement, technical workforce, and linkages with international organizations. The study concluded by proposing to align cybersecurity governance of public sector organizations with global best practices. It contributed to existing body of knowledge by mapping GCI with Pakistan’s cybersecurity framework and provided policy recommendations for public sector organizations.
Downloads
References
Abbas, M. U. R., Aamir, R., & Mahmood, N. (2021). Contemporary challenges of digital world and cybercrime and management solutions in the light of Cyber Crime Bill 2016 of Pakistan and Islamic management perspective. Indian Journal of Economics and Business, 20(3), 1577–1594.
Abbasi, K. (2026, June 19). Hackers target Capital Development Authority's billing system, demand ransom in Bitcoin. Dawn. https://www.dawn.com/news/2008949
Ahmad, M. I., & Akhter, D. R. (2026). Aligning domestic cybersecurity laws with international best practices: Comparative lessons. Pakistan Journal of Law, Analysis and Wisdom, 5(1), 125–140.
Ahmad, R. Z. ud din, & Baig, M. S. R. (2024). A controversial hypercritical examination of cybersecurity policies in Pakistan that cannot be ignored. Global Strategic & Securities Studies Review, 9(2), 43–54. https://doi.org/10.31703/gsssr.2024(IX-II).04
Ahmad, S. (2022). Cyber security threat and Pakistan's preparedness: An analysis of National Cyber Security Policy 2021. Pakistan Journal of Humanities and Social Sciences Research, 5(1), 25–40. https://doi.org/10.37605/pjhssr.v5i1.381
Ahmad, S. B., & Khan, D. M. S. (2022). Cyber threat to Pakistan national security: National security and threat perception. Pakistan Review of Social Sciences, 3(1), 1–12.
Ali, A. (2022). Cyber security policing: Analysing national cyber security policies of India and Pakistan. Spotlight on Regional Affairs, 40(8), 1–4.
Ali, A., Khan, I., & Bashir, S. (2022). Need of international legislation regarding cybercrimes: Pakistan perspective. Pakistan Journal of Social Research, 4(2), 1136–1144. https://doi.org/10.52567/pjsr.v4i2.608
Ali, K. (2025, November 29). Cybersecurity Act essential to national security, says IT minister. Dawn. https://www.dawn.com/news/1958092
Ali, K. (2026, January 7). Experts identify gaps in national cyber security efforts. Dawn. https://www.dawn.com/news/1965503
Anwar, S. S., & Yamin, T. (2021). Civil military cooperation (CIMIC) in cyber security domain: Analyzing Pakistan's prospects. Global Strategic & Securities Studies Review, 6(1), 68–81. https://doi.org/10.31703/gsssr.2021(VI-I).08
Ashraf, S., Mustafa, G., & Ali, G. (2023). Pakistan's National Security Policy: An analysis. Annals of Human and Social Sciences, 4(3), 167–176. https://doi.org/10.35484/ahss.2023(4-III)16
Associated Press of Pakistan. (2024, September 13). Pakistan ranks among 46 top-tier countries in ITU Global Cybersecurity Index 2024. The Express Tribune. https://tribune.com.pk/story/2495974/pakistan-ranks-46-among-top-tier-countries-in-itu-global-cybersecurity-index-2024
Awais, F. (2025). Enhancing legal frameworks to address cybercrime in the digital age: A critical perspective. UCP Journal of Law & Legal Education, 3(2), 56–82. https://doi.org/10.24312/ucp-jlle.03.02.533
Azhar, S., Ahmad, W., & Tahir, M. (2025). An exploratory analysis of the nexus between cybercrime and national security in Pakistan: Evaluating the existing legal framework, investigative challenges, and proposing a comprehensive strategy for effective cybercrime prevention and prosecution. Journal for Current Sign, 3(2), 615–632.
Baig, Y. J. (2023). Implementation of cyber security in corporate sector of Pakistan. International Journal of Advanced Engineering, Management and Science, 9(10), 27–33. https://doi.org/10.22161/ijaems.910.3
Ball, J., Lyons, M., & Evans, K. (2025). Bridging the cybersecurity skills gap: Aligning educational programs with industry needs. Journal of the Colloquium for Information Systems Security Education, 12(1), 9–9. https://doi.org/10.53735/cisse.v12i1.196
Bhutta, T. A., & Rashid, A. (2026). Evaluating the cybersecurity framework of Pakistan: Challenges, gaps, and policy reforms. University of Wah Journal of Social Sciences, 9(1), 1–25. https://doi.org/10.56220/uwjss.v9i1.315
Bokhari, S. A. A. (2023). A quantitative study on the factors influencing implementation of cybersecurity laws and regulations in Pakistan. Social Sciences, 12(11), Article e629. https://doi.org/10.3390/socsci12110629
Catalyic Security. (2025, November 7). Pakistan's new cybersecurity mandate: Why the PSS framework matters now. https://catalyicsecurity.com/pakistan-new-cybersecurity-mandate/
Desk, M. (2025, November 24). Govt moves to set up federal cybersecurity authority. Profit by Pakistan Today. https://profit.pakistantoday.com.pk/2025/11/24/govt-moves-to-set-up-federal-cybersecurity-authority/
Dhirani, L. L. (2024, January 8). Data security, privacy and cyber policy of Pakistan: A closer look [Paper presentation]. Proceedings of IEEE 1st Karachi Section Humanitarian Technology Conference (KHI-HTC), Tandojam, Pakistan. https://doi.org/10.1109/KHI-HTC60760.2024.10482125
Dutton, W. H., Creese, S., Shillair, R., & Bada, M. (2019). Cybersecurity capacity: Does it matter? Journal of Information Policy, 9, 280–306. https://doi.org/10.5325/jinfopoli.9.2019.0280
Fatima, I. (2022). A comparative analysis of the 2020 Global Cybersecurity Index scores of India and Pakistan. Regional Studies, 40(1), 39–60.
Figueroa, V., Sánchez Crespo, L. E., Santos-Olmo, A., Rosado, D. G., & Fernández-Medina, E. (2025). Building a holistic cybersecurity framework for e-government based on a systematic analysis of proposals. International Journal of Information Security, 24(3), 1–91. https://doi.org/10.1007/s10207-025-01024-0
Gilbert, C., & Gilbert, M. A. (2024). Organizational and leadership aspects of cybersecurity governance. International Journal of Research Publication and Reviews, 5(12), 1174–1191. https://doi.org/10.55248/gengpi.5.1224.3429
Goel, R., Kumar, A., & Haddow, J. (2020). PRISM: A strategic decision framework for cybersecurity risk assessment. Information and Computer Security, 28(4), 591–625. https://doi.org/10.1108/ICS-11-2018-0131
Government of Pakistan. (2022). National Security Policy of Pakistan 2022–2026. https://nsd.gov.pk/SiteImage/Downloads/NSP%20Policy%20(1).pdf
Haque, E. U., Abbasi, W., Murugesan, S., Anwar, M. S., Khan, F., & Lee, Y. (2023). Cyber forensic investigation infrastructure of Pakistan: An analysis of the cyber threat landscape and readiness. IEEE Access, 11, 40049–40063. https://doi.org/10.1109/ACCESS.2023.3268529
Hussain, T., & Bhatti, S. H. (2026). National security imperatives versus data protection standards: A comparative evaluation of Pakistan and the European Union. Pakistan Journal of Law, Analysis and Wisdom, 5(2), 30–44.
Iftikhar, Dr. M., Batool, Dr. H., Asghar, Z., & Shabahat, S. (2025). Digital transformation in Pakistan: Cyber-security laws, digital media, and youth gig workers-assessing awareness, vulnerabilities, and economic impact (2024–2025). Policy Research Journal, 3(10), 135–147. https://doi.org/10.5281/zenodo.17265151
International Telecommunication Union. (2020). Global cybersecurity index 2020 (4th ed.). https://www.itu.int/epublications/publication/global-cybersecurity-index-2020
International Telecommunication Union. (2024). Global cybersecurity index 2024 (5th ed.). International Telecommunication Union. https://www.itu.int/epublications/publication/global-cybersecurity-index-2024
Iqbal, G. (2025, June 24). How does international law byte into Pakistan's cyber governance? Stimson Commentary. https://www.stimson.org/2025/how-does-international-law-byte-into-pakistans-cyber-governance/
Iqbal, Z., & Shan, R. us. (2024). Pakistan's cybersecurity landscape: Information and communications technology readiness, challenges and opportunities. Journal of Strategic Studies, 12(2), 105–131.
Irfan, S. M., & Saeed, D. N. (2025). A study of cybersecurity frameworks in organizations of Pakistan. ACADEMIA International Journal for Social Sciences, 4(4), 1803–1824. https://doi.org/10.63056/ACAD.004.04.1031
Javed, Z. (2022). The role of artificial intelligence in the enhancement of cyber security of Pakistan. Journal of Contemporary Studies, 10(2), 1–14. https://doi.org/10.54690/jcs.v10i2.188
Jumaan, S., Kuzminykh, I., Xiao, H., & Ghita, B. (2026). Understanding the skills gap between higher education and industry in cybersecurity. In P. Legg et al. (Eds.), Advances in teaching and learning for cyber security education (Lecture Notes in Networks and Systems, Vol. 1791). Springer.
Kashan, A. H., Mehmood, A., Khan, S. U. R., Aziz, T., & Orakzai, J. K. (2023). Implementation strategies of cybersecurity in Pakistan. Khyber Journal of Public Policy, 2(4), 183–217.
Kausar, S. (2026). The role of cyber policing in controlling dark web crimes in Pakistan. Journal of Political Stability Archive, 4(1), 120–137. https://doi.org/10.63468/jpsa.4.1.07
Khan, A. U. A. (2025). Cyber crime in Pakistan: Trends, challenges, and legal responses. Advance Social Science Archive Journal, 4(1), 1358–1366. https://doi.org/10.55966/assaj.2025.4.1.080
Khan, N. F., Ikram, N., Saleem, S., & Zafar, S. (2022). Cyber-security and risky behaviors in a developing country context: A Pakistani perspective. Security Journal, 36(2), 373–405. https://doi.org/10.1057/s41284-022-00343-4
Khan, Z. (2015). Strategizing cyber revolution within the domain of security studies. Islamabad Policy Research Institute, 15(2), 95–112. https://ipripak.org/wp-content/uploads/2015/10/5-art-s-15.pdf
Mahmood, F. (2025, December 8). Will the new cybersecurity act strengthen defences, or create bureaucratic conflict? The Express Tribune. https://tribune.com.pk/story/2581090/can-new-authority-resolve-cybersecurity-paradox
Majeed, Y., Majeed, A., & Minhas, M. T. (2026). Cybersecurity governance in the digital era and IT: Integrating regulatory oversight, risk management, and organisational resilience in Pakistan. Social Science Review Archives, 4(1), 1806–1829. https://doi.org/10.70670/sra.v4i1.1711
Malik, M. B. (2018). Architecture of cyberspace as an evolving security paradigm in South Asia: Pakistan-India cyber security strategy. Regional Studies, 36(2), 3–35.
Masudi, J. A., & Mustafa, N. (2023). Cyber security and data privacy law in Pakistan: Protecting information and privacy in the digital age. Pakistan Journal of International Affairs, 6(3), 356–366. https://doi.org/10.52337/pjia.v6i3.906
Ministry of Information Technology and Telecommunication. (2018, February 7). Digital Pakistan Policy. Government of Pakistan. https://moitt.gov.pk/SiteImage/Misc/files/DIGITAL%20PAKISTAN%20POLICY.pdf
Ministry of Information Technology and Telecommunication. (2021, July 27). National Cyber Security Policy 2021. Government of Pakistan. https://moitt.gov.pk/SiteImage/Misc/files/National%20Cyber%20Security%20Policy%202021%20Final.pdf
Mirza, M. N., & Akram, M. S. (2022). 3-Cs of cyberspace and Pakistan: Cybercrime, cyber-terrorism, and cyber warfare. Strategic Studies, 42(1), 62–80. https://doi.org/10.53532/ss.042.01.00134
Mutual Legal Assistance (Criminal Matters) (Amendment) Act, Act No. XI of 2021 (2021). https://na.gov.pk/uploads/documents/1628576689_548.pdf
Mutual Legal Assistance (Criminal Matters) Act, Act No. XXII of 2020 (2020). https://na.gov.pk/uploads/documents/1597653825_608.pdf
Nadeem, M. A., Hashmi, S., & Khan, M. A. (2023). Exploring the interplay of cybersecurity and cybercrime in Pakistan's digital landscape. Contemporary Issues in Social Sciences and Management Practices, 4(4), 207–222. https://doi.org/10.61503/cissmp.v2i4.94
National Computer Emergency Response Team. (n.d.). Cyber innovation ecosystem (CIE). Government of Pakistan. Retrieved July 29, 2026,https://pkcert.gov.pk/cie.asp
National Cyber Emergency Response Team. (2025). Pakistan Information Security Framework 2025. Government of Pakistan. https://pkcert.gov.pk/uploads/2025/11/PISF-Introduction.pdf
News Desk. (2020, April 23). Digital Pakistan. The Digital Pakistan Policy: Vision and Execution. Digital Pakistan. https://digitalpakistan.pk/the-digital-pakistan-policy-vision-and-execution/
Osburn, L. D. (2025). Telling stories about vendors: Narrative practices to negotiate risk and establish an organizational cybersecurity culture. Journal of Cybersecurity, 11(1), Article etyae030. https://doi.org/10.1093/cybsec/tyae030
Pirinen, P., Perälä, P., & Lehto, M. (2026). Analysis of cybersecurity strategies across continents. International Conference on Cyber Warfare and Security, 21(1), 668–675. https://doi.org/10.34190/iccws.21.1.4418
Prevention of Electronic Crimes Act. (2016). Act No. XL of 2016. https://www.na.gov.pk/uploads/documents/1472635250_246.pdf
Prevention of Electronic Crimes Act. (2025). Act No. II of 2025. https://na.gov.pk/uploads/documents/679b243193585_457.pdf
Pytlak, A., & Siebens, J. (2024, January 8). Advancing accountability in cyberspace: Models, mechanisms, and multistakeholder approaches (p. 142). The Stimson Center. https://www.stimson.org/2024/advancing-accountability-in-cyberspace/
Qasim, M. S., Ahmad, Z., Maqsood, S., Zafar, S., & Azam, M. (2025). Assessing cybersecurity challenges and response readiness in Pakistan: A comprehensive analysis. Kashf Journal of Multidisciplinary Research, 2(1), 115–125. https://doi.org/10.71146/kjmr215
Rafiq, A. (2019). Challenges of securitising cyberspace in Pakistan. Strategic Studies, 39(1), 90–101. https://doi.org/10.53532/ss.039.01.00126
Rea-Guaman, A. M., Mejía, J., San Feliu, T., & Calvo-Manzano, J. A. (2020). AVARCIBER: A framework for assessing cybersecurity risks. Cluster Computing, 23(3), 1827–1843. https://doi.org/10.1007/s10586-019-03034-9
Rehman, H. M. J. U., & Ahmad, M. (2025). Responsibilities of concerned institutions to overcome cybercrime. Advance Social Science Archive Journal, 4(02), 2736–2747.
Sadat, A., Lawelai, H., Younus, M., & Nurmandi, A. (2025). Comparative analysis of National Cyber Security Index: A case study of Pakistan and Indonesia. Kasetsart Journal of Social Sciences, 46(1), Article e12. https://doi.org/10.34044/j.kjss.2025.46.1.01
Saleem, H. A. R., Bukhtiar, A., Zaheer, B., & Farooq, M. A. U. (2025). Challenges faced by the judiciary in implementing cybersecurity laws in Pakistan. The Critical Review of Social Sciences Studies, 3(1), 1052–1066. https://doi.org/10.59075/1wyx0v30
Sendjaja, T., Irwandi, Prastiawan, E., Suryani, Y., & Fatmawati, E. (2024). Cybersecurity in the digital age: Developing robust strategies to protect against evolving global digital threats and cyber-attacks. International Journal of Science and Society, 6(1), 1008–1019. https://doi.org/10.54783/ijsoc.v6i1.1098
Shabbir, N., & Adnan, M. (2025). Cyber security: A growing challenge to Pakistan. Annals of Human and Social Sciences, 6(1), 372–384. https://doi.org/10.35484/ahss.2025(6-I)32
Shad, M. R. (2019). Cyber threat landscape and readiness challenge of Pakistan. Strategic Studies, 39(1), 1–19. https://doi.org/10.53532/ss.039.01.00115
Shah, S. K. A. (2024). A critical analysis of efficacy of the Prevention of Electronic Crimes Act, 2016: Irritants and remedies. Journal of Pakistan Administration, 45(2), 66–91.
Shahrose, A., Zafar, Y., Khalid, H., & Khan, A. M. Y. (2024). A comprehensive analysis of Pakistan's cybersecurity landscape and its solutions. Al-Qirtas, 3(3), 73–80.
Staff Reporter. (2026, June 21). NCCIA signs MoU on cybersecurity. Dawn. https://www.dawn.com/news/2009554
Tahir, M., Farrukh, T., & Shahid, M. (2019). Cyber laws and cyber security in Pakistan: Myths and realities. Global Social Sciences Review, 4(1), 485–493. https://doi.org/10.31703/gssr.2019(IV-I).62
Triplett, W. J. (2022). Addressing human factors in cybersecurity leadership. Journal of Cybersecurity and Privacy, 2(3), 573–586. https://doi.org/10.3390/jcp2030029
Tufail, T. (2018). Comparing the national cyber security framework of Pakistan with India and United Kingdom [Master thesis]. Tallinn University of Technology. https://digikogu.taltech.ee/en/Download/56aa279d-3c19-4610-b25d-a33defc6d149
United Nations. (2024). UN E-Government Survey 2024: Accelerating digital transformation for sustainable development (United Nations E-Government Surveys, p. 206). https://publicadministration.un.org/egovkb/en-us/Reports/UN-E-Government-Survey-2024
Usmani, M. A. (2023). Analyzing the key responsible factors: Cyber security in Pakistan. Journal of Pakistan Administration, 44(2), 111–122.
Virk, S. K. (2022). National internal security policy: An assessment. Journal of Public Policy Practitioners, 1(2), 49–78. https://doi.org/10.32350/jppp.12.03
Willie, M. M. (2023). The role of organizational culture in cybersecurity: Building a security-first culture. Journal of Research, Innovation and Technologies, 2(4), 179–198. https://doi.org/10.57017/jorit.v2.2(4).05
World Economic Forum. (2022). Global cybersecurity outlook 2022: Insight report. https://www3.weforum.org/docs/WEF_Global_Cybersecurity_Outlook_2022.pdf
World Economic Forum. (2023). Global cybersecurity outlook 2023: Insight report. https://www3.weforum.org/docs/WEF_Global_Security_Outlook_Report_2023.pdf
World Economic Forum. (2024). Global cybersecurity outlook 2024: Insight report. https://www3.weforum.org/docs/WEF_Global_Cybersecurity_Outlook_2024.pdf
World Economic Forum. (2025). Global cybersecurity outlook 2025: Insight report. https://reports.weforum.org/docs/WEF_Global_Cybersecurity_Outlook_2025.pdf
World Economic Forum. (2026). Global cybersecurity outlook 2026: Insight report. https://reports.weforum.org/docs/WEF_Global_Cybersecurity_Outlook_2026.pdf
Zafar, P., & Ali, S. (2025). The PECA Amendment 2025: A critical analysis. Shaikh Ahmad Hassan School of Law. https://sahsol.lums.edu.pk/sites/default/files/2025-11/The%20PECA%20Amendment%202025%20A%20Critical%20Analysis.pdf
Zayn. (2026, January 24). Govt seeks final feedback on Pakistan's new cybersecurity framework PISF 2025. https://www.icci.pk/govt-seeks-final-feedback-on-pakistans-new-cybersecurity-framework-pisf-2025/
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 Talat Ahmad Bhutta; Athar Rashid
This work is licensed under a Creative Commons Attribution 4.0 International License.
