The Khyber Pakhtunkhwa government in Pakistan is adopting digitisation and open governance portals to ensure improved delivery of public services. More investment and reliability of public departments on Information Communication Technology (ICT) will result in IT assets becoming a cornerstone for the functioning of government departments. However, any cyber/physical attack on critical ICT infrastructure can cause a disruption in the delivery of government services, and is therefore, a national security issue. This paper identifies gaps in the legislature that is causing hurdles for the creation of a Cyber Security Centre in Pakistan which can ensure baseline compliance by government departments. This paper will propose areas where baseline standards need to be adopted by the government to ensure the security of procured or developed digital assets. Moreover, it is equally important to clearly define cyber crime and cyber security. Lack of a national authority or law for data protection is also empowering data management platforms to process and retain citizens’ data without any legal implications leading to ‘data colonisation.’ The paper will also discuss the impact of data colonisation and need for balance between security, privacy and freedom of expression.