Cyberinformation security is vital in protecting the country's successful development in the digital era. Responding to cyberinformation security incidents is crucial to help agencies and organizations minimize damage, even when serious incidents occur.
To enhance the effectiveness of network incident response operations, the Prime Minister directs ministries, ministerial-level agencies, provincial/municipal People's Committees, state corporations and organizations to implement the following contents:
First, they must employ active approach in responding to cyberinformation security incidents, including:
Actively search for threats and scan for vulnerabilities in information systems within the scope of management at least once every six months; Issue emergency response plans and scenarios for the information system before December 31, 2022, and promptly update when there are changes; Organize combat drills at least once a year for information systems at level 3 or higher to promptly assess the ability to prevent intrusion and detect weaknesses in processes, technology and people. In the case of detecting weaknesses, security holes that allow penetration and control of the system, simultaneously remediate weaknesses and vulnerabilities, and hunt for threats.
Second, the Ministry of Information and Communications must develop Incident Response Teams for 11 important areas prioritized to ensure cyberinformation security according to Decision No. 632/QD-TTg dated May 10, 2017, of the Prime Minister; build the Team's capacity framework by November 30, 2022.
Third, enterprises providing telecommunications and Internet services shall publish contact information for handling incident notices on the portal before October 31, 2022; educate customers on how to report network information insecurity incidents./.
All comments [ 19 ]
Cyber attacks have continued to increase, posing many challenges to the process of building digital government and developing the digital economy and digital society.
Depending on the level of seriousness, cyber information security incidents are classified into serious and non-serious cyber information security incidents.
The operator of the information system is not able to control and remedy the incident.
Vietnam’s new Law on Cyber-Information Security (LCIS) was passed on November 19, 2015
The new law further aims to enhance capacity-building in cyber-information security and encourage organizations and individuals to invest in and enter into joint ventures and associations with other organizations in building higher-education institutions and vocational-training institutions with a view to training human resources for cyber-information security.
A current problem with the LCIS is that its scope of applicability is rather broadly defined.
Organizations which own information must classify information based on varying levels of secrecy in order to take appropriate protective measures.
An importer might need to obtain a cyber-information security product import permit depending on its cyber-information security imports.
While the new law is a welcome step in codifying the regulations on the vital issue of cyber-information security, it still needs further detail and guidance in several areas.
Vietnam need to focus on reinforcing its cyber security to protect important information systems of the State and businesses
Vietnam’s digital economy is expected to reach 43 billion USD by 2025. However, it has been facing many dangerous, complicated and large-scale cyberattacks.
The country is among the top 10 nations most exposed to cyber attacks and malware, and ranked seventh in terms of countries with the most cyber crime victims.
Cyber attacks mainly make use of security holes in routers, security software, online meeting applications, and public service portals.
Implementing national security strategies, and developing more cyber security products and services for locals, businesses and organisations are very important.
Ensuring cyber security is among Vietnam’s top priorities to facilitate digital transformation.
information security risks can come from data harvesting systems extracting data from databases.
Businesses and organisations need to be able to quickly detect anything that accesses or queries into their databases that do not follow their information safety policies, and deal with them in a timely manner.
To mitigate the risks of cyber attacks and ensure greater protection of citizens and organisations, Vietnam is taking measures to secure corporate data and enhance overall cybersecurity.
Our top priority nowadays is to strengthen cyber security for state agencies, organisations, and individuals towards a more resilient future together.’
Your comments