Pakistan Cyber Security Association (PCSA) Nahil Mahmood, Chairman Ibrahim Amin, Co-Chairman
Legal Technical Organizational Capacity building Cooperation
Global Cybersecurity Index & Wellness Profile
Asia Pacific Region
South Asia Comparison
Cyber Security Survey Results Survey Question Yes No Formal information security policy signed off by Board/Steering Committee ? 7 3 Separate department for Information Security with a Head of Infosec / CISO ? 6 4 Internal vulnerability management program (VM) and appropriate tools for VM ? Independent security assessment by a 3rd party in the last 6 months ? 1 9 Penetration testing by a 3rd party in the last 6 months ? Security hardening benchmark such as CIS/DISA/OWASP for IT assets hardening ? Security awareness program and testing mechanism for IT staff ? 2 8 Implemented global security framework such as ISO27001:2013 or PCI ? Cooperative culture among depts such as IT/Risk/InfoSec/Audit/Compliance ? Process oriented culture for IT and Information Security ? Formal process for InfoSecurity team to conduct security accreditation ? For in-house software development, is security well-embedded in the SDLC ? Organization demonstrates management commitment ? InfoSec staff is atleast 15-20% of IT staff ? Do you have a formal incident management and change management process ? AVERAGE SCORE = 2.5/10
Security Posture Summary (Pakistan) Reactive Contentious Silos Security hardening missing Denial
MISSION To Build Effective Cyber Security Eco-System in PK & Bring Up The National Cyber Wellness Profile To #1 In South Asia In 5 YRS & Top 5% In The World In 10 YRS
WORKING COMMITTEES CRIMINAL LEGISLATION CIRT POLICY STANDARD-ISATION. LEGAL COMMITTEE TECHNICAL COMMITTEE ORGANIZATION.MEASURES COMMITTEE CAPACITY BUILDING COMMITTEE COOPERATION COMMITTEE CHILD PROTECTION ONLINE CRIMINAL LEGISLATION CIRT POLICY STANDARD-ISATION. DEVELOP.-MENT INTRA-STATE COOPERATION NATIONAL LEGISLATION REGULATION & COMPLIANCE STANDARDS ROADMAP FOR GOVERNANCE MANPOWER DEVELOP-MENT INTRA-AGENCY COOPERATION UN CONVENTION & PROTOCOL CERTIFICATION. RESPONSIBLE AGENCY PROFESSIONAL. CERTIFICAT-ION PUBLIC SECTOR PARTNERSHIP INSTUTIONAL SUPPORT NATIONAL BENCHMARK-ING AGENCY CERTIFICAT-ION INTERNATION-AL COOPERATION REPORTING MECHANISM
OBJECTIVES 1. BRINGING TOGETHER ALL CYBER SECURITY STAKEHOLDERS ON TO A COMMON PLATFORM 2. RECRUITING VOLUNTEERS FOR SERVING NATIONAL CAUSE 3. POOLING RESOURCES, KNOWLEDGE, AND TALENT FOR SERVING THE COUNTRY IN CYBER SECURITY 4. RAISING PUBLIC & INSTITUTIONAL AWARENESS ON CYBER SECURITY 5. TRAINING & ENHANCING THE KNOWLEDGE AND SKILLS OF CYBER SECURITY WORKFORCE
PCSA Organization Open Transparent Authentic Credible Integrity Professional
Lets All Work Together For National Cyber Security Posture Enhancement ! We welcome all stakeholders to come together for national cause Please visit our stall and sign up for committees Advisory Board Chapter Executive Committee CISO Board chairman.pcsa@gmail.com