NIBAF Pakistan has successfully conducted a specialised two day training module on the Cybersecurity Risk Based Inspection Framework for cyber risk officers at its Islamabad Campus. The session was held under the Cyber Risk Officers Scheme, CROS 1, on August 20 and 21, 2026, with a focus on strengthening the practical capabilities required to assess cybersecurity risks across banking institutions.
The specialised module was designed to provide cyber risk officers with practical knowledge and structured frameworks for conducting cybersecurity risk assessments. The training also covered the evaluation of institution level cybersecurity controls, inspection of critical infrastructure and compliance with regulatory cybersecurity guidelines applicable to the banking sector.
The programme was facilitated by Mustafa Shiraz Ahmed, Senior Joint Director at CRMD. His role in delivering the technical module provided participants with guidance focused on cybersecurity risk based inspection and the assessment of controls within financial institutions.
A key focus of the two day session was cybersecurity risk assessment. As banking institutions increasingly rely on digital systems and technology infrastructure, identifying and evaluating cyber risks has become an important part of institutional risk management. The module was structured to help cyber risk officers understand the frameworks used to assess these risks and examine the effectiveness of existing controls.
The training also addressed institution level controls, enabling participants to examine cybersecurity measures within financial institutions from a risk based inspection perspective. Assessing such controls can help identify areas that require stronger safeguards and determine whether existing measures align with applicable cybersecurity requirements.
Critical infrastructure inspection was another component of the specialised module. Banking institutions depend on technology infrastructure to support financial services and maintain operational continuity, making the assessment of critical systems an important part of cybersecurity oversight. The programme provided cyber risk officers with practical frameworks for carrying out these inspections.
Regulatory compliance was also included in the training, with participants focusing on cybersecurity guidelines applicable across the banking sector. Understanding regulatory requirements is an important responsibility for cyber risk officers, particularly when evaluating whether institutions have established and maintained appropriate cybersecurity controls.
The programme formed part of CROS 1, the Cyber Risk Officers Scheme, and was held at NIBAF Pakistan’s Islamabad Campus. The two day format provided participants with an intensive technical learning experience centred on cybersecurity inspection frameworks rather than general cybersecurity awareness.
The focus on risk based inspection reflects the growing importance of structured cybersecurity oversight within financial institutions. Rather than assessing technology controls in isolation, a risk based approach considers the potential impact of cybersecurity weaknesses and the effectiveness of controls designed to manage those risks.
For banking sector cyber risk officers, the skills covered during the module can support activities involving cybersecurity assessments, institutional control reviews, critical infrastructure inspections and regulatory compliance checks. The training therefore addressed several areas that form part of cybersecurity risk management within financial institutions.
NIBAF Pakistan’s latest programme adds to its professional training activities focused on strengthening specialised capabilities within the financial sector. By conducting technical programmes for cyber risk officers, the institution is supporting the development of expertise required to assess technology and cybersecurity risks within banking institutions.
The Cybersecurity Risk Based Inspection Framework module was conducted on August 20 and 21 at the Islamabad Campus, with Mustafa Shiraz Ahmed serving as facilitator. The programme provided participants with practical frameworks covering cybersecurity risk assessments, institution level controls, critical infrastructure inspections and regulatory cybersecurity compliance. The completion of the two day module under CROS 1 highlights the importance of specialised cybersecurity training for banking sector professionals as financial institutions continue to depend on digital infrastructure and technology based systems.
Follow the PakBanker Whatsapp Channel for updates across Pakistan’s banking ecosystem.