Cybersecurity Compliance Workflow — P@SHA Policy Portal

1

Ensure compliance with Pakistan Electronic Crimes Act — unauthorized access, data theft are criminal offenses.

2

Apply NTISB-recommended cybersecurity controls for ISPs and IT companies.

3

Prepare incident response procedures and register ability to report to NCERT.

4

If handling financial data, implement SBP Cyber Shield requirements per BPRD C4/2024.

5

Monitor Personal Data Protection Bill progress — prepare for data localization requirements.

6

If a government vendor, comply with NTC security standards for IT procurement.