ISLAMABAD: Pakistan’s National Cyber Emergency Response Team has issued a National CERT warning urging personnel to tighten physical security at their workplaces, saying that simple lapses can expose critical systems to unauthorised access.
The advisory, issued as part of Cyber Month 2026, flags unsecured entry points, shared ID badges, unlocked computer screens and unknown USB devices as risks to sensitive facilities and organisational networks. The campaign carries the message “Stay Aware, Stay Secure” and aims to build better physical and cybersecurity practices across the country’s digital infrastructure.
National CERT warning: one badge, one person
National CERT and NTC have directed personnel to wear their identification badges visibly at all times and never to share, lend or leave them unattended. The measures are meant to stop unauthorised people from entering restricted premises and reaching critical infrastructure.
The advisory also warns against tailgating, in which a person without permission follows an authorised employee through a secured door without using their own credentials. Staff have been told not to let unknown individuals follow them into restricted areas and to stay alert when entering secure facilities.
According to the advisory, every badge, door, desk and computer port can become a possible entry point for a security breach. Physical access remains one of the most reliable ways for an attacker to bypass even strong digital defences: once inside a facility, an intruder can plug in a rogue device, read unattended documents or simply walk out with information.
Lock your screen, clear your desk
Personnel have been advised to follow a clean-desk policy, keeping documents, notes and passwords out of sight. They should also lock their computer screens whenever they leave their workstations unattended, even for a few minutes.
The advisory further warns against connecting unknown USB drives, chargers or other devices to computers and systems, saying these can expose organisational networks to security threats. Security researchers have long warned that unfamiliar chargers and cables can be modified to siphon data, a risk that applies as much in government offices as in public places.
Report anything suspicious
National CERT and NTC have urged personnel to report suspicious activity and possible security violations to their respective security teams immediately rather than assuming someone else will notice.
The advisory lands in a week when Pakistani authorities have issued several public warnings. NADRA has cautioned citizens in Punjab against fake websites posing as arms licence services, which charge excessive fees and harvest personal data. The PTA, for its part, has been warning the public about scammers during its cybersecurity awareness push, and has now set formal rules for how complaints against illegal online content must be filed. National CERT and the NTC have separately cautioned families against posting children’s photographs online, warning that shared images can be misused.
Taken together, the advisories show a shift in emphasis: alongside chasing online fraud, the authorities are reminding both staff and citizens that the weakest point in any system is often the human one, a badge left on a desk, a screen left unlocked, or a link clicked without a second thought.
What happens next
Cyber Month 2026 runs through October, and further advisories from National CERT and the NTC are expected as the campaign continues. For organisations, the immediate ask is simple: enforce the badge and clean-desk rules, keep screens locked, and treat every unknown device as a potential threat.
For the public, the parallel warnings from NADRA and the PTA carry a similar lesson. Verify a website before entering personal details, use official channels for government services, and report anything suspicious instead of assuming it is someone else’s problem.
Frequently asked questions
What is National CERT?
The National Cyber Emergency Response Team is Pakistan’s national body for responding to cyber emergencies and issuing cybersecurity advisories to organisations and the public.
What does the new advisory warn against?
Sharing or leaving ID badges unattended, tailgating into secure areas, leaving computer screens unlocked, keeping sensitive documents in the open, and connecting unknown USB drives or chargers to office systems.
What is Cyber Month 2026?
A national awareness campaign run by National CERT and the NTC with the message “Stay Aware, Stay Secure”, aimed at improving physical and cybersecurity practices across Pakistan’s digital infrastructure.
