DefinePK

Abstract

Cybersecurity risks are growing, making strong legislative frameworks necessary to ensure adherence and protect digital infrastructures. Because of changing cyber threats, regulatory loopholes, and enforcement constraints, cybersecurity policy compliance in Pakistan continues to be a major concern. This study examines the existing cyber laws, their effectiveness, and capacity building in implementation, specifically in Pakistan. This study draws upon interviews with 15 respondents from different fields: Federal Investigation Agency (FIA) agents from the cyber unit, prosecutors from the criminal unit, and cyber victims. The purpose of the interviews was to delve into the respondents' views on the current cyber laws and their effectiveness. Analyzing the collected data from in-depth interviews applying thematic analysis while identifying key themes, for instance, the gaps in the victim’s support mechanism and effectiveness in the existing legislative framework. The results highlight the dire need for significant modifications to address these challenges, for instance, public awareness campaigns, institutional capacity building, and technical expertise, and to provide significant new details about Pakistan's cybersecurity laws' inadequacies through providing policymakers essential details to strengthen legislative measures and prevent individuals from cyber threats.