Regulatory Alerts2026-02-16 | CRMD Circular Letter No. 01 of 2026 of 2026Added · Updated
Launch of Cyber Shield Cyber Resilience Strategy for SBP Regulated Entities (2025-2030)
The State Bank of Pakistan introduces the Cyber Shield strategy to enhance the cyber resilience of regulated entities through five strategic priorities: strengthen, mature, enhance, develop, and evolve. The framework mandates the implementation of a cyber-testing framework, the adoption of a risk-based approach to cybersecurity investment, and the development of a Zero Trust Architecture roadmap for critical banking infrastructure. Regulated entities are required to improve cyber governance by strengthening the roles of the CISO and CIO/CTO, while Financial Market Infrastructures must align business continuity plans with a two-hour recovery time objective. Additionally, the strategy establishes a threat intelligence sharing platform, a standardized incident reporting framework, and a multi-year cyber exercising program to foster collaboration and workforce development.