Ministry of Information Technology and Telecommunication (MoITT) has initiated the registration process for cloud service providers (CSPs) as part of efforts to strengthen data security standards and regulate cloud based services operating in Pakistan. The move comes under Pakistan Cloud First Policy (PCFP), which introduced strict accreditation requirements for providers to ensure that national and public sector data remains protected and managed under approved standards. According to ministry officials, six cloud service providers have already submitted applications for accreditation as the government begins implementing the policy framework designed to improve digital infrastructure and secure cloud adoption across the country.
IT Minister Shaza Fatima stated that the accreditation process includes stringent security requirements and quality benchmarks for cloud service providers. She said providers will be required to undergo detailed security checks and third party audits conducted by auditors registered with PKCERT to ensure sensitive government and citizen data remains protected from cyber threats and unauthorized access. She explained that one of the major features of the policy is the requirement for sensitive national data to be stored on servers physically located within Pakistan. According to the minister, this measure is intended to ensure that government and public data remains under Pakistan’s legal and regulatory framework while reducing risks associated with hosting critical information abroad.
The minister further said that under Pakistan Cloud First Policy, all public sector entities, including federal and provincial departments, are required to adopt cloud services for future information technology projects instead of establishing separate and costly data centres. She added that the transition process has already started, with provincial governments approving versions of the policy aligned with federal objectives. To support implementation, MoITT has established a Cloud Office to oversee accreditation procedures and facilitate cloud adoption throughout the public sector. In addition, specialised Cloud Acquisition Offices will be introduced in provinces to assist departments in acquiring cloud services securely and efficiently while ensuring compliance with approved standards and operational requirements.
A senior ministry official noted that the accreditation of cloud service providers is important because both public institutions and private organisations may not have complete awareness regarding security protocols and operational safeguards followed by service providers. The official stated that registration will also help authorities monitor investments in cloud infrastructure and avoid unnecessary spending that may exceed actual requirements. Separately, a ministry report highlighted the economic impact of adopting local cloud services, stating that significant foreign exchange is currently spent on imported IT solutions. By shifting toward local cloud providers, Pakistan could retain more financial resources within the domestic economy and reduce external spending on technology services. According to the report, policy oversight will be managed through a Cloud Board headed by the IT Secretary and supported by provincial representatives to ensure coordinated implementation across the country.
Follow the SPIN IDG WhatsApp Channel for updates across the Smart Pakistan Insights Network covering all of Pakistan’s technology ecosystem.
