The National Computer Emergency Response Team (CERT) has issued a fresh advisory for institutions and the public, stressing stronger data protection practices to safeguard personal information against rising cyber threats.
Advisory for institutions
According to the advisory, all organizations must implement data encryption, access controls, and breach protocols to prevent sensitive information from being exposed. Outdated IT systems, weak cybersecurity frameworks, and the use of malicious mobile apps were highlighted as the biggest risks.
The National CERT warned that the theft of identity cards, health records, and financial data poses a serious threat to public trust. Institutions found guilty of leaking personal information could face action under the Prevention of Electronic Crimes Act (PECA).
Also Read: Cyber crime agency rules: Cases to be tried under PECA, PPC
The advisory also directed organizations to adopt a zero trust model, multi-layered access controls, and a disaster recovery plan to ensure preparedness against cyberattacks.
Public guidelines
For individuals, National CERT advised extreme caution when sharing personal documents such as CNIC copies. Citizens have been urged to write the purpose clearly on copies to prevent misuse.
People were further instructed to:
-
Use strong and unique passwords
-
Enable multi-factor authentication
-
Avoid downloading apps from unverified sources
Also Read: Alert! PTA warns against sharing OTP with unknown callers
National security priority
The agency underlined that data protection is not just a legal requirement but a strategic necessity linked to national security. Protecting sensitive information, it said, is essential to maintaining public trust in digital systems and preventing exploitation by malicious actors.
