Pakistan Initiates Cloud Provider Accreditation for Enhanced Data Security

• •Pakistan's IT ministry has started accrediting cloud providers under a new policy.
• •The accreditation process includes strict security vetting and independent audits.
• •All public sector entities must use accredited cloud services for new IT projects.

On May 26, 2026, Pakistan's Ministry of Information Technology and Telecommunication began accrediting cloud service providers under the Pakistan Cloud First Policy. This initiative aims to enhance data security and ensure that sensitive government and citizen data is stored on local servers. Six applications for accreditation have been received, with a requirement for rigorous security reviews and independent audits by third-party auditors. The policy mandates that all public sector entities use cloud services for new IT projects instead of building separate data centers. The establishment of a Cloud Office and provincial Cloud Acquisition Offices is part of the implementation strategy. This move is expected to reduce foreign exchange outflows by promoting local cloud services. The policy framework is designed to protect against cyber threats and improve governance in data management.