PM orders stepped-up response to cybersecurity incidents

October 27, 2022 - 17:20
Cyber information security is vital to protect the country's development in the digital era. Responding to cyber information security incidents is crucial to help agencies and organizations minimise damage, especially when serious incidents occur.

HÀ NỘI — Prime Minister Phạm Minh Chính has issued a directive to step up the Government's response to cybersecurity incidents in Việt Nam.

Cyber information security is vital to protect the country's development in the digital era. Responding to cyber information security incidents is crucial to help agencies and organizations minimise damage, especially when serious incidents occur.

To enhance the effectiveness of network incident response operations, the Government leader ordered ministries, ministerial-level agencies, provincial/municipal People's Committees, state corporations and organizations to implement the following measures.

First, they must actively respond to cyber information security incidents, including:

Actively search for threats and scan for vulnerabilities in information systems at least once every six months; issue emergency response plans and scenarios for the information system before December 31, 2022, and promptly update when there are changes; organise combat drills at least once a year for information systems at level 3 or higher to promptly assess the ability to prevent intrusion and detect weaknesses in processes, technology and people; in the case of detecting weaknesses, such as security holes that allow penetration and control of the system, simultaneously remediate weaknesses and vulnerabilities, and hunt for threats.

Second, the Ministry of Information and Communications must develop Incident Response Teams for 11 important areas prioritised to have guaranteed cyber information security according to Decision No. 632/QĐ-TTg dated May 10, 2017 of the Prime Minister; build the Team's capacity framework by November 30, 2022.

Third, enterprises providing telecommunications and Internet services shall publish contact information for handling incident notices on the portal before October 31, 2022; educate customers on how to report network information security incidents. — VGP/VNS

E-paper