Chapter VI
RESPONSIBILITIES OF VARIOUS ORGANIZATIONS AND INDIVIDUALS
Article 36. Responsibilities of the Ministry of Public Security
The Ministry of Public Security is responsible to the Government for state management of cybersecurity and has the following responsibilities, except for the responsibilities of the Ministry of National Defense and VGCA:
1. Promulgate or request a competent authority to promulgate and provide guidelines for implementation of legislative documents on cybersecurity;
2. Develop and propose cybersecurity protection strategies, policies and plans;
3. Prevent and take actions against use of cyberspace for the purpose of violating sovereignty, national interests or national security or disrupting public order; take actions against cybercrime;
4. Ensure cyberinformation security; establish mechanisms for verifying account info; issue warnings; share information about cybersecurity and cybersecurity threats;
5. Advise the Government and the Prime Minister assigning cybersecurity tasks and cooperating in implementation of measures for cybersecurity protection, prevention and response to cybersecurity violations if they involve more than one ministry;
6. Organize cyberattack drills and cybersecurity response drill regarding national security information system;
7. Carry out inspections; settle complaints, denunciations and take actions against violations against regulations of law on cybersecurity.
Article 37. Responsibilities of the Ministry of National Defense
The Ministry of National Defense is responsible to the Government for state management of cybersecurity within its competence and has the following responsibilities:
1. Promulgate or request a competent authority to promulgate and provide guidelines for implementation of legislative documents on cybersecurity within its competence;
2. Develop and propose cybersecurity protection strategies, policies and plans within its competence;
3. Prevent and take actions against use of cyberspace for the purpose of violating national security within its competence;
4. Cooperate with the Ministry of Public Security in organizing cyberattack drills and cybersecurity response drill regarding national security information systems;
5. Carry out inspections; settle complaints, denunciations and take actions against violations against regulations of law on cybersecurity within its competence.
Article 38. Responsibilities of the Ministry of Information and Communications
1. Cooperate with the Ministry of Public Security and the Ministry of National Defense in cybersecurity protection.
2. Cooperate with relevant agencies in spreading propaganda against information that opposes the government of Socialist Republic of Vietnam mentioned in Clause 1 Article 16 of this Article.
3. Request TSPs, ISPs, VAS providers and information system administrators to remove information that violates cybersecurity laws on their systems or services.
Article 39. Responsibilities of VGCA
1. Propose cryptography-related programs, plans and legislative documents serving cybersecurity within its competence to the Ministry of National Defense or a competent authority for promulgation and organization of implementation.
2. Ensure cybersecurity of its cryptography systems and products in accordance with this Law.
3. Uniform management of cryptographic technology research; production, use and supply of cryptographic products to protect state-secret information stored and exchanged in cyberspace.
Article 40. Responsibilities of other ministries and the People’s Committees of provinces
Within their competence, other ministries and the People’s Committees of provinces shall ensure cybersecurity of information and information systems under their management; cooperate with the Ministry of Public Security in state management of cybersecurity.
Article 41. Responsibilities of service providers in cyberspace
1. Service providers in cyberspace have the responsibility to:
a) Issue warnings about risks to cybersecurity when using their services in cyberspace and provide instructions on risk minimization;
b) Develop plans for quick response to cybersecurity incidents; eliminating weaknesses, vulnerabilities, malicious codes, network infiltration and other security risks; deploy the response plan in case of a cybersecurity incident an inform the professional cybersecurity force specified in this law;
a) Implement technical measures and other measures for ensuring security during information collection to avoid leak or loss of data; Make a response plan in case of leak or loss of data or risk thereof, inform the incident to users and the professional cybersecurity force as prescribed by this Law;
d) Cooperate with and enable professional cybersecurity forces to protect cybersecurity.
2. TSPs, ISPs and VAS providers in Vietnam shall implement Clause 1 of this Article, Clause 2 and Clause 3 Article 26 of this Law.
Article 42. Responsibilities of cyberspace users
1. Comply with regulations of law on cybersecurity.
2. Promptly provide information about cybersecurity, cybersecurity threats and cybersecurity violations for competent authorities and cybersecurity forces.
3. Comply with cybersecurity-related requests and instructions of competent authorities; enable responsible for organizations and persons to implement cybersecurity protection measures.
Tìm kiếm
Luật An ninh mạng 2018 (Bản Pdf)
Luật An ninh mạng 2018 (Bản Word)
