Pakistan and Saudi Arabia Sign Cybersecurity Cooperation MoU at LEAP 2026

Pakistan and Saudi Arabia have formalised a new bilateral cybersecurity relationship, signing a memorandum of understanding between Pakistan's Ministry of Information Technology and Telecommunication and Saudi Arabia's National Cybersecurity Authority during LEAP 2026, the Kingdom's flagship technology conference held in Riyadh from August 31 to September 3. The agreement was signed by Pakistan's IT Minister, Shaza Fatima Khawaja, and NCA Governor Engineer Majed Al-Mazyed.

The MoU is aimed specifically at protecting the cyberspace and vital interests of both countries, strengthening bilateral cooperation through the exchange of expertise and best practices to better address emerging cyber threats together. That framing, expertise exchange and shared best practice development rather than a narrower technical integration agreement, positions the MoU as an institutional capacity-building arrangement, the kind of agreement that builds long-term working relationships between national cybersecurity authorities rather than addressing a single, immediate technical problem.

The cybersecurity agreement did not emerge in isolation. It builds on deeper institutional ties between the two countries, including the Strategic Mutual Defence Agreement signed in September 2025, and both sides have indicated plans for joint workshops specifically to align Pakistan's IT strategy with Saudi Arabia's Vision 2030 economic diversification programme.

The signing took place against the backdrop of a considerably larger Pakistani delegation effort at LEAP 2026, an event that drew more than 1,800 technology brands, 600 startups and 1,900 investors this year. Khawaja led the delegation, delivering a keynote address titled "How We Built a Digital Nation," and held a series of bilateral meetings during her visit, including with Saudi Arabia's IT and Communications Minister Abdullah Al-Swaha, Algeria's minister of knowledge economy, South Korea's minister of science and ICT, and the Digital Cooperation Organisation's secretary general, Deemah AlYahya.

A separate meeting with Abdullah bin Sharaf Alghamdi, President of Saudi Arabia's Data and Artificial Intelligence Authority, points to a parallel AI partnership taking shape alongside the cybersecurity agreement. That partnership centres on a planned AI Hub connecting Pakistani firms with Saudi clients, anchored by Saudi telecoms company GO Telecom, which launched its own AI hub in Islamabad the previous month. Khawaja described the model as one built on value creation on both sides, explicitly distinguishing it from an aid or lending relationship, a framing that positions Pakistan's technology sector as a genuine commercial partner rather than a recipient of Saudi investment alone.

Khawaja also formally inaugurated the Tech Destination Pakistan Pavilion during her visit, which featured 25 startups and more than 50 Pakistani technology companies showcasing AI, automation and digital technology solutions. The event delivered concrete commercial outcomes beyond the government-to-government agreements. Pakistani business automation platform OfficeFlow AI signed an incubation partnership agreement with Dhahran Techno Valley, one of Saudi Arabia's established technology ecosystems, focused on developing and scaling an AI-powered business automation platform across the region, and separately signed a deal with MIS Arabia, a major Saudi technology services company serving clients including Aramco. Ignite-supported startup Edversity secured a $400,000 investment from Rapidev Group to accelerate international expansion of its AI-powered education platform.

For Saudi Arabia specifically, the NCA's agreement with Pakistan fits a broader pattern of the Kingdom actively building bilateral cybersecurity relationships alongside its domestic digital infrastructure investment. As Saudi Arabia continues pouring investment into digital infrastructure, artificial intelligence and other technology sectors under Vision 2030, the NCA has increasingly positioned itself as an active participant in regional and international cybersecurity cooperation, extending Saudi Arabia's cybersecurity diplomacy alongside its more heavily publicised AI infrastructure and investment announcements, building on a domestic regulatory foundation, the NCA's Essential Cybersecurity Controls, that already mandates third-party risk management for GCC enterprises. Pakistan's technology exports reached a record $4.6 billion in the last fiscal year, according to the Pakistan IT Industry Association, underscoring the commercial momentum behind this deepening bilateral relationship.

For organisations operating across both markets, particularly technology vendors, cybersecurity firms and managed service providers with a presence in Saudi Arabia and Pakistan simultaneously, this MoU is worth tracking as a signal of where formal government-to-government cybersecurity cooperation channels are developing across a wider region where regulatory frameworks are tightening in step with rising AI-driven threat exposure. Bilateral agreements of this kind typically precede more concrete outcomes over time, joint training programmes, shared threat intelligence arrangements, or coordinated incident response frameworks between the signatory authorities. With joint workshops already planned to align Pakistan's IT strategy with Vision 2030, this MoU appears positioned to move toward operational follow-through more directly than a standalone cooperation framework signed without a stated implementation pathway.