The National Computer Emergency Response Team (CERT) has issued a fresh advisory for institutions and the public, stressing stronger data protection practices to safeguard personal information against rising cyber threats.

Advisory for institutions

According to the advisory, all organizations must implement data encryption, access controls, and breach protocols to prevent sensitive information from being exposed. Outdated IT systems, weak cybersecurity frameworks, and the use of malicious mobile apps were highlighted as the biggest risks.

The National CERT warned that the theft of identity cards, health records, and financial data poses a serious threat to public trust. Institutions found guilty of leaking personal information could face action under the Prevention of Electronic Crimes Act (PECA).

Also Read: Cyber crime agency rules: Cases to be tried under PECA, PPC

The advisory also directed organizations to adopt a zero trust model, multi-layered access controls, and a disaster recovery plan to ensure preparedness against cyberattacks.

Public guidelines

For individuals, National CERT advised extreme caution when sharing personal documents such as CNIC copies. Citizens have been urged to write the purpose clearly on copies to prevent misuse.

People were further instructed to:

Use strong and unique passwords
Enable multi-factor authentication
Avoid downloading apps from unverified sources

Also Read: Alert! PTA warns against sharing OTP with unknown callers

National security priority

The agency underlined that data protection is not just a legal requirement but a strategic necessity linked to national security. Protecting sensitive information, it said, is essential to maintaining public trust in digital systems and preventing exploitation by malicious actors.