National CERT has ordered all federal ministries to implement a massive security overhaul of the e-Office system within 30 days to neutralize surging cybersecurity threats. The directive, issued by Director General Dr. Haider Abbas, targets 43 key departments and mandates the immediate deployment of Next Generation Firewalls to monitor all internal traffic.
Strengthening e-Office Security Protocols
To safeguard sensitive state data, the government is moving to isolate the e-Office network from the public internet. Under the new guidelines, ministries must enforce strict IP whitelisting, ensuring that only approved devices and authorized networks can access official portals.
Critical Compliance Requirements
Ministries are required to meet the following benchmarks by the end of the month:
- Mandatory MFA: Implementation of two-factor authentication for all government email users.
- VPN Restrictions: Total ban on unauthorized VPNs without prior National Information Technology Board (NITB) approval.
- Leadership: Appointment of a dedicated Director of Cyber Security in every ministry.
- Endpoint Defense: Installation of updated antivirus software and rigorous endpoint security patches.
National CERT Strategy for Data Protection
The National CERT advisory emphasizes that these measures are non-negotiable for protecting the integrity of the government’s digital infrastructure. Director Khurram Javed will lead the coordination efforts to ensure that all 43 ministries transition to the secured environment without delay. Failure to comply within the 30-day window could leave critical systems vulnerable to external cyber intrusions and malicious actors.