An official website of the Pakistan government Here’s how you know
Official websites use .gov
A .gov website belongs to an official government organization in the Pakistan.
Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Registered Audit Firms
The implementation of information and cybersecurity controls across Information Technology (IT), Operational Technology (OT), and Cloud environments by Federal Ministries, Divisions, and Departments, in compliance with the frameworks, guidelines, and policies issued by NCERT/NTISB, has been initiated by NCERT. This process requires engagement with firms that follow recognized cybersecurity standards, methodologies, and industry best practices.
Based on the assessment of documents submitted under the Cybersecurity Auditing Firm Registration criteria published on the NCERT website, appropriate categories have been assigned to the firms listed below. These firms are available to support Federal Ministries, Divisions, and Departments in compliance audits. To maintain auditor independence and avoid conflicts of interest, a firm engaged for consultancy and/or internal compliance audits shall not be engaged for any subsequent external audit, if required by NCERT or any relevant regulator.

This list will be constantly updated, as new firms are approved, or categories of existing firms are elevated/de-elevated. To verify an audit firm’s certificate click here

Cloud Security Registered Firms

CATEGORY FIRM CONTACT INFORMATION
CAT-I RISK ASSOCIATES (PVT) LTD. Name: Kashif Hassan
Email: kashif.hassan@riskassociates.com
Phone: +923002031186
CATALYIC SECURITY Name: Muhammad Bilal Islam
Email: bilal@catalyic.com
Phone: +923214518529

IT Security Registered Firms

CATEGORY FIRM CONTACT INFORMATION
CAT-I RISK ASSOCIATES (PVT) LTD. Name: Kashif Hassan
Email: kashif.hassan@riskassociates.com
Phone:+923002031186
CATALYIC SECURITY Name: Muhammad Bilal Islam
Email: bilal@catalyic.com
Phone:+923214518529
YOTTABYTE (PVT) LTD. Name: Imran Khalid
Email: securenow@yottabyte.ltd
Phone:+923316217187
TRILLIUM INFORMATION SECURITY SYSTEMS (PVT) LTD. Name: Aniqa Fareed
Email: aniqa.fareed@trilliuminfosec.com
Phone:+923128661709
EBRYX (PVT) LTD. Name: Talal Hassan Bukhari
Email: syed.talal@ebryx.com
Phone:+923004899064
NATIONAL ELECTRONICS COMPLEX OF PAKISTAN (NECOP)
Approved Mode: Direct Contracting in Government-to-Government (G2G)
Name: Zia-Ul-Haq
Email: info.cs@necop.gov.pk
Phone:+923238557040, +925191975989
COMMON CRITERIA PAKISTAN LAB Name: M Saim Malik
Email: saim@commoncriteria.gov.pk,
director@commoncriteria.gov.pk
Phone: +923339409750, +923209020948
REDSECLABS (PVT) LTD. Name: Hashim Mufti
Email: hashim.mufti@redseclabs.com,
rafay@redseclabs.com
Phone: +923015121337
360 TECHNOLOGIES (PVT) LTD. Name: Bilal Asif
Email: bilal@360technologies.net
Phone: +923238556832
CS ZONE (PVT) LTD. Name: Muhammad Asad Ul Rehman
Email: info@cszone.pk,
asad@cszone.pk
Phone: +923707041413
DAS CERTIFICATION (PVT) LTD. Name: Nosheen Wajahat
Email: nosheenwajahatali@gmail.com,
nosheensajida@das.com.pk
Phone: +923325058817
DIGIINN360 (PVT) LTD. Name: Ahmed Ali
Email: procurement@digiinn360.com
Phone: +923095624742
COMPUTER MARKETING COMPANY (PVT) LTD. Name: Dr. Muhammad Hasan Islam
Email: mhasan@cmc.net.pk
Phone: +923335144715
CAT-III REWTERZ (PVT) LTD. Name: Amir Kazmi
Email: amir.kazmi@rewterz.com
Phone: +923355323625
GROWTHARBOR (PVT) LTD. Name: Kumail Morawala
Email: info@growtharbor.com
Phone: +923452388625

OT Security Registered Firms

CATEGORY FIRM CONTACT INFORMATION
CAT-I PHITECH SOLUTIONS (PVT) LTD. Name: Qasim Ali
Email: qasim.ali@phitech.com.pk
Phone: +923098888087
NATIONAL ELECTRONICS COMPLEX OF PAKISTAN (NECOP)
Approved Mode: Direct Contracting in Government-to-Government (G2G)
Name: Zia-Ul-Haq
Email: info.cs@necop.gov.pk
Phone:+923238557040, +925191975989
Subscribe To Alerts