Ministry of IT and PKCERT issue 2026-27 cybersecurity handbook with AI and cloud restrictions
Published · Updated
What happened
The Ministry of IT and Telecommunications and PKCERT published the National Cybersecurity Handbook 2026-27 on September 19. The document instructs government personnel and public-sector entities not to use personal email, unapproved hardware, commercial cloud platforms, or public AI tools for official or sensitive work.
Why it matters
The handbook changes day-to-day digital operating rules across the public sector and can alter procurement, access controls, document handling, and staff workflows immediately. It also signals that the government is treating unmanaged AI use, third-party cloud storage, and weak endpoint discipline as current exposure points for state systems and citizen data.
Pakistan's Ministry of IT and Telecommunications and PKCERT released the National Cybersecurity Handbook 2026-27 on September 19, setting immediate operating rules for government employees and public-sector bodies. The handbook bars official or sensitive work from being conducted through personal email accounts, unapproved devices, commercial cloud services, and public AI tools. The move creates a near-term implementation question across ministries, agencies, and state-linked bodies that rely on mixed formal and informal digital workflows.
Watch for
Ministry of IT and Telecommunications circular naming compliance deadlines and designated approved platforms by 2026-09-22 PKCERT publication of sector-specific implementation advisories or baseline controls for public bodies by 2026-09-22 National Information Technology Board notice on government email, device-management, or cloud migration requirements by 2026-09-23 Cabinet Division or Establishment Division directive extending handbook compliance to attached departments and autonomous bodies by 2026-09-23
Researched and written by AI from the sources listed, under published rules. How V³ Aware is made