Govt Orders e-Office Isolation from Internet Amid Rising Cyber Threats

The government has directed all federal and provincial institutions to disconnect their e-Office systems from the public internet and shift them to secure internal networks, as part of a nationwide effort to counter rising cyber threats, official sources said on Thursday.

The move follows an advisory issued by the National Computer Emergency Response Team (National CERT), which warned of increasing risks to sensitive government data and digital infrastructure. Authorities have since intensified monitoring of official IT systems to prevent potential cyberattacks and breaches.

Under the new directives, ministries and departments have been instructed to operate e-Office platforms exclusively on protected internal systems rather than public internet connections. Officials say the decision aims to significantly reduce exposure to external threats and unauthorized access.

Sources further revealed that all government departments are now required to deploy modern cybersecurity tools, including advanced antivirus software and Endpoint Detection and Response (EDR) systems, to enhance real-time threat detection.

In addition, the installation of next-generation firewalls has been recommended to strengthen network security, while strict access control policies are being enforced to limit system access to authorized personnel only.

To further tighten security, access to e-Office systems will be restricted to specific approved networks, with IP and MAC address binding ensuring that only verified devices can connect.

Authorities have also imposed a complete ban on the use of unauthorized Virtual Private Networks (VPNs), citing concerns that such tools may create vulnerabilities within secure government systems.

All employees using the e-Office platform have been directed to strictly follow updated cybersecurity protocols, reflecting a broader push to safeguard sensitive data and improve digital governance resilience.

Officials confirmed that ministries and departments have been given a one-month deadline to fully implement these measures.

The new policy, according to sources, is expected to significantly reduce the risks of hacking, data theft, and unauthorized access, marking a critical step towards strengthening Pakistan’s cybersecurity posture.