Multiple working groups at GHQ have been drawing up plans for a cyber command of sorts.
Offensive cyber capabilities are often utilized. Devastating cyber attacks are generally considered acts of war --- you don't go around doing that unless you can deal with the response. How would you rate the cyber defenses of our own critical infrastructure given that the reprisal attack will be from a better-resourced/funded enemy (India)?
To be clear, I'm not excusing the govt's lax attitude --- the problems are much deeper and beyond the scope of this thread; they are societal and structural, and they're going to take decades to fix IF we even get a leader capable of fixing them.
At the higher limit, the ISI is worth whatever directive, freedom and resources you give it to achieve a task.
At the lower end, the ISI is worth the petty politics, internal bureaucratic struggles and officers of questionable intellect that plague all institutions.
Rest assured, everything you've mentioned is not just being explored but has successfully been deployed multiple times. The ISI has a dedicated SIGINT wing which often naturally gets the additional responsibility of small-scale cyber warfare --- but many other units also take part.
I feel for you. Your enthusiasm and passion is evident --- and soon it will be blunted by the painful realities of Pakistan's gigantic bureaucracies, whether civ or mil. What Pakistan "should" do is abundantly clear to you, me and many others on this forum --- but our leaders have interests beyond just what's best for the country.
All these doctrinal questions have been discussed for almost 5 years now at the appropriate forums. The various types of moves (remote tailored access, SCADA attacks, zero day exploits, etc.) are largely irrelevant when the political and military will simply doesn't exist to escalate things with India or to create a "New Normal" that puts them in a tough spot. Long ago, we accepted our defensive posture, using a myriad of excuses to justify it (internal threats/substate violence, weak economy, questionable politicians, etc etc etc.)
GHQ's current idea of deterrence is strange, twisted and will likely cost us dearly. One just has to see our "amazing" (as the fanboys would have you believe) achievements regarding IOK. You'll get the Docile Duo's fanboys defending their inaction by using the "weak economy" card --- that's utter BS, because it was used during our nuclear program too (Fin. Minister Sartaj Aziz forcefully opposed our planned tests at Chagai in a critical meeting based on the potential of sanctions, a slowing economy, etc.) but, thankfully, Pakistan went ahead with its nuclear tests. Today, I am the proud owner of a Chagai Medal (not awarded to me) because it is a reminder of the right priorities at the right time --- something we haven't had for decades now.
If you have any specific questions, feel free to ask.
