Attitude of Pakistan's Public Institutions Regarding Their Internet Security Posture: Two Public-Record Security Surveys and a Synthesis

Abstract

Two companion working papers and a synthesis note surveying the internet-facing security posture of Pakistan's public-sector institutions — the banks, and the public-sector universities of Khyber Pakhtunkhwa with their regulator (HEC) — using only publicly available data (WHOIS, DNS, TLS certificates, and certificate-transparency logs). Across both sectors the surveys find no shared security standard, with regulators no better than the institutions they oversee, and consider readiness for the coming quantum threat to current encryption. The work measures publicly observable exposure, not vulnerability; all findings are independently verifiable and AI assistance is disclosed