National IT and cryptographic evaluation standards play a vital role in ensuring the security, reliability of ICT systems and for establishing a secure/reliable foundation for digital communication, commerce and critical infrastructure within a country. The importance of National Security Standards is paramount for mitigation of potential risks, trust and confidence, compatibility and interoperability, security assurance by development of an eco-system of certification and evaluation, global recognition by aligning with international standards and requirement of legal/regulatory compliance framework.
Pakistan Security Standards (PSS) have been promulgated by a Statutory Notification S.R.O. 762(1)/2023 dated 14 June 2023 wherein the Federal Government in consultation with the PSQCA has notified the PSS which will become mandatory w.e.f 1st June 2028 after which the manufacture, storage and sale of the articles (which claim provision of a specific cyber security and cryptographic function) will be prohibited if not conforming to the PSS.

Purpose:

The PSS establishes a trusted framework for the evaluation, certification, and deployment of cryptographic and IT security devices across Pakistan. It strengthens national cyber resilience by providing:

• Standardized benchmarks for product evaluation
• Assurance for users and organizations adopting IT security products
• Support for regulatory and compliance requirements
• A foundation for secure digital transformation in Pakistan

Items Subject to Evaluation Under the Pakistan Security Standard

S.No.	Description of Article	Category	PSS Book
1.	Such articles that claim provision of a specific cyber security function such as all kinds of firewalls, network routers, high capacity switch, intrusion detection and prevention, end point security, secure access control systems, security information management, security information and event management, secure operating systems, applications, secure database management, anti-denial of service, anti-virus, anti-spyware, anti-theft, anti-malware or any other such solution.	IT Security	PS:5543 Pakistan Security Standard for Cryptographic & ITSec Devices - ITSec Guide Book
2.	Such articles that claim provision of confidentiality, integrity, authentication, availability or non-repudiation to users, networks or systems such as all kinds of cryptographic encryptors, hardware security modules, key generation, management or distribution systems, cryptographic tokens or systems authentication, cryptographic algorithms or protocols or operations, cryptography-based communication or web applications, secure Virtual Private Networks or other secure access/user solutions.	Cryptographic	PS:5544 Pakistan Security Standard for Cryptographic & ITSec Devices - Crypto Guide Book

 

PSS Stakeholders

Defence Sector
Public Sector
Academia & Industry
Regulatory Bodies