National Database and Registration Authority (NADRA) has assured the citizens of Pakistan that their data is fully secure, and no incidents of data breach have ever been recorded to date, NADRA spokesperson said.
The spokesperson also highlighted that NADRA has established information security department charged with evaluation and mitigation of external and internal security threats. NADRA employs proactive means of protecting citizen data stored in the National Data Warehouse, adding that confidentiality, integrity and availability of data lie at the heart of the systems, policies and procedures that govern the transmission of data. NADRAhas deployed new technology tools to safeguard citizens against identity theft and to protect documents against alteration and forgery. Spokesperson said that the authority after having analysed through the behavioural trends of the data has become more vigilant and routinely takes notice of suspicious attempts to obtain CNICs through the use of fake documents. It instantly investigates such cases to hand over correct information to staffers.
NADRA, which recently announced having successfully registere 92 million citizens with their biometrics, enforces information security standards and policies and employs Information Security certified specialists with decade long experience. The IS department does periodic penetration testing, data centre security audit, network security audit and physical security assessments. Each and every transaction in ID card processing is recorded and logged and it can be traced back that who touched whose CNIC during or post processing.
Employees of NADRA have been trained how to protect privacy of the citizens and they know that breaching organization information or citizen’s trust would trigger strict disciplinary action.
The spokesperson added that internal security is just as crucial to NADRA, and the organisation has lived up to its role as a pioneer of cutting-edge security solutions in the country and world-wide, implementing information security strategies, processes and protocols that ensure complete confidentiality, integrity and availability of data.
The spokesperson noted that it is because of NADRA secure data center and security locked National Datawarehouse that other institutions have also hosted their sensitive data and servers in NADRA as well.